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", 0x1000, 0x400000000000}], 0x0, 0x0) 18:00:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') 18:00:38 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}) 18:00:38 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000041c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000044c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 18:00:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f0000000440)) [ 471.505024][T15458] loop4: detected capacity change from 0 to 264192 18:00:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 471.607503][T15458] loop4: detected capacity change from 0 to 264192 18:00:38 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r0, &(0x7f0000001340)="8a07351eff9a5c01e4e68c6f2b75038ed1d842dc2165b622ad2680734a8be019c263f4c35b58ae1dbd2cd0094e9fe548d69e17670be14a396cb904629ac122d14486338616a62903758d03e00c293c8d8e00be38cd42517d5a54bdf8360e774487d65fd293f9cd65972818b1c6d2caff8fdcf2e27b8b92c51df231ab3a30c9a452893af73099d44bb9048abbb9632cf4c37db99986d56ffbdc0c9435b56dc9fd6516c16cbf66324e22aa377d223924e02e07639aa532ce5f915ece61f0158d98334ccb96135be032387080badc3c3d54ae502bb19eecc9136d7011dec7c415b643727f4d25d086e6eb7adac12d76c0dc38", 0xf1, 0x0, 0x0, 0x0) 18:00:38 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x15, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 18:00:38 executing program 5: pipe(&(0x7f0000006600)={0xffffffffffffffff}) inotify_add_watch(r0, 0x0, 0x94000400) 18:00:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@btf_id], &(0x7f0000000040)='GPL\x00', 0xaf, 0xa1, &(0x7f0000000380)=""/161, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:38 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 471.859790][ T37] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 472.240712][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 472.257283][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.280347][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.291515][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 472.305953][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 472.316922][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.328502][ T37] usb 3-1: config 0 descriptor?? [ 472.869737][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 472.877066][ T37] usbhid: probe of 3-1:0.0 failed with error -71 [ 472.912361][ T37] usb 3-1: USB disconnect, device number 64 18:00:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x5, 0x1a89, 0x3}, 0x40) 18:00:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1a89, 0x3}, 0x40) bpf$MAP_DELETE_ELEM(0x16, &(0x7f0000000080)={r0, 0x0}, 0x78) 18:00:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 18:00:40 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 18:00:40 executing program 3: io_uring_setup(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xa, &(0x7f0000000980)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x82}, @map_val, @call={0x85, 0x0, 0x0, 0x12}, @map, @call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x78) 18:00:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:00:40 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000001380)=[{0x0, 0x0, 0x3}, {0x0}, {&(0x7f0000001280)="f2", 0x1}], 0x40, &(0x7f0000001540)={[{@huge_advise}, {@huge_never}, {@huge_advise}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x74, 0x70, 0x38, 0x25]}}, {}], [{@fowner_gt}, {@fsname}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute}]}) 18:00:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:00:40 executing program 3: bpf$MAP_DELETE_ELEM(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) 18:00:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x200850, &(0x7f0000001440)={[{@rodir}, {@numtail}, {@utf8}, {@uni_xlate}, {@utf8no}]}) [ 473.819560][ T37] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 473.894460][T15546] FAT-fs (loop0): bogus number of reserved sectors [ 473.901382][T15546] FAT-fs (loop0): Can't find a valid FAT filesystem [ 473.981127][T15546] FAT-fs (loop0): bogus number of reserved sectors [ 473.994781][T15546] FAT-fs (loop0): Can't find a valid FAT filesystem [ 474.210699][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 474.224861][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.275337][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.299272][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 474.321472][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 474.331789][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.345469][ T37] usb 3-1: config 0 descriptor?? [ 474.899604][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 474.905680][ T37] usbhid: probe of 3-1:0.0 failed with error -71 [ 474.924080][ T37] usb 3-1: USB disconnect, device number 65 18:00:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) 18:00:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc882c6b162fc8f04}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x18, 0x0, 0x4, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:00:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x43, &(0x7f0000000a40)=""/67, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) 18:00:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:42 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x1c, 0x0, 0x0) 18:00:42 executing program 0: socket$inet6(0xa, 0x3, 0x3) 18:00:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 18:00:42 executing program 3: io_uring_setup(0x752b, &(0x7f0000000000)) 18:00:42 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x17}, 0x14) 18:00:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1a89, 0x3}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 475.799458][ T9724] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 476.209985][ T9724] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 476.221408][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.232831][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.243074][ T9724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 476.256654][ T9724] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 476.279420][ T9724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.311228][ T9724] usb 3-1: config 0 descriptor?? [ 476.879292][ T9724] usbhid 3-1:0.0: can't add hid device: -71 [ 476.885412][ T9724] usbhid: probe of 3-1:0.0 failed with error -71 [ 476.894357][ T9724] usb 3-1: USB disconnect, device number 66 18:00:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev\x00') read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) 18:00:44 executing program 1: io_uring_setup(0x752b, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:44 executing program 5: r0 = io_uring_setup(0x3a9c, &(0x7f0000000780)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000800), 0x1) 18:00:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 18:00:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) 18:00:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 18:00:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 18:00:44 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x1a, 0x0, 0x0) 18:00:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:44 executing program 5: bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 18:00:44 executing program 3: syz_io_uring_setup(0x19f0, &(0x7f0000000000)={0x0, 0x44d5}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) select(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0) [ 477.759105][ T37] usb 3-1: new high-speed USB device number 67 using dummy_hcd 18:00:44 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0}, 0x48) 18:00:44 executing program 5: socketpair(0x0, 0x0, 0xf379, &(0x7f0000000540)) 18:00:44 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000001e40), 0xffffffffffffffff) [ 478.139348][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 478.151784][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.163017][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.173075][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 478.186760][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 478.196486][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.207875][ T37] usb 3-1: config 0 descriptor?? [ 478.775422][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 478.781667][ T37] usbhid: probe of 3-1:0.0 failed with error -71 [ 478.790587][ T37] usb 3-1: USB disconnect, device number 67 18:00:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@btf_id], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c) 18:00:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:00:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:46 executing program 3: io_uring_setup(0x752b, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:00:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000002880)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@generic='I']}, 0x14}], 0x1}, 0x0) 18:00:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delchain={0x24, 0x29, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}}, 0x24}}, 0x0) 18:00:46 executing program 5: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) [ 479.517346][T15709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15709 comm=syz-executor.1 18:00:46 executing program 1: r0 = io_uring_setup(0x3a9c, &(0x7f0000000780)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r0, 0x0) [ 479.668949][ T9724] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 480.049629][ T9724] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 480.061030][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.074983][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.086573][ T9724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 480.103323][ T9724] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 480.123934][ T9724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.149869][ T9724] usb 3-1: config 0 descriptor?? [ 480.721099][ T9724] usbhid 3-1:0.0: can't add hid device: -71 [ 480.727120][ T9724] usbhid: probe of 3-1:0.0 failed with error -71 [ 480.736006][ T9724] usb 3-1: USB disconnect, device number 68 18:00:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1a89, 0x3, 0x2}, 0x40) 18:00:48 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[{&(0x7f0000000380)="8c", 0x1, 0x400000000000}], 0x0, 0x0) 18:00:48 executing program 1: io_uring_setup(0x3a9c, &(0x7f0000000780)={0x0, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 18:00:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:00:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:48 executing program 5: syz_open_procfs(0x0, &(0x7f0000000580)='net/netfilter\x00') 18:00:48 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x496c01, 0x0) [ 481.317117][T15750] loop3: detected capacity change from 0 to 264192 [ 481.426714][T15750] loop3: detected capacity change from 0 to 264192 18:00:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x20, r1, 0x137, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 18:00:48 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[{0x0}], 0x0, 0x0) 18:00:48 executing program 3: bpf$MAP_DELETE_ELEM(0x1e, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) [ 481.578726][ T37] usb 3-1: new high-speed USB device number 69 using dummy_hcd 18:00:48 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000400)="1020576e31523a6d2f32edf61871f3b242c1a22457a084910969fcc3f0aa9208c577647bc1d821f73dc6924d2f51851d0ba6b8e5535c58f689e4529e835599b0272b4411c79a560f02947f469789ce0f1dc2293a7bc19e53f03f0371699d68ac7d9b2e3f5129ab91123ea4831e36c8372e24d15a5bd7891e9e1bf71bb05e27b4fbb54ce486a51aaee752e2ce453a1f6b401e825d69a213400fbdf722f7811b615636f60d425fd6892f074bba112af321d46ca75bc6857eb4c95e067ddf71e35771e46c3aee9ec7c6a799bcfdd282e671239fb834cba50a9367fb9488c08bd593709f3221965bfbafefc4deed4c10be12c0d709a58b06de44c9532c6666ed3b1c9eccef094650fb15e102eb15921c59e3b65d72d47911f96d26bc4f11444158541c426acc1d7727efd21e41894bdce289ceafc704a8242d434240b77c907b54dfad9fad82daaa4441e2d6c0e5bb1a065fc0a154dfecfb8367e87e6d019fb03948cc050168572ed3e0776932aab220f60e6030c862f98f2f5e67c87536988f797fcfb57634f49033f9f82acd4512820807654e7b202b16828183defda9fcfd8f907235946f1b3d1bd77dd3547eb6756c1a15a6b543c13ea3fce015c796c0368b58878f482c55b9d8e8dcce682b2c9d76d52935ae1bdd0eaaf1be34725383a2db12a7f33a429039fb91f7852785929057bbde5c7b10c89ffba096a7d9664268e8e99350cbbab79ad0c48af1aa2c90a5cfa6302371664659edb853be9c101277202d646f1b6e29d6c964fd84a227ea953797e1e35870bd0d8f9a59e2b6fc488bafd1a5644250fa893a3658f12ede6f826cbe65fa79bbfe2c51ed3e058b1909c8ce1780171085322768b29ad575857392627b096e2a5809dcc0dc4a732c22554428bb86c5ab893b1b866d25fa16a4881eac8526879aca914c86bcde4bc9509bac322f33a96042bb8126851503249532cb0dad529c6f0f31b9900c178144bd1c1e22eab543e5076c6dcfb53a8498e6cd886eba7d59eaa404dfd87703d4e9198a5351718b751a35c0f8bd9244a103b78da30d1c312a51a4e5a37a0a4fefa71e06adf2adf2d56abe6f9e282ba8e261eb913689bc553bab923f364e9922916e8a9e74fc408b9c5e60040d1f95510fbb6f93f9e943cd1da4e613336a315f920c63b3bf28a8371304efcbb9bc7f5e37d0020c079d70a8af09ce56d9ce038a845894ccaa9e0a8b5503bf0bfa4232ef2a1a1d3563ab8474f2ec89962c948f6fe9e7bac7cce77ebd733a47d030cb93fa8bfc78ff37cdf76a4ec953ae695ec8addd76a620dcfd5a24d30a7474d68e68929e30846ba20bf3d187894c3e3ee90e038304c3456c14d9b25404c73e049a0775492bf7dd122d831a7da6df969ccb377db0bb317647083e6ff38ddf3437d8d0a1d119fc9b925bb6c00796454c42794170424a00b51d348051c59a6ce1017bf7dea36d5e9473c70853a8182cfc129a0940707922211d8e114c9e68004b181e2b688bbd9b27144a25763ab73b6eafffdecac4633f116f0c91370760341f0fc561b686179ef30a7b0605b323cd8ec7595326389e126bf4f031c07369c068269d59f434b1e8399b51cf2dfcbb4919f9b295f08c3b2d95569010f490611660609092131211d14fff64c86216e4f8545fca2475b0874504ae08735bad9ec4dde89fb7b9dcbbe6288c9b63549d8e08a1c5c4cd6e1eb8394d3ab98b0ae10cbc74a7f183e479097856a7e71d47dcad0da3ffe1e47ba26c803c05cdb448c507e1fa1d09f0329454434f22cc2ec50abd1f2bbbf4b61b6a22b5a8cec28e60204a52c772c78e4495d77dcbc2ca861cc1d5cb25720d927823618a7db75d7d4b39af8499ccc7d58dd85646ab90d70c6a36426cdf238f22ff52a547ef7886d69b906f77332c42437fcd7cf0e31e8b3dbb88ab45d89a1a14515ea51d4ce5b76edb6f71936bb7f2013588232f48f5b1466c6c06a8f6b6c0bfea63bf4f5d35dcdd6c8c5cbf57388e04a5acfbce267e9a5d2e9976754aca91f0242075c49177a89bdb6706b0b111de295c46b3944ca11eb122647bf59dabec293c11708891c79627b8585d9903e3f7b3f7893bee9df9bf2e7ef66ba3e90836606ccc33d0443d26a49182247d3e6f92db70781b6bb80afd37021219b54b59e5b7cea93a75204d7df001cf7f32f5ba2486554cef8e57b3c19315ea6d8890b081cb1249581de9e09b7dda218814d0c07a83dba31a3e9cab3a77faf218462065044585490acc8eb4ce47fff81676a3b8f430f3194e40d94a2f46dd31d6bbbaac6db386cacd320e179fdc0356f48d475491f8b8bfbd399114ee0b16f39c6da606c13272aeab454dd706fde4d46d51c015e2284ba7fee664a75b521723c7cb6f571758c809eb0c3d320fd1658ece96840f2c48763bbe68ce0d7ead4eff3494770b640562fa581f893cd2df258c25e31b3a04e15eeefaaa23e396c42373a27692b579e84033b6d1442e09b4bedf0dcb03799a49727e9d82d0a80589bb767b79dc0993088cf8bd1f19c17e58e4a0d7f69eea109f93898f6301bcb0d28e8fd821f8ba8792a50e863cc8103fcc7522a7e130823465441bc1afc4d0fde35a872f2c13b1a4f526482457446a5f833d02d413642a5636d9da8c59ef5ae29451bd184131976f109b16cef60f9bd9906727839d2e823bb1485d4899f4d99ebb9dd8221aff55e60a1b19493af1ee913945c678353a6edb4f0bc8f557d624e4713426404d755037e27af0eeed5fea7df6e2869bfbf7b19b972545facf2bc870cb5911d4a6309f247da71c590b4e867b5a1dc093a04c690d9a8d862aa1143a823f4b2b351c9adbfaef441d3e58df00c003508033faae21b91f943b01dd4fdf8b374d355457969569bf6ae7422ffa7844e1f0c1262c8bbb32ef4e408c09c03872a1bc609574a28a144db10411212b98e3692aeb29db05ef6d7f1ce0fc2336883fbdc3e0c590ea66e2a13278ec06eceb758f667f056d9ba68d156e41b3dc6241a1619556b81f6c49e124df144fada76d4be364d0f00efb561ec45c8ba525aad12fee7ad5b0144eaf4d4dfaa17a3279905678dd26ecf3da7ad8c2ae3658e5e52c668c2c5d0d999a3eb461981595830ba56be3694a9de40569812afbc931c8388e315a28b94256a764642162f37708e6cba573224d9e1bfac298dd3c6456ea1f3c92914db92d39a60d9c7f4839cb77791a376713b87df6317d0445974304a2ff3a52d827184ca351c67982287f483f0f5fb0f1c61bcbd966c3dee0fa2850103c782693e024569e37efc195eaa75f15469317982de244b1afa76c733bacae3504c25d07ddcc61bc917ed8aeb2d2b141513f3cfd9dd0acc80985b0551fcffabcaff2743106e1f8e2762faf1a0d2b60cc9de09986016c4c560a7de974ad6f785069583fda733df2e8c883e8c3d3e3c86d36ea9da51122b7e09682159268bc503f037774b1000c5300a47e6ffe0ad28e9c4f44afa38e007071c3f0758d3b256f85dded3abda1818ccf7c747a1d41c9bf4064111f9982ac5670d8e215ac7eaa8c6ce28486434c45679e70e1ccb4f6869e47d9b076d757c6ef68a7825ca8483d90a29c5d8b6c8d5405f346685f7f368531638d7c31355fc2134354ec5d9ec7224e7408802b09029ac2fb788b4185fd54339e97b8d2445373c4a30845894f1b15497350c9d262c362fede8da996b19179048e35c5c5ae8711c610dd4a9e6ceab4af0121dd778933f127435e73441a3c61fff535f4d364f22c0d839ea91ffd5a99352105108256e797e1efe11fca9b78bf90a3e94dc169c59c19f7d8350204a4d007fef576a76085d6b2a2477923470a54c23d2b7807da300679efa73294dd40bdaff0ddf1a545fa4620ddbba41454a28ad216f229d19f8e918f88259a39d6a8e6ef6a1194009a6f33c0a51f2630104df9dc06fc38fd636a3938411848a47aeb4e6c84733f3ca234645f89a65be3f5bdddc19b470841f5b62b380b5cc7935a48674e6af2bfd759eea218bba8b90ebf923f2b353faef34e57a1b5bcbe11687dea533f53db294920fe81ad6bb1a4c4d288e78dc28e8830e61b41582f5c91ef2df4951c04c9889eecc6d3b418d756cdc6ec32f4bf61d1ce3ea4feca8e063c543f438d723c6d5b87b48948cb45735f3e0aa5b9af7bb41ca8af382b4990964d92064827f5956546549f362759ab76b0e4b4d75612583e32744531329fbb27f7ce42170511722f9faa0dbb29e8f01e564ca109a08a4cd17778a7b2469d2b5aa419c2c41adb3c6e320344dc8079570b0e5e0dba70542654af3911bc2713572735b898cc9e39df7d70eafe70bd39ddc08847ae4d79ebbcc822e3cba3a5d523861be91f1a2d639f8982c5e37742fab480d7e4d42408a7b27c11595a064512f09dbd658c6a1eab0dbac6f14093bf3f259e8ac55f04899b18035100a1e7ede955ee0e4c0c101889292019f4be3a20349f97bb1025b326f8aa81fabefdafda17080534f594e83ba7fc3f8ddbd1d866fa431947c15293772c09f440a0da274eecd38afdae591fee2d0044877f6b12360ad63a2cff23804cb52b5a2bf4dcb0fd3836f6141cce6987573336b6bba7365875fd2f6b120ba416fa466603049c3ac8ad86993e53a73b3ec18f5d53ce5f3f93357f4a2540928254bdc489309bc8e1f677528d0d1202ddc16f4a9cfc10bee86ec95ad14b7cc3ed8edb6458844a1b04e9ace10f5566886cfc6ac9ad6e68dd12c48391c88f708ba9ed4456c85a21537406ca204fbaae8dbb1472b9477dabc88dc7ea3217ceceb3864624a746b72a5c79cb01586e4204b0ae700d0e583ff4350646778fb0d2030aead1b3d132620fabe9732c91672b15598d0190ea695854ac9fc795bfc113f488d31370e6ab33db32728e23b85482c5aca5d3ca07323d619e5cd4b99d774ecf3641acb1bb88746e9aad6b6666672a5af3b89c517eb3f917bbaf64150f8dc3da09005d46b90405f460a501e67c3984ab5598165268a2edb78de5050e21e5d848f861ebba76ac0503068a8824cccddc2b88b978ea230bddcfd2f03aa1ed0271c2ea59ef1aad7c114141f1872af0529f8d93c9fe010a0402920644ecdacb375cf66f28f7493c4026161a24afefdd36e15235a6852ab388cb9ffed4ee5ed62eaec768fe103ac769808e67efa11e1267cf669a52bf26a21830b69a19b3a9c1e1b6f1522a992cd6313c0a98dbdc6af1ab9af11e384d703c53f84586eee428ac684cff3a6134b40cfbc2b35af2b2b8337d27a05ea67f212aad9d736ef1b2b3c2431ae2c93540eccd5933df488b452aa8abc45bdf4fcbd6d1d57d32a9bbe10afd2178500d1ab146d27872f6c695c76c1b448358c344a85a8646dfd6cdc7a04500c4fbd63fcdc51f47a942c8dfdcd1d8981e943268e78eebfffd2b71153d945e5ff8cc00abd56ea3454effb97fcf297197021f402b71b122506438b8789967845a5c64ab32a9c444670e089fcccef273730a8a0432aeea87a68f0e8555ad5a2f39037674d58a6349b3e3249481f44b41ece441b1a4296d5bd7c3793f77d6b8fbf05de393532910247f26634bba84c694b917473e5e4e9562da4599191d5c5e6d32811c269b0c7ca33897744cba8db904786616d9bb4ed4eefb89a78a4121dde4cf014bdb26a5cb2667e2d7f9ed3af30b220447cb903a424f440d4e68e58f02d5da7baecf45b0029c0834e4291c1ce772712837d2dd0fab9bb02bcd1e968e", 0xfd1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000033c0)=""/4096, 0x1000}], 0x1}, 0x100) [ 481.979409][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 481.996034][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.010331][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.021678][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 482.036574][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 482.048540][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.068702][ T37] usb 3-1: config 0 descriptor?? [ 482.608780][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 482.626244][ T37] usbhid: probe of 3-1:0.0 failed with error -71 [ 482.655874][ T37] usb 3-1: USB disconnect, device number 69 18:00:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:49 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 18:00:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:00:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 18:00:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x8, 0x10, 0x0}, 0x78) 18:00:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 18:00:50 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 18:00:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:00:50 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='net/sockstat\x00') 18:00:50 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000}], 0x2, 0x0) 18:00:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={[{@gid}]}) [ 483.538374][ T9487] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 483.908395][ T9487] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 483.919613][ T9487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.931191][ T9487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.941481][ T9487] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 483.987554][ T9487] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 484.000919][ T9487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.020755][ T9487] usb 3-1: config 0 descriptor?? [ 484.548328][ T9487] usbhid 3-1:0.0: can't add hid device: -71 [ 484.554512][ T9487] usbhid: probe of 3-1:0.0 failed with error -71 [ 484.564758][ T9487] usb 3-1: USB disconnect, device number 70 18:00:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xe0, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:00:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1a89, 0x3}, 0x40) write$FUSE_LK(r0, 0x0, 0x0) 18:00:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:00:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:00:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0xb, 0x0, 0x0) 18:00:52 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f0000001540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) 18:00:52 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x0]}}]}) 18:00:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) [ 485.340765][T15879] tmpfs: Bad value for 'nr_inodes' 18:00:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000200)) [ 485.425418][T15879] tmpfs: Bad value for 'nr_inodes' [ 485.458106][ T9709] usb 3-1: new high-speed USB device number 71 using dummy_hcd 18:00:52 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/pid_for_children\x00') [ 485.818058][ T9709] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 485.839408][ T9709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.865144][ T9709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.888574][ T9709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 485.916706][ T9709] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 485.952721][ T9709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.980801][ T9709] usb 3-1: config 0 descriptor?? [ 486.518219][ T9709] usbhid 3-1:0.0: can't add hid device: -71 [ 486.524968][ T9709] usbhid: probe of 3-1:0.0 failed with error -71 [ 486.540567][ T9709] usb 3-1: USB disconnect, device number 71 18:00:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000200)) 18:00:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:00:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "237512e4858cae0d69db22c4d2530bf3c720a1d30ca5f5289f13d7f1816c5a3555791af74968c22610ede00f0a586a69da477a9d48d9aa0d559573ebc8d67a0f0d1733db769a3d3ae62d34bff97ada3e"}, 0xd8) 18:00:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:00:53 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:53 executing program 5: shmget(0x2, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_io_uring_setup(0x19f0, &(0x7f0000000000)={0x0, 0x44d5, 0x0, 0x1, 0x33f}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) select(0x40, &(0x7f0000000140)={0x3, 0x7, 0x5, 0x6, 0x3, 0x386, 0x7, 0xff}, &(0x7f0000000180)={0x1, 0x3, 0x8000, 0x6195, 0xffffffffffffffe0, 0x8, 0xcb94, 0xffff}, &(0x7f00000001c0)={0x401, 0xff, 0x2, 0x0, 0x0, 0x9, 0xdcf, 0x82}, &(0x7f0000000200)) 18:00:54 executing program 3: open$dir(&(0x7f0000000440)='./file0\x00', 0xa4140, 0x0) 18:00:54 executing program 1: epoll_create(0x1b) 18:00:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, 0x0, 0x0) [ 487.330812][ T38] audit: type=1800 audit(1620237654.160:34): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15065 res=0 errno=0 18:00:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 18:00:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00'}) [ 487.427883][ T9709] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 487.470351][ T38] audit: type=1800 audit(1620237654.210:35): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15065 res=0 errno=0 18:00:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev\x00') read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 487.580947][T15944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 487.630613][T15944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.657316][T15944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.789223][ T9709] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 487.816439][ T9709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.851697][ T9709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:00:54 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:54 executing program 5: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 18:00:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) [ 487.903044][ T9709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 487.921507][ T9709] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 487.939265][ T9709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.988494][ T9709] usb 3-1: config 0 descriptor?? [ 488.046842][T15955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 488.095723][T15955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.115129][T15959] mmap: syz-executor.5 (15959) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 488.130793][T15955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.537690][ T9709] usbhid 3-1:0.0: can't add hid device: -71 [ 488.545566][ T9709] usbhid: probe of 3-1:0.0 failed with error -71 [ 488.566522][ T9709] usb 3-1: USB disconnect, device number 72 18:00:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x13, &(0x7f0000000000)=ANY=[], 0x10) 18:00:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xd, 0x0, 0x3) 18:00:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000005c40)=""/137, 0x3c, 0x89, 0x1}, 0x20) 18:00:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:00:56 executing program 5: syz_io_uring_setup(0x2630, &(0x7f0000000040), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff4000/0xc000)=nil, 0x3) 18:00:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x6, 0x1a89, 0x3}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 18:00:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x12, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:00:56 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 18:00:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @sco={0x1f, @none}, @llc, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x8001}) 18:00:56 executing program 3: io_uring_setup(0x285c, &(0x7f00000022c0)) r0 = io_uring_setup(0x73eb, &(0x7f0000002340)) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 489.527558][ T9735] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 489.937755][ T9735] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 489.957965][ T9735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.980750][ T9735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.996991][ T9735] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 490.027431][ T9735] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 490.055819][ T9735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.091346][ T9735] usb 3-1: config 0 descriptor?? [ 490.847531][ T9735] usbhid 3-1:0.0: can't add hid device: -71 [ 490.853721][ T9735] usbhid: probe of 3-1:0.0 failed with error -71 [ 490.871810][ T9735] usb 3-1: USB disconnect, device number 73 18:00:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:00:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8000000}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:00:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}]}) 18:00:58 executing program 3: r0 = gettid() sched_setattr(r0, &(0x7f0000000000)={0x38}, 0x0) 18:00:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:00:58 executing program 3: setreuid(0x0, 0xee01) io_uring_setup(0x51c1, &(0x7f0000000280)={0x0, 0x0, 0x4}) 18:00:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/cgroups\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x38e, 0x0, 0x0) 18:00:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:00:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 18:00:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)) 18:00:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 491.767728][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 492.131025][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 492.156893][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.186741][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.198143][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 492.212969][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 492.223518][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.240892][ T8] usb 3-1: config 0 descriptor?? [ 492.987066][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 492.994520][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 493.004353][ T8] usb 3-1: USB disconnect, device number 74 18:01:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:01:00 executing program 3: prctl$PR_SET_MM_AUXV(0x1e, 0xc, 0x0, 0x0) 18:01:00 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() 18:01:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xe38, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x428, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "f48230b301e9a7ee42b87fd4fe99e84b714695570a998877fef94260094e241e5209a55c08e8cf464405946e222006382203ffe35a88a6a71f456547bc35353811cb4e1f90163e94bcc651dc36305ae2be951bf3eaf6ef9ad206d8bd9b73cb7f4839396c3a600ada8f7d098addd6e526a01b308e07379b5ae1ccdc590f69f5192c504235c8b1b5a084440cbab86a0e6f82f20984776372128f73307a858607b2267dec1cd67ddda588d1a1e5fef7493837fc36c79aa571fc34f5a344b8966f2f1f9947c3035dfb90ad6661bfbb"}, @NFTA_DATA_VALUE={0x29, 0x1, "68aba6a20b45e4b8ee2db54d70f4a7fbc0ef5beac0caa1a6e766667d50bef38f67d328fa36"}, @NFTA_DATA_VALUE={0xfd, 0x1, "2edbf5a171524ba10f504b5c919f9a01d036a083a53e6c4f5ee6eb1b1ae66b916da394832e7c06b337ee0d5688fa0d901ec7cb2bc23f3b7e0ee51a2ca38951ffe5f8e56da1baeac0d43ed788af53653928ddb7453adabe758b9b88aae08751592298f06f125ec6a780065dd02ccee7bfd3a57650f7cb6bcaed2207644d6ea9371dd90aee13dd827454e086a653dcb8ae9a13e746b3ad2a6b3246d0c06b7c0c30b3a8559df27578d4abdd74cec6602adbecf0d6cb413cd5a1115af19d000eb3d3b6ca51b3bf2d7b29e78331a116cfcf9d4d501fd699d03ec12574c20fd56f1f0aff0e434e4890e151f85b9d575822dde13b12aa9c9446f3b721"}, @NFTA_DATA_VALUE={0x49, 0x1, "b880ed19d70e7c66e8c001408f09cb7969c6c514b77158c6a4c1a142f38f7ad4b029375fa2b4905e655325a4484bb8301f413d81634accbe2c82f4771f9babc9ebb0867a67"}, @NFTA_DATA_VALUE={0xe2, 0x1, "e9a8542cd1674f541d9268c0daa9301d387c47e76adcdea0ed291c76f45f9921932cf997ef7aa28af88a5cc0e9e010acf54a21f06430ae5e1f3e10705f5c44286b8591ad3701349395bbfcc7d99b9cbcdb8bed84fdbaa3fe844769f0bc0f7c011a4d3ba14ca7924c8d8d487fad6978e89a45a86415582a36d61bcb53aa9b38c88226aecf0344d1884f1a0e480641939b962ffc20df8318d18c395483cee02d2d1d45f211148485a6c15b1f548272e1235e0a495acd57e8277a39cfc558077fd4a4990143ee4887be480ab05c8b05b9d7ff38ea13b18ac971b201062d0681"}, @NFTA_DATA_VALUE={0x61, 0x1, "92e30544c0d6431d41525a95bcacd71b012cdc4e0b975fd3695bde9ceb6abc7b1759a362eb9f7dd9f0bf4e1b6da28308c708c0a7683477112606c2bcd27d181d0b5f84de59797b5de07bb408ffbd663b83fdd006fe3d94aef73799a602"}, @NFTA_DATA_VALUE={0x39, 0x1, "4ba423296350dae01f4aa47fe2586cb70e3ffb47ebc43498dfbda6cfa7cfd63863d0606242f1c32ca1c99032707538befc1ce12c96"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x9d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "892616d2446fed8cc5329711a900e8976be659729106e957def5728b68b540567a36ce5cc8572930f24055ec07f5b9b25525674d89810396d8dcc70e2f06141da997b72ef0d7726aacb8e9c76012b24515bada6b0bc8d996cddca1c9a0629968fec549c27365d3db51d6c54e14e8a7629646a0bbe6e5cbc24d4cb5ae0564bade34aae0daed2cedfb8d76daf9442fa4857c581327a691276ffce0c84b61fa0c3ad973593dffa3efb5bb7ba1ed9c9774910ccff6ae7762874c4282c3a287"}, @NFTA_DATA_VALUE={0xb9, 0x1, "c6ce6a40d3ed19faf2061bc05f846955a927923332523772cf245f6538f1800104a788f3138d307c209b1377765570c3fc7f5d3a3382f2d5eb80dc0ef45dbe8318113a01cf9935533424fe29e404b3beae2c68a41fd5fafc497ec1872a3574df338af11ee6b519f49c2d527c81f98a2f4670463b51c5344680701792d0da704c47e83f1ad6acce0d6d9ac314e0305e30cb17299a092987221d3108bf9ea28c28903e7fb33bb1ee491c349f1923125804387b359050"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x99, 0x1, "5cf2a9f8863699dd3b2ae819377cde4a53055dcf7d30c52e1df05d35c7c05ad18cdd3a227c854820a4421f3f30ad67a0d7ed0841b664fadfdcb881ac8c8127627f9bfb1a0f64fd5169d5d3266564df67c1c16135d12f7a3efca668041d0b08984fd73d0a585475d0213f4d3cdc08a9c5e6fbba7c791b5f1917e7b92097a79fda312001fb00a090bc7716ee04afeea1ac976299d7fd"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "b69cd30d9c"}]}, @NFTA_SET_ELEM_DATA={0x790, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "dd5c311ad3880ab49def1810339311e81c7426c719a48a72afd6e880dab02d686d76e53dbb924b84325a109e2eaa2b241ce1c77222661656d6d7a19d3f6ece5c56b06ffefaf0ed70fed412e7ea122d9b2aab1ef966"}, @NFTA_DATA_VALUE={0x701, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 18:01:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 493.613453][T16091] debugfs: Directory '16091-4' with parent 'kvm' already present! 18:01:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xc, &(0x7f0000000000)=ANY=[], 0x10) 18:01:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 18:01:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 18:01:00 executing program 3: setrlimit(0x0, &(0x7f0000000040)={0xffffffff}) 18:01:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0189436, &(0x7f00000001c0)) 18:01:00 executing program 1: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)) [ 493.956968][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 494.357932][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 494.372949][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.395253][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.431176][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 494.445929][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 494.469667][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.485165][ T8] usb 3-1: config 0 descriptor?? [ 495.226845][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 495.233180][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 495.243538][ T8] usb 3-1: USB disconnect, device number 75 18:01:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:01:02 executing program 5: r0 = socket(0x28, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 18:01:02 executing program 3: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0xffffffffffffffff, 0xfffffffffffffffb) 18:01:02 executing program 1: prlimit64(0x0, 0xc6eaa1cf12632cce, 0x0, 0x0) 18:01:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:02 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={[{@size={'size', 0x3d, [0x25]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2c, 0x35]}}}}]}) 18:01:02 executing program 3: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil], &(0x7f0000000040), &(0x7f0000000100), 0x0) 18:01:02 executing program 5: prctl$PR_SET_MM_AUXV(0xe, 0xc, 0x0, 0x0) [ 496.039859][T16167] tmpfs: Bad value for 'mpol' 18:01:02 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x114031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000010401010000000000000000001de7000a00020000000000030000000500010001"], 0x30}}, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) dup2(r2, r3) [ 496.066317][T16167] tmpfs: Bad value for 'mpol' 18:01:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f000001440000000000000007000000441c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:03 executing program 1: r0 = socket(0x28, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 496.146706][ T8] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 496.517339][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 496.528537][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.541325][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.552074][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 496.566061][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 496.576013][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.591778][ T8] usb 3-1: config 0 descriptor?? [ 497.078238][ T8] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 497.085605][ T8] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 497.100169][ T8] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 497.290351][ T8] usb 3-1: USB disconnect, device number 76 18:01:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:01:04 executing program 3: syz_io_uring_setup(0x2630, &(0x7f0000000040), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff4000/0xc000)=nil, 0x3) 18:01:04 executing program 1: prctl$PR_SET_MM_AUXV(0xd, 0xc, 0x0, 0x0) 18:01:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7bc}, 0x40) 18:01:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6cb, 0x0, &(0x7f0000000080)) 18:01:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x44080) 18:01:04 executing program 3: r0 = socket(0x2, 0x80003, 0x8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4001) 18:01:05 executing program 5: prctl$PR_SET_MM_AUXV(0x2a, 0xc, 0x0, 0x0) 18:01:05 executing program 1: r0 = socket(0x2, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x28, 0x0, 0x0, 0x0) 18:01:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x0]}}]}) [ 498.316668][ T8] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 498.696563][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 498.707934][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.721389][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.734399][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 498.749053][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 498.767558][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.794954][ T8] usb 3-1: config 0 descriptor?? [ 499.277690][ T8] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 499.285129][ T8] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 499.313349][ T8] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 499.484785][ T20] usb 3-1: USB disconnect, device number 77 18:01:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0x400c4808, 0x0) 18:01:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci, 0xba}) 18:01:06 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000240)={@remote, @dev, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @local}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 18:01:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x218, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 18:01:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:07 executing program 5: request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0) 18:01:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x8801) 18:01:07 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4) 18:01:07 executing program 3: syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x8000, &(0x7f0000001240)) 18:01:07 executing program 5: syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) 18:01:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x6c9, 0x0, 0x3) [ 500.456083][ T8] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 500.617694][T16306] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 500.826967][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 500.847451][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.872176][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.894593][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 500.918104][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 500.928942][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.956694][ T8] usb 3-1: config 0 descriptor?? [ 501.237428][ T3225] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.243759][ T3225] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.457713][ T8] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 501.465636][ T8] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 501.506818][ T8] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 501.660214][ T8] usb 3-1: USB disconnect, device number 78 18:01:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x21, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:09 executing program 1: prctl$PR_SET_MM_AUXV(0x1c, 0xc, 0x0, 0x0) 18:01:09 executing program 3: setrlimit(0x8, &(0x7f0000000100)) setreuid(0x0, 0xee01) io_uring_setup(0x51c1, &(0x7f0000000280)) 18:01:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0x400c4808, 0x0) 18:01:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x20, r1, 0xf01, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x657740588e09490d}]}]}, 0x20}}, 0x0) 18:01:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x894b, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 18:01:09 executing program 1: syz_io_uring_setup(0x2630, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff4000/0xc000)=nil, 0x3) 18:01:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd74, 0x0, &(0x7f0000000cc0)) 18:01:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20004054) [ 502.635835][ T37] usb 3-1: new high-speed USB device number 79 using dummy_hcd 18:01:09 executing program 1: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) 18:01:09 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "0e53099e827ff9ba996df258a6118b55f6aa79b833592175f99cdd1970938f362162c667880b9c4fa23950ebf51f08f9d8cf4e7862e3c94c77ee89a302994eb5"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) 18:01:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x16, 0x0, &(0x7f0000000cc0)) [ 503.006683][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 503.040624][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.057742][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.069336][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 503.094262][ T37] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 503.122745][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:01:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 503.175090][ T37] usb 3-1: config 0 descriptor?? [ 503.667526][ T37] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 503.675005][ T37] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 503.704268][ T37] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 503.937408][ T9724] usb 3-1: USB disconnect, device number 79 18:01:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r1, 0xf01}, 0x14}}, 0x0) 18:01:11 executing program 5: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x1204, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 18:01:11 executing program 1: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 18:01:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0x400c4808, 0x0) 18:01:11 executing program 5: setreuid(0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x7}, 0x40) 18:01:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x2, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f000001440000000100000007000000441c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:11 executing program 5: getitimer(0xe53276ad2262c046, 0x0) 18:01:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd7c, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:11 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @local}, 0x14) 18:01:11 executing program 5: setreuid(0x0, 0xee01) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 18:01:11 executing program 1: r0 = syz_io_uring_setup(0xbf2, &(0x7f0000000180), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) [ 504.975660][ T20] usb 3-1: new high-speed USB device number 80 using dummy_hcd 18:01:11 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) [ 505.346338][ T20] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 505.365646][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.379690][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.391580][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 505.418436][ T20] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 505.436521][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:01:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:12 executing program 5: r0 = socket(0x28, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) [ 505.464567][ T20] usb 3-1: config 0 descriptor?? [ 505.977534][ T20] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 505.985172][ T20] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 506.016205][ T20] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 506.259137][ T8] usb 3-1: USB disconnect, device number 80 18:01:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000200122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0x400c4808, 0x0) 18:01:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xa, &(0x7f0000000000)=ANY=[], 0x10) 18:01:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x29, 0x0, 0x1c) 18:01:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x7, 0x0, &(0x7f0000000cc0)) 18:01:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:13 executing program 3: move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000080), 0x0) 18:01:13 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000680), &(0x7f00000006c0)={0x9}, 0x0, 0x0, 0x0) 18:01:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f000001440000000000000002000000441c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:13 executing program 3: mlockall(0x3) mlockall(0x0) fork() fork() openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) 18:01:13 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {0x0}, {0x0, 0x0, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7", 0xaf, 0x3}, {&(0x7f00000009c0)="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", 0xfd, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.{!'}}, {@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x0, 0x36], 0x2d, [0x35, 0x0, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x9, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:14 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) [ 507.178038][ T9724] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 507.281507][T16543] loop1: detected capacity change from 0 to 264192 [ 507.546055][ T9724] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 507.572474][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.605939][ T9724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.616403][ T9724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 507.632171][ T9724] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 507.643183][ T9724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.680059][ T9724] usb 3-1: config 0 descriptor?? [ 508.170884][ T9724] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 508.181878][ T9724] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 508.224652][ T9724] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 508.451516][ T9724] usb 3-1: USB disconnect, device number 81 18:01:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xbf2, &(0x7f0000000180), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, r0], 0x2) 18:01:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2f, 0x2c, 0x35]}}}}]}) 18:01:15 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {0x0}, {0x0, 0x0, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7", 0xaf, 0x3}, {&(0x7f00000009c0)="9c9c56bc906a0b05a467343ffb58d381337055ac341ec6da0bcc15dbe7658106e56931ee749a6bb19ecba3917d93bc6cbe20a103fe184efe01043fec80fb20004c55c39ca9a95086403b89397a07f8ec52dfff76b2a9a1fdd90d55a7710ea6b3813d912abe65f05e81fb03868c2ca8bb1d75e051d4e523a506bebecda6942f3137ebe123757f04b587825e79cbc59aef43b77f6d105d468f1ae9a0d6fc45fd86c67e15222061f1095f4be1915a0c81a18f4c1298f6d8bcf8a98d741e4783a80f9a18767369309959ff9a40d495d15ac8e597f1e6a58741f79196e6f87249cbbf7daa8cc2a83283d55d5fb8dafbdb8888ca762bf9bb5432fa8d1cadd680", 0xfd, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.{!'}}, {@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x0, 0x36], 0x2d, [0x35, 0x0, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x9, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 509.080614][T16590] tmpfs: Bad value for 'mpol' [ 509.091168][T16590] tmpfs: Bad value for 'mpol' [ 509.111899][T16594] loop1: detected capacity change from 0 to 264192 18:01:16 executing program 3: socketpair(0x1, 0x0, 0x1c000000, &(0x7f0000000000)) 18:01:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f0000014400000000000000070000000b1c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 18:01:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x31, 0x0, &(0x7f0000000cc0)) 18:01:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000000080)="7e93d7ebdb6d12557b63629883465173", 0x10}, {&(0x7f0000000100)="0a690ba1593829437ae736de0ab27b6180d7fb181fe6098b337dcb2919fbab312e1002f8dbc57ee7952c6f5723272fb129be650d839fe10dc37f70ab4eae6a74c433fb", 0x43}, {&(0x7f0000000180)="8b378878e68ca014c7c80f5d8938c1c26558482b6b7f2af618d7d6c7fc4c8b4b1ea076b3e0e556757f6282b006136cc42c5ec6ebddf92cbe308325324d5e9849650478b3b43caf02ca2bee2d697d2776dbe7722c6bdf5f22e93d7128f08e93526ea92a86192c7b53f2bf3bb095bd06da65e6d554b438f89b5c693fa5a5500c2e3cca490220438391207d0134ba724060a5903db4dcfe29eb6ba069334fb600fe2f710ce437206a6c50f4c6528e76fa0b0b16e05124db22f8449402c6f162fefc2c55aa06b17312b17398f47ec1cf76a6573d202dda86b7d282f28831036c8909e4a7fc", 0xe3}, {&(0x7f0000001280)="efa142fff6926946321b1500072c6e2e66e3ed58c2ee10344e24c7a6aa6d3a026a0c1efc8176f9dad909a603ed7c37a0d40be1a99cac96d4b5d02898d9fff0882fad9dea4f6214a267d58ce35cbc668474cff5dac20ae330340d9b11e8fb71670fce8880a9ae74679dfcaf30827f0880d1af0a311eb60366fbc5aa21eb5a01b755e39668508458e7743eeb6fd5e2b7642cf3dbc6ce78782d8d837bc38636fce8509f0a9055ece8b1928262d95295f5d712", 0xb1}, {&(0x7f0000001340)="608212740d1aec42d163dc9e90db52ab3af2bf56bde796d2799a714211f4ac43f4d06561c3e1a7076b1360f39b98269901c07a015e2f96e413700654b73ced8c8bd86eef2896834d76d9470c6464090b5e82a490d13e2268cbfa79e5b7a4805d74a29c8704d4083b8e4da338c304d249c198b98832616b0cd9de1fce30c4e6aefbc8b8c058fda6f04de1bd13c5d86ffb5666927128431be700156eed07aba13be28a0a130d703179cb33f070f7c813ab127596ed3c8c08f25b7050f2bdb6e6befbf01741b2e780b6c2102db5", 0xcc}, {&(0x7f0000002440)="9d53c82c50013cc5b840", 0xa}], 0x6}}], 0x1, 0x0) 18:01:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x32, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:16 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {0x0}, {0x0, 0x0, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7", 0xaf, 0x3}, {&(0x7f00000009c0)="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", 0xfd, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.{!'}}, {@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x0, 0x36], 0x2d, [0x35, 0x0, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x9, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:16 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@gid={'gid', 0x3d, 0xee00}}], [{@fowner_gt}]}) 18:01:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)=@secondary) 18:01:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x1}]}) [ 509.999496][T16627] loop1: detected capacity change from 0 to 264192 [ 510.087346][T16634] tmpfs: Unknown parameter 'fowner>00000000000000000000' 18:01:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000046c0)={0x0, 0x0, 0x0}, 0x2002) [ 510.130302][T16634] tmpfs: Unknown parameter 'fowner>00000000000000000000' 18:01:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x13, 0x8, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 510.270160][ T38] audit: type=1326 audit(1620237677.113:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16626 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:01:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd74, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:17 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {0x0}, {0x0, 0x0, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7", 0xaf, 0x3}, {&(0x7f00000009c0)="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", 0xfd, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}, {@nodots}], [{@subj_role={'subj_role', 0x3d, '^.{!'}}, {@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x0, 0x36], 0x2d, [0x35, 0x0, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x9, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:17 executing program 5: mlockall(0x3) mlockall(0x3) prctl$PR_GET_THP_DISABLE(0x2a) 18:01:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xe38, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x428, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "f48230b301e9a7ee42b87fd4fe99e84b714695570a998877fef94260094e241e5209a55c08e8cf464405946e222006382203ffe35a88a6a71f456547bc35353811cb4e1f90163e94bcc651dc36305ae2be951bf3eaf6ef9ad206d8bd9b73cb7f4839396c3a600ada8f7d098addd6e526a01b308e07379b5ae1ccdc590f69f5192c504235c8b1b5a084440cbab86a0e6f82f20984776372128f73307a858607b2267dec1cd67ddda588d1a1e5fef7493837fc36c79aa571fc34f5a344b8966f2f1f9947c3035dfb90ad6661bfbb"}, @NFTA_DATA_VALUE={0x2c, 0x1, "68aba6a20b45e4b8ee2db54d70f4a7fbc0ef5beac0caa1a6e766667d50bef38f67d328fa36671b4c"}, @NFTA_DATA_VALUE={0xfd, 0x1, "2edbf5a171524ba10f504b5c919f9a01d036a083a53e6c4f5ee6eb1b1ae66b916da394832e7c06b337ee0d5688fa0d901ec7cb2bc23f3b7e0ee51a2ca38951ffe5f8e56da1baeac0d43ed788af53653928ddb7453adabe758b9b88aae08751592298f06f125ec6a780065dd02ccee7bfd3a57650f7cb6bcaed2207644d6ea9371dd90aee13dd827454e086a653dcb8ae9a13e746b3ad2a6b3246d0c06b7c0c30b3a8559df27578d4abdd74cec6602adbecf0d6cb413cd5a1115af19d000eb3d3b6ca51b3bf2d7b29e78331a116cfcf9d4d501fd699d03ec12574c20fd56f1f0aff0e434e4890e151f85b9d575822dde13b12aa9c9446f3b721"}, @NFTA_DATA_VALUE={0x4b, 0x1, "b880ed19d70e7c66e8c001408f09cb7969c6c514b77158c6a4c1a142f38f7ad4b029375fa2b4905e655325a4484bb8301f413d81634accbe2c82f4771f9babc9ebb0867a67b438"}, @NFTA_DATA_VALUE={0xe3, 0x1, "e9a8542cd1674f541d9268c0daa9301d387c47e76adcdea0ed291c76f45f9921932cf997ef7aa28af88a5cc0e9e010acf54a21f06430ae5e1f3e10705f5c44286b8591ad3701349395bbfcc7d99b9cbcdb8bed84fdbaa3fe844769f0bc0f7c011a4d3ba14ca7924c8d8d487fad6978e89a45a86415582a36d61bcb53aa9b38c88226aecf0344d1884f1a0e480641939b962ffc20df8318d18c395483cee02d2d1d45f211148485a6c15b1f548272e1235e0a495acd57e8277a39cfc558077fd4a4990143ee4887be480ab05c8b05b9d7ff38ea13b18ac971b201062d06815d"}, @NFTA_DATA_VALUE={0x61, 0x1, "92e30544c0d6431d41525a95bcacd71b012cdc4e0b975fd3695bde9ceb6abc7b1759a362eb9f7dd9f0bf4e1b6da28308c708c0a7683477112606c2bcd27d181d0b5f84de59797b5de07bb408ffbd663b83fdd006fe3d94aef73799a602"}, @NFTA_DATA_VALUE={0x39, 0x1, "4ba423296350dae01f4aa47fe2586cb70e3ffb47ebc43498dfbda6cfa7cfd63863d0606242f1c32ca1c99032707538befc1ce12c96"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x9d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "892616d2446fed8cc5329711a900e8976be659729106e957def5728b68b540567a36ce5cc8572930f24055ec07f5b9b25525674d89810396d8dcc70e2f06141da997b72ef0d7726aacb8e9c76012b24515bada6b0bc8d996cddca1c9a0629968fec549c27365d3db51d6c54e14e8a7629646a0bbe6e5cbc24d4cb5ae0564bade34aae0daed2cedfb8d76daf9442fa4857c581327a691276ffce0c84b61fa0c3ad973593dffa3efb5bb7ba1ed9c9774910ccff6ae7762874c4282c3a287b67a"}, @NFTA_DATA_VALUE={0xb9, 0x1, "c6ce6a40d3ed19faf2061bc05f846955a927923332523772cf245f6538f1800104a788f3138d307c209b1377765570c3fc7f5d3a3382f2d5eb80dc0ef45dbe8318113a01cf9935533424fe29e404b3beae2c68a41fd5fafc497ec1872a3574df338af11ee6b519f49c2d527c81f98a2f4670463b51c5344680701792d0da704c47e83f1ad6acce0d6d9ac314e0305e30cb17299a092987221d3108bf9ea28c28903e7fb33bb1ee491c349f1923125804387b359050"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "5cf2a9f8863699dd3b2ae819377cde4a53055dcf7d30c52e1df05d35c7c05ad18cdd3a227c854820a4421f3f30ad67a0d7ed0841b664fadfdcb881ac8c8127627f9bfb1a0f64fd5169d5d3266564df67c1c16135d12f7a3efca668041d0b08984fd73d0a585475d0213f4d3cdc08a9c5e6fbba7c791b5f1917e7b92097a79fda312001fb00a090bc7716ee04afeea1ac976299d7fd93"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "b69cd30d9c61cf87"}]}, @NFTA_SET_ELEM_DATA={0x790, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "dd5c311ad3880ab49def1810339311e81c7426c719a48a72afd6e880dab02d686d76e53dbb924b84325a109e2eaa2b241ce1c77222661656d6d7a19d3f6ece5c56b06ffefaf0ed70fed412e7ea122d9b2aab1ef96691b7"}, @NFTA_DATA_VALUE={0x704, 0x1, "3660b88bf942d45c094ba4b685d0694d85a3b0558e6c12ff439696b6566c5c158f6d968990e95e42810e5a4f7f788c86f8e8305d15997adc3908e141787649073b3f8df986fa41126796d05a0cd3b620286d48fdfe3cbde7cf927cfaa0769e54a0008b41cfedb98aaf7e31ae633357f656bff4cc094fcbf9c5e72f0f36cd88f553af3e90e69bcdddef22150abdfb06db339b1028f347db3bc5f2e25b05767a1a5fbba5485b9537727fb7385608eede7223fa87fcfc322b171c07cc3cc8248cf0671d0306032a40bbb6d2dcee30d072af212073a4bf3b19833b036217033480ea76936b3ff28e96808f01da6ab708ffce0b86f8f65fdaf7201822f6309c769f107b51ac4f665d0d4282c656737f0d698706b19648dbaddf662ee6804c072af991dbc9a8b0b981cc153970d77f25a603b90738651cbf2ac7996c692792cb5dc2df8b56b8ae8ddbc898cd963ea802d247d6e575620a7fce1be65586d5000773738e0e30affe61f91b9a9f513e097cc7d91eef9c1a9aa5cc3f236082a59613439b19b7b7f5c6fb838ec79f2deb4c1b3e65d7cd91ba97e45c6bef1c3c5ff21366c1ecd7ed178a445360f3237f127a02a451ac3a60b7a5e8ec52ae886dbbe744a99a76d4bdd2848f8327eee7c504a844bc7395a604f011a365f9c7bd4918828448068e630fe0378d25168b8888157cd29a7a2b55bd1f684111d829babc24c3966a7dceed636355287aad802bccbfe648adaa3222636e21762e77b2ccf4752d5bffe819b46f1f0c2e196972b1b219da5ca558a4bdffe689772ca3322c8f46af21c2e67287648e168cbd24b787dd68fca5b348d50d278064cd86415a4f27f23ab986a07e369e015b4c532b2431f93c5bd171c1f931be853d6a74f95e3135089476d9dd688b8525ab84040ec031bbd1240f9fc99302e8150a607660c7d0816f63c36446a1175a8a4192266fd386ed976bc5c987e95a20eb16c6023a2f859f79b2f0a1f8f1acc5a28693a277012cb91b1f1b9ca0f135c98adbd45a7cecd517d43a75ccb1c745e594d7ad7042e9ead254d67e8b243a2a7438d47f6861db7e6be41af34cb5d9e6fa067afe798357e1f3122db174dca0c8745f5f875491c987f809870ad59d114f2569714cb6ea2d84a9e3a5fdceaf0a3a2813de48489ca57614c91d0edd90ce37283ed9170ead323406fafeb72191f1f8805bedf084de3cd97e0d057244c3c326b976e7c1dbc9c320a59a7147220da62fcce7dd092bb9590bb2464386ca029dc3da6e3fbe378a32cf08b52d3b7a92e4a0f1a2e5d54b9d7b2a594d9d82d17f54e9ba97a3e6280e2d5e0e2a71360b3a2b1679640910ad0cc45a5bed9edf38589619091e4d0fe29cda80c3a9f67ac9bfe88ec6604853d2c5d783d1502f62b6b657a92a8f865f63211c1ac164ef79daa47f58ff7c7933185f5f264ac4673c3f78fc2742fe7c28df5b845b91e5e7bf44f9f0399ea0ef6750270bc59cda57d74cebb15e9af9eee2af43798f8ca04d437e6a441540370dd6467ea7779d2c67ed045d13191b60a0045fd4252e8b919bb88808e58c569080eaf03767ef59c9906834ef7e545bd583689e040a09996456b21d76e52694dbec16388d96b895d3f671303cc2164fd915f6739e6b0b258ca3e9de6ebf9ca963e66c6169b6c216b8d7f021ec1a492f072ea2f90325589255f250caa68c7b6a1f642a27835e545048e3f7d78971c917d5b15c3bd13ebd96b7be10a1318a549f4789c20941ce10885820cf57314b6eb371e44c6193f79255f65fce2b4ab840be35effcbf2bf29d89252754bf7cbbdae3400ea0a2ece54cbdb68a31c428d21c1358c47e620ee024d444d588b836a5b6db253391de5254c5e1bcf6f4773d217ae876cd485f9c189064c7151af546af29aa17e47d1930687acb73aaf3123e878751efdf08653a529012a684e86d62efe092d08ff96e48185a02867b0545d5b8f2b4bb5dd8f9688c0212206f2b502fc60b900627a30066123f9b3bd0c5213a76ea292d225d9218147fd4429a8179ada5e8db837bf419949ebcbc146ff88113e59aa41cf8b38136dca36597c837138dcd46f252e03ff3eba404efc29006057db83db0f4dedc1694dcf004da3e89133ef564c3de05c04c3b10d7c5b6939a613cd23d1098472fe9dcbd50e0f278304d803473d7611b180bed8900c7fa5b328eeb93353eec51bcad664641395c96c2895a42dc3b6068a71b3d8fa3cdcbbf9f48a0c46c1624780557b5d52615101fadaacee64c096ed6306a7bb6daf45440f0be749fafa6244bfddd7856b23f33afea6b0e66c985ce18be63ea96e376f965c9e15d9b8e808238df217a0db5355a5dc7f1f73353eba29e0c1b72f718a36063ee96944407429ddc6e21a8deaf6b0329d4223454924bca328232b8479f1170fa238a5f3afb795c6d6c2c8083f7864d7da4e700674070288597b78b3f7607bc4ae5aef9b36121df6819cd89a33ad7e534c142c7930817c6eb527b81a0017da8c31cf7d2db9ec8a94a672a02fd268f9ca6b5867b85"}]}]}]}]}], {0x14}}, 0xec4}, 0x1, 0x0, 0x0, 0x20040802}, 0x0) [ 510.607500][T16650] loop1: detected capacity change from 0 to 264192 18:01:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16], 0x74}, 0x300}, 0x0) 18:01:17 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') 18:01:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:17 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=always,huge=advise']) 18:01:18 executing program 3: setreuid(0x0, 0xee01) r0 = syz_io_uring_setup(0x7433, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/253, 0xfd}], 0x1) 18:01:18 executing program 2: setfsgid(0xee01) prctl$PR_SET_SECUREBITS(0x1c, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x23) clock_getres(0x0, &(0x7f0000000000)) setrlimit(0x8, &(0x7f0000000040)={0x0, 0x2}) syz_mount_image$ext4(&(0x7f00000020c0)='ext2\x00', &(0x7f0000002100)='./file0\x00', 0x0, 0x1, &(0x7f00000021c0)=[{&(0x7f0000002140)="bd654994b2614ef75203c65cbeff1b311abba09238016c49e77259bb3228a77e5810dd7fe74a5500aaa10a8c96c57238f7e4e9aeb81dd3ca7ff171f17e529bf739517ae9d741debb97caec0f83d859f8dc976bf62a3a6679b369ace1479f29877f51117b8e89a4c29f20628967cbb415", 0x70, 0x2}], 0x140020, &(0x7f0000002200)={[{@errors_continue}, {@sb={'sb', 0x3d, 0x1ff}}, {@oldalloc}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noquota}], [{@uid_eq}, {@subj_type={'subj_type', 0x3d, '{'}}]}) io_uring_setup(0x285c, &(0x7f00000022c0)={0x0, 0x7df4, 0x1, 0x1, 0x25}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000004640)={0x18, 0x0, 0x0, {0x100}}, 0x18) 18:01:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) 18:01:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000f1ffffff840000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd5, &(0x7f00000002c0)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:01:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x8, &(0x7f0000000000)=ANY=[], 0x10) 18:01:19 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={r5, @loopback, @empty}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0x2f, 0x46, 0xf1, 0xfc1, 0xa, @loopback, @empty, 0x40, 0x40, 0x1, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@local, 0x2b, r6}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x52, r5}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x5, &(0x7f00000000c0)={r7, 0x1, 0xfffffffffffffed4, @dev}, 0x10) 18:01:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x5, &(0x7f0000000180)={&(0x7f0000000280)={0x1bc, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1bc}}, 0x0) 18:01:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @local}, 0x10) 18:01:19 executing program 2: ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f00000003c0)={[{@nobarrier}, {@noauto_da_alloc}], [{@seclabel}, {@audit}]}) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, &(0x7f0000000780)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x0, 0x0]}}], [{@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) 18:01:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:19 executing program 3: r0 = eventfd2(0x7, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) [ 512.337485][T16708] device team_slave_0 entered promiscuous mode [ 512.344176][T16708] device team_slave_1 entered promiscuous mode [ 512.357389][T16707] tmpfs: Bad value for 'nr_inodes' [ 512.424063][T16700] device team_slave_0 left promiscuous mode [ 512.430298][T16700] device team_slave_1 left promiscuous mode [ 512.453767][T16717] tmpfs: Bad value for 'nr_inodes' 18:01:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) [ 512.474623][T16708] device team_slave_0 entered promiscuous mode [ 512.480986][T16708] device team_slave_1 entered promiscuous mode 18:01:19 executing program 2: mlockall(0x3) fork() fork() openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) mlockall(0x1) [ 512.520466][T16708] device team_slave_0 left promiscuous mode [ 512.526569][T16708] device team_slave_1 left promiscuous mode 18:01:19 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setuid(r2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:01:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}) 18:01:19 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x31, 0x33]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) [ 512.736148][ T38] audit: type=1326 audit(1620237679.593:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=16730 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 512.782447][T16734] tmpfs: Bad value for 'size' [ 512.866212][T16734] tmpfs: Bad value for 'size' 18:01:19 executing program 1: setreuid(0x0, 0xee01) setreuid(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) 18:01:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) 18:01:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) 18:01:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/86) 18:01:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x6c9, 0x0, 0x1c) 18:01:22 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000004000)='./file0\x00', 0x0, 0x0, 0x1000) 18:01:22 executing program 1: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x40}, 0x0) 18:01:22 executing program 5: socket(0x0, 0x6f6e7f4573352bcf, 0x0) 18:01:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 18:01:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0) 18:01:22 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) 18:01:22 executing program 5: r0 = syz_io_uring_setup(0x33a3, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 18:01:22 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) syz_io_uring_setup(0x45f, &(0x7f0000000000)={0x0, 0xce89}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 515.654660][T16799] tmpfs: Bad value for 'nr_inodes' 18:01:22 executing program 2: request_key(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 18:01:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, r1) 18:01:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1a, 0x0, &(0x7f0000000cc0)) 18:01:22 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 18:01:22 executing program 2: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000000c0), 0x200, 0x0) 18:01:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:23 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 18:01:23 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/68) 18:01:23 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 18:01:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x19, 0x0, &(0x7f0000000cc0)) 18:01:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xa, 0x0, &(0x7f0000000cc0)) 18:01:23 executing program 5: setreuid(0x0, 0xee01) setreuid(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:01:23 executing program 3: memfd_create(&(0x7f0000000040), 0x0) 18:01:23 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 18:01:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 18:01:23 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) 18:01:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:24 executing program 2: syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x40000, &(0x7f00000003c0)) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000000780)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) 18:01:24 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 18:01:24 executing program 5: r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x301080, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) 18:01:24 executing program 3: syz_mount_image$romfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x21090c2, &(0x7f0000002940)) 18:01:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xf, &(0x7f0000000000)={@multicast1, @dev}, 0x10) [ 517.600806][T16870] tmpfs: Bad value for 'nr_inodes' 18:01:24 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)='_', 0x1, 0x7d}], 0x0, 0x0) 18:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x7fffefec, &(0x7f00000000c0)={&(0x7f0000000440)={0x14}, 0x14}, 0x300}, 0x0) 18:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000042) 18:01:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x0, "ae5f6fb91047d5a874507fd3f864cb69"}, 0x80, 0x0}, 0x0) 18:01:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x4010) 18:01:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e34e00000000000000070000000c"], 0x20}}, 0x0) 18:01:25 executing program 3: mount$9p_fd(0x0, 0x0, 0x0, 0xe2e29e98ad97088c, 0x0) 18:01:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xb, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5421, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:25 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="720d64f8e58aef6fedf4", 0xa, 0x9}], 0x0, 0x0) 18:01:25 executing program 3: socketpair(0x0, 0xa0aec1229769dc80, 0x0, 0x0) 18:01:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={[{@size={'size', 0x3d, [0x25]}}, {@mpol={'mpol', 0x3d, {'interleave'}}}]}) 18:01:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x0]}}, {@gid={'gid', 0x3d, 0xee00}}]}) [ 518.864659][T16930] tmpfs: Bad value for 'mpol' [ 518.873498][T16930] tmpfs: Bad value for 'mpol' 18:01:25 executing program 3: add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0x0) [ 518.936711][T16934] tmpfs: Bad value for 'size' 18:01:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4305, r1, 0x1, 0x0, 0x6, @local}, 0x14) [ 519.000004][T16934] tmpfs: Bad value for 'size' 18:01:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:26 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0, 0x7f}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {&(0x7f0000000280)="28aae786bcecdfb1ecda1f5b6a01ba3654af01d71b5c86aa312fe73083d3d18eed", 0x21, 0xffffffff}, {&(0x7f0000000700)="9bd8c06f969752563648ad531e5acbd564332311d26250ce7947a66c0ffbbc4bab25545296d8e2fac259d4804461bf1ac9cb284a2e3eba23715738670aa69f4e135ba942bf8311e8a005fff4aaf144981c8b65451af967f07ac52256fc227acf2000ab6b6dd99514bb93d37e565fab4f1ba83fba8501a178d214027e2fbb4d213466ae3584a8540f976013cb549a79f28a7a6bc84c25fd1db8011e2f36a9fa808347041428defb7bd83b2f63cc9d779610011aebe927", 0xb6, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7455d4a0dc939dcb742c8acd629abf46c0dd755ec798f46c0", 0xc7, 0x3}, {&(0x7f00000009c0)="9c9c56bc906a0b05a467343ffb58d381337055ac341ec6da0bcc15dbe7658106e56931ee749a6bb19ecba3917d93bc6cbe20a103fe184efe01043fec80fb20004c55c39ca9a95086403b89397a07f8ec52dfff76b2a9a1fdd90d55a7710ea6b3813d912abe65f05e81fb03868c2ca8bb1d75e051d4e523a506bebecda6942f3137ebe123757f04b587825e79cbc59aef43b77f6d105d468f1ae9a0d6fc45fd86c67e15222061f1095f4be1915a0c81a18f4c1298f6d8bcf8a98d741e4783a80f9a18767369309959ff9a40d495d15ac8e597f1e6a58741f79196e6f87249cbbf7daa8cc2a83283d55d5fb8dafbdb8888ca762bf9bb54", 0xf6, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}], [{@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x33, 0x36], 0x2d, [0x35, 0x32, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xc, &(0x7f0000000000)=ANY=[], 0x10) 18:01:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0xd, 0x0, &(0x7f0000000cc0)) 18:01:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 519.657520][T16962] loop1: detected capacity change from 0 to 264192 18:01:26 executing program 5: r0 = gettid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x40}, 0x0) 18:01:26 executing program 3: syz_io_uring_setup(0x1c, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 18:01:26 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x61831, 0xffffffffffffffff, 0x8000000) 18:01:26 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0, 0x7f}, {&(0x7f0000000500)="078a9079c5316271611b58bd4316343c87b3d9a72ae388efbf1e3e71bb9a9608f764a8bfd66b4113f199d719b3fb2cf938cd04f01b4df23abd4d05b4819e7d233d6581f49ebbadf1379349357d77f6ac9d6493673e5e72bb0d0d352e1245551c9c08d2547d6036267212af9396feee2a96f9a934ab884fbe813c0c46c55b00a3868b144bd55bd0ca5e5d03896ce7a48de8dd0342ce8ae4acacb047dbe6c58a72c817af2fa4fd677e10213f2cb32afefb0cd01ea33664373a0613f1da76d2840c4525b3065fd193e18f2cd03f11a6019b856af2a5e2c0bd4ec753dd83bf88038cba1b32a83dd83acef067e7d4e01f0d74cd4c1fb377fdc5f0b805eecadde1", 0xfe, 0x80}, {&(0x7f0000000280)="28aae786bcecdfb1ecda1f5b6a01ba3654af01d71b5c86aa312fe73083d3d18eed", 0x21, 0xffffffff}, {&(0x7f0000000700)="9bd8c06f969752563648ad531e5acbd564332311d26250ce7947a66c0ffbbc4bab25545296d8e2fac259d4804461bf1ac9cb284a2e3eba23715738670aa69f4e135ba942bf8311e8a005fff4aaf144981c8b65451af967f07ac52256fc227acf2000ab6b6dd99514bb93d37e565fab4f1ba83fba8501a178d214027e2fbb4d213466ae3584a8540f976013cb549a79f28a7a6bc84c25fd1db8011e2f36a9fa808347041428defb7bd83b2f63cc9d779610011aebe927", 0xb6, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7455d4a0dc939dcb742c8acd629abf46c0dd755ec798f46c0", 0xc7, 0x3}, {&(0x7f00000009c0)="9c9c56bc906a0b05a467343ffb58d381337055ac341ec6da0bcc15dbe7658106e56931ee749a6bb19ecba3917d93bc6cbe20a103fe184efe01043fec80fb20004c55c39ca9a95086403b89397a07f8ec52dfff76b2a9a1fdd90d55a7710ea6b3813d912abe65f05e81fb03868c2ca8bb1d75e051d4e523a506bebecda6942f3137ebe123757f04b587825e79cbc59aef43b77f6d105d468f1ae9a0d6fc45fd86c67e15222061f1095f4be1915a0c81a18f4c1298f6d8bcf8a98d741e4783a80f9a18767369309959ff9a40d495d15ac8e597f1e6a58741f79196e6f87249cbbf7daa8cc2a83283d55d5fb8dafbdb8888ca762bf9bb54", 0xf6, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}], [{@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x33, 0x36], 0x2d, [0x35, 0x32, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6c3, 0x0, &(0x7f0000000080)) 18:01:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@flowinfo={{0x10, 0x29, 0x1600bd75}}], 0x10}}], 0x1, 0x0) [ 520.186276][T16986] loop1: detected capacity change from 0 to 264192 18:01:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, r0) 18:01:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @local}, 0x14) 18:01:27 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='.request_key_auth\x00', 0x0) 18:01:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:27 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0, 0x7f}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {&(0x7f0000000280)="28aae786bcecdfb1ecda1f5b6a01ba3654af01d71b5c86aa312fe73083d3d18eed", 0x21, 0xffffffff}, {&(0x7f0000000700)="9bd8c06f969752563648ad531e5acbd564332311d26250ce7947a66c0ffbbc4bab25545296d8e2fac259d4804461bf1ac9cb284a2e3eba23715738670aa69f4e135ba942bf8311e8a005fff4aaf144981c8b65451af967f07ac52256fc227acf2000ab6b6dd99514bb93d37e565fab4f1ba83fba8501a178d214027e2fbb4d213466ae3584a8540f976013cb549a79f28a7a6bc84c25fd1db8011e2f36a9fa808347041428defb7bd83b2f63cc9d779610011aebe927", 0xb6, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7455d4a0dc939dcb742c8acd629abf46c0dd755ec798f46c0", 0xc7, 0x3}, {&(0x7f00000009c0)="9c9c56bc906a0b05a467343ffb58d381337055ac341ec6da0bcc15dbe7658106e56931ee749a6bb19ecba3917d93bc6cbe20a103fe184efe01043fec80fb20004c55c39ca9a95086403b89397a07f8ec52dfff76b2a9a1fdd90d55a7710ea6b3813d912abe65f05e81fb03868c2ca8bb1d75e051d4e523a506bebecda6942f3137ebe123757f04b587825e79cbc59aef43b77f6d105d468f1ae9a0d6fc45fd86c67e15222061f1095f4be1915a0c81a18f4c1298f6d8bcf8a98d741e4783a80f9a18767369309959ff9a40d495d15ac8e597f1e6a58741f79196e6f87249cbbf7daa8cc2a83283d55d5fb8dafbdb8888ca762bf9bb54", 0xf6, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}], [{@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x33, 0x36], 0x2d, [0x35, 0x32, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:27 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x70) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x8, 0x10001, 0x7, 0x17227387]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x401) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x6, 0x3, 0x5, 0x9a}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x0, &(0x7f0000000100), 0x4, r0, 0xa}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000180)={0x8, 0xfffa}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000001c0)={0x2d}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000240)={0x5, 0x4, 0x0, 0x7, 0x3d}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)="5fb5a3d876453889278f3097ca1dbf1c07cfd9972937fe04b7bdc778cad477a46d142f9c0080eec4e96e09bb17e79efdbcf910e96821ffbadd72e4", 0x3b, 0x7d}], 0x40000, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@orlov}, {@nobarrier}, {@noauto_da_alloc}, {@nombcache}], [{@seclabel}, {@measure}, {@audit}]}) name_to_handle_at(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xfffffe01, 0x7}, 0x1, 0x80000001}}, &(0x7f00000004c0), 0x0) symlinkat(&(0x7f0000000500)='./file0\x00', r2, &(0x7f0000000540)='./file0\x00') ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000580)=""/243) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="720d64f8e58aef6fedf4dececf", 0xd, 0x9}], 0x800, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x34, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32, 0x39, 0x31, 0x31, 0x33]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'orlov'}}, {@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000880)={0x50, 0x0, 0x0, {0x7, 0x21, 0x3, 0x4, 0x5, 0x100, 0x5e6, 0xcef}}, 0x50) 18:01:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x17, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:27 executing program 3: r0 = socket(0x11, 0xa, 0x0) bind$inet(r0, 0x0, 0x0) [ 520.874903][T17006] loop1: detected capacity change from 0 to 264192 18:01:28 executing program 5: pselect6(0x40, &(0x7f00000000c0)={0x7}, 0x0, 0x0, 0x0, 0x0) [ 521.150435][T17020] tmpfs: Bad value for 'nr_inodes' [ 521.234941][T17030] tmpfs: Bad value for 'nr_inodes' 18:01:28 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000400)="df486863490338f86149327652d6ed4222dbc12df2506013f3566e8691bc116f711831f988160f36c77a2b9a74971f987ec44a5c35d0f4e97706c132ca3b77b776bdcb2564baa349f6c3af6b4eff05e0abed90873ed39fa0707bf67ea94c2515c0c6e3b2ee2d54c0d675733e21510dc90d6799490f5f23baf776fa8a972845076730e71c29cc63106adc97dbbeae276128fffb8d71a488176d4c0785ed24bdc57356362a2eb82c15591c0a0acb0e430fa5651c6ab9a3db3fd172207fb594e5be9980eb6482ce205419681aa21d8863a041d22dcde9e70a8451f836b224d8a4fb773db3006f0d484ab51baf8d1ae2c953", 0xf0, 0x7f}, {&(0x7f0000000500)="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", 0xfe, 0x80}, {&(0x7f0000000280)="28aae786bcecdfb1ecda1f5b6a01ba3654af01d71b5c86aa312fe73083d3d18eed", 0x21, 0xffffffff}, {&(0x7f0000000700)="9bd8c06f969752563648ad531e5acbd564332311d26250ce7947a66c0ffbbc4bab25545296d8e2fac259d4804461bf1ac9cb284a2e3eba23715738670aa69f4e135ba942bf8311e8a005fff4aaf144981c8b65451af967f07ac52256fc227acf2000ab6b6dd99514bb93d37e565fab4f1ba83fba8501a178d214027e2fbb4d213466ae3584a8540f976013cb549a79f28a7a6bc84c25fd1db8011e2f36a9fa808347041428defb7bd83b2f63cc9d779610011aebe927", 0xb6, 0x3}, {&(0x7f00000007c0)="f2e02496dae0d09e0039c97dd88b5cf78c5a7c523a43713c701c27e234a6f7f23a48ce68d7c93d6832874414a12a982bb0230d59d4ef50c053b63f1484a63cb09f134cd205b9e77413611b1b3aec8fe69c704669c0b0656b0dd40557a656f59dd3767b637f16ec659b3f3442d956d08d0d0346db24eb85b5073afe527f9cebb481e873f470f50bd21efdd862e312d2fe139d04f6d3321584d375abbfb9b9fb20a32a129d0ca6b33855b7b5f52f46c0d41f60df50159e67185e11285ef0104a7403fc0fe282e69d2d410faead01", 0xcd, 0x3}, {&(0x7f00000002c0)="6bab1b67be2bf612b97f31729bbe", 0xe, 0x10000}, {&(0x7f00000008c0)="7a2fda2f8594cf1c60e4f33d587e61a817075985559953cfa5cf96d49e7ebf626f7043bbf8d3c67edd371d105b09a98cb65af2982b9bf671a8a876773018bcab797bff806e826e369bd049c1b31454b3d099c6368efffeb7af0d0e1a091d97442f403d5a2e7e7b4291214203c803f01a0b9c5b69bd661c37ae2b5bc5daf321833820623082355cd8a20e8d4627bbffc5358179e722a14625a5bb09b73bd66edb2295e5b0d0a37744c79ac06d4ddee7455d4a0dc939dcb742c8acd629abf46c0dd755ec798f46c0", 0xc7, 0x3}, {&(0x7f00000009c0)="9c9c56bc906a0b05a467343ffb58d381337055ac341ec6da0bcc15dbe7658106e56931ee749a6bb19ecba3917d93bc6cbe20a103fe184efe01043fec80fb20004c55c39ca9a95086403b89397a07f8ec52dfff76b2a9a1fdd90d55a7710ea6b3813d912abe65f05e81fb03868c2ca8bb1d75e051d4e523a506bebecda6942f3137ebe123757f04b587825e79cbc59aef43b77f6d105d468f1ae9a0d6fc45fd86c67e15222061f1095f4be1915a0c81a18f4c1298f6d8bcf8a98d741e4783a80f9a18767369309959ff9a40d495d15ac8e597f1e6a58741f79196e6f87249cbbf7daa8cc2a83283d55d5fb8dafbdb8888ca762bf9bb54", 0xf6, 0x1ff}], 0x1440050, &(0x7f0000000ac0)={[{@nodots}, {@fat=@errors_remount}, {@fat=@discard}], [{@seclabel}, {@smackfsroot}, {@smackfshat={'smackfshat', 0x3d, '*}\xb5#)\')(,\x00'}}, {@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x36, 0x61, 0x32, 0x32, 0x32, 0x32, 0x55], 0x2d, [0x38, 0x32, 0x31, 0x36], 0x2d, [0x61, 0x36, 0x30, 0x61], 0x2d, [0x66, 0x34, 0x33, 0x36], 0x2d, [0x35, 0x32, 0x62, 0x34, 0x35, 0x37, 0x61, 0x65]}}}]}) renameat(r0, &(0x7f0000000200)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x81, 0x1, 0x7f, 0x0, 0x1000, 0x1460, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x400}, 0x11, 0xfff, 0x400, 0x4, 0x7, 0xfffffff8, 0x0, 0x0, 0x3}, 0x0, 0x5, r4, 0x2) 18:01:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000940)={&(0x7f0000000280), 0xc, &(0x7f0000000900)={0x0}}, 0x0) [ 521.502003][T17045] loop1: detected capacity change from 0 to 264192 18:01:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x8048000, 0x0, 0x1}, 0x14}, 0x300}, 0x0) 18:01:28 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 18:01:28 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x0, 0x7}}}, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="720d64f8e58aef6fedf4dece", 0xc}], 0x800, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x34, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}], [{@fowner_gt}, {@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) 18:01:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:28 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000000c0)=0x5, 0x200, 0x0) 18:01:28 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffe, 0x0) 18:01:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x5, 0x4}]}]}}, &(0x7f0000005c40)=""/137, 0x36, 0x89, 0x1}, 0x20) 18:01:28 executing program 1: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000), 0x81, 0x1) 18:01:29 executing program 2: pipe2(&(0x7f0000000a80)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) 18:01:29 executing program 5: setreuid(0x0, 0xee01) setrlimit(0x7, &(0x7f0000000180)={0x0, 0x1046}) 18:01:29 executing program 3: syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}], [{@measure}]}) [ 522.536612][T17086] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 522.606916][T17086] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 18:01:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:29 executing program 1: memfd_create(&(0x7f0000000040)='zU\xdb\xf1\xde\xc7\x16*\x0f:\xc1!q\x1b\xf5\xb9/\xb75\xf4H\f\x06\xd6n\x8dU\x00\x95B\xa0\xb0l[\x1d\xa2\x17\n\xb7\x1dO\xc2J3\x80\xe5n\xa8\xe9\xbd\x0fm\x02\xfa\x97\a\xfa\x16}/l\xf5\x13\xc0\xd7fgV\xab\b\xb7F,\xe6\xe9!\xad\x13\xe5\xff\xc8\xd4\xc0\x94C\x1c\x7f\xcc\xd9U\xce?\xb0N\xd2,6\x87\xdd\xc9\x16\xef\xe6\xa5\x19\xaf`', 0x0) 18:01:29 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 18:01:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6ca, 0x0, &(0x7f0000000080)) 18:01:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:29 executing program 3: mlockall(0x0) mlockall(0x3) fork() openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mlockall(0x1) 18:01:29 executing program 1: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='%\x00', 0x0) 18:01:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xfffffffffffffee8, &(0x7f0000000080)={0x0}}, 0x0) 18:01:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @broadcast}, @ipx={0x4, 0x0, 0x0, "96547d6a3325"}, @in={0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='batadv_slave_0\x00', 0x1, 0xddd, 0xf97}) 18:01:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x1a4, 0x1a4, 0x207fe, 0x1a4, 0x1a4, 0x244, 0x244, 0x244, 0x244, 0x244, 0x3, 0x0, {[{{@uncond, 0x0, 0x164, 0x1a4, 0xa, {0x9000000}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, '\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0, 0x7e000000, {0xff00000000000000}}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x1a8, 0x70, 0x94, 0x0, {0x4402}}, {0x24}}}}, 0x334) 18:01:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x12, 0x0, &(0x7f0000000cc0)) 18:01:30 executing program 2: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00') openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffff9c, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000001140), 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 18:01:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) 18:01:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci, 0x0, 0xb}) 18:01:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x74}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x74}}, 0x0) 18:01:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffe, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) 18:01:33 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x17, 0x0, &(0x7f0000000cc0)) 18:01:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd78, 0x0, &(0x7f0000000cc0)) 18:01:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:01:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xd, 0x0, 0x1c) 18:01:33 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @dev, 0x0, 0x2}, 0x10) 18:01:33 executing program 1: prctl$PR_SET_MM_AUXV(0x22, 0xc, 0x0, 0x0) 18:01:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x15, 0x0, &(0x7f0000000cc0)) 18:01:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x10) 18:01:33 executing program 2: prctl$PR_SET_MM_AUXV(0x67, 0xc, 0x0, 0x0) 18:01:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x13, 0x8, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x40) 18:01:33 executing program 5: request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) 18:01:33 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8912, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:34 executing program 2: r0 = socket$inet(0x2, 0x3, 0x40) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f0000000640)=@isdn, 0x80, 0x0}, 0x0) 18:01:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x6, 0x0, &(0x7f0000000cc0)) 18:01:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 18:01:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 527.519540][T17198] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 18:01:34 executing program 1: r0 = socket(0x11, 0xa, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 18:01:34 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) 18:01:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000000cc0)) 18:01:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6c6, 0x0, &(0x7f0000000080)) 18:01:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x22, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8905, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:34 executing program 3: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x0]}}]}) 18:01:34 executing program 5: setresuid(0x0, 0xee01, 0x0) r0 = geteuid() r1 = geteuid() setresuid(r1, r0, 0x0) 18:01:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:34 executing program 1: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0) fork() syz_io_uring_setup(0x5c0d, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 528.124390][T17221] tmpfs: Bad value for 'size' 18:01:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:35 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x20, 0x0, 0x1}]}) 18:01:35 executing program 5: prctl$PR_SET_MM_AUXV(0x7, 0xc, 0x0, 0x0) 18:01:35 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) fchown(r3, 0xee01, r6) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32, @ANYBLOB="0400000000727f0008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x6c, 0x1) rmdir(&(0x7f00000000c0)='./file0/file0\x00') socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000004c0)='./file0/file1\x00', 0x32) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x4203) lchown(&(0x7f0000000500)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='binder\x00', 0x21, &(0x7f0000000480)='ext4\x00') r8 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010007000000000002000700", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="020005003691c12f9ab497b2bb5673b2ab28681f51897056350529a1b91d1f8b8f4ed1aa89205650dbd5bffca6111a9d10cfb455de62a70ccec98b313196fd67ba51ce1f998cd9f30f351df21c2a7f66014b1f71acd8ae843dea3895dc8529ecc8074e433cc5af5c9f4419265337f9dbd6dae90840ef9619934add39f5d7fad4cc2013f1e87665dafa234a0eb0e177d00100010023b9d1d320891c670848bf4f448520ad00"/177, @ANYRES32=r1, @ANYBLOB="040004000000000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="10000300000000002000040000000000"], 0x7c, 0x1) 18:01:35 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000005c40)=""/137, 0x2e, 0x89, 0x1}, 0x20) 18:01:35 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000000100)='\ni\v', 0x3}, {&(0x7f0000000180)="8b3788", 0x3}, {&(0x7f0000001280)="ef", 0x1}, {&(0x7f0000001340)="608212740d1aec42d163dc9e90db52ab3af2bf56bde796d2799a714211f4ac43f4d06561c3e1a7076b1360f39b98269901c07a015e2f96e413700654b73ced8c8bd86eef2896834d76d9470c6464090b5e82a490d13e2268cbfa79e5b7a4805d74a29c8704d4083b8e4da338c304d249c198b98832616b0cd9de1fce30c4e6aefbc8b8c058fda6f04de1bd13c5d86ffb5666927128431be700156eed07aba13be28a0a130d703179cb33f070f7c813ab127596ed3c8c08f25b7050f2bdb6e6befbf01741b2e780b6c2102db5", 0xcc}, {&(0x7f0000002440)="9d53c82c50013cc5b8", 0x9}], 0x5}}], 0x1, 0x0) 18:01:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xe38, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x4b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x4a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "f48230b301e9a7ee42b87fd4fe99e84b714695570a998877fef94260094e241e5209a55c08e8cf464405946e222006382203ffe35a88a6a71f456547bc35353811cb4e1f90163e94bcc651dc36305ae2be951bf3eaf6ef9ad206d8bd9b73cb7f4839396c3a600ada8f7d098addd6e526a01b308e07379b5ae1ccdc590f69f5192c504235c8b1b5a084440cbab86a0e6f82f20984776372128f73307a858607b2267dec1cd67ddda588d1a1e5fef7493837fc36c79aa571fc34f5a344b8966f2f1f9947c3035dfb90ad6661bfbb"}, @NFTA_DATA_VALUE={0x29, 0x1, "68aba6a20b45e4b8ee2db54d70f4a7fbc0ef5beac0caa1a6e766667d50bef38f67d328fa36"}, @NFTA_DATA_VALUE={0xfd, 0x1, "2edbf5a171524ba10f504b5c919f9a01d036a083a53e6c4f5ee6eb1b1ae66b916da394832e7c06b337ee0d5688fa0d901ec7cb2bc23f3b7e0ee51a2ca38951ffe5f8e56da1baeac0d43ed788af53653928ddb7453adabe758b9b88aae08751592298f06f125ec6a780065dd02ccee7bfd3a57650f7cb6bcaed2207644d6ea9371dd90aee13dd827454e086a653dcb8ae9a13e746b3ad2a6b3246d0c06b7c0c30b3a8559df27578d4abdd74cec6602adbecf0d6cb413cd5a1115af19d000eb3d3b6ca51b3bf2d7b29e78331a116cfcf9d4d501fd699d03ec12574c20fd56f1f0aff0e434e4890e151f85b9d575822dde13b12aa9c9446f3b721"}, @NFTA_DATA_VALUE={0x49, 0x1, "b880ed19d70e7c66e8c001408f09cb7969c6c514b77158c6a4c1a142f38f7ad4b029375fa2b4905e655325a4484bb8301f413d81634accbe2c82f4771f9babc9ebb0867a67"}, @NFTA_DATA_VALUE={0xe1, 0x1, "e9a8542cd1674f541d9268c0daa9301d387c47e76adcdea0ed291c76f45f9921932cf997ef7aa28af88a5cc0e9e010acf54a21f06430ae5e1f3e10705f5c44286b8591ad3701349395bbfcc7d99b9cbcdb8bed84fdbaa3fe844769f0bc0f7c011a4d3ba14ca7924c8d8d487fad6978e89a45a86415582a36d61bcb53aa9b38c88226aecf0344d1884f1a0e480641939b962ffc20df8318d18c395483cee02d2d1d45f211148485a6c15b1f548272e1235e0a495acd57e8277a39cfc558077fd4a4990143ee4887be480ab05c8b05b9d7ff38ea13b18ac971b201062d06"}, @NFTA_DATA_VALUE={0xdd, 0x1, "92e30544c0d6431d41525a95bcacd71b012cdc4e0b975fd3695bde9ceb6abc7b1759a362eb9f7dd9f0bf4e1b6da28308c708c0a7683477112606c2bcd27d181d0b5f84de59797b5de07bb408ffbd663b83fdd006fe3d94aef73799a602db3fb7305c719e5abc1e567a88e8b1bc8576a51d6ed54d807bd106b1244c0f41c51662b4ffded843bdf58c45ba5d886ca75e393d16a5aa5334c8860b39a5b681057c0a8ba8220241e5b975b20085372c5ecca80d33e566d18e62288ce7e7774fde9733c7c9cc7eb6a587ca9ea098aa2975a5ba6921781c3a30cb31f7"}, @NFTA_DATA_VALUE={0x39, 0x1, "4ba423296350dae01f4aa47fe2586cb70e3ffb47ebc43498dfbda6cfa7cfd63863d0606242f1c32ca1c99032707538befc1ce12c96"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x954, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "892616d2446fed8cc5329711a900e8976be659729106e957def5728b68b540567a36ce5cc8572930f24055ec07f5b9b25525674d89810396d8dcc70e2f06141da997b72ef0d7726aacb8e9c76012b24515bada6b0bc8d996cddca1c9a0629968fec549c27365d3db51d6c54e14e8a7629646a0bbe6e5cbc24d4cb5ae0564bade34aae0daed2cedfb8d76daf9442fa4857c581327a691276ffce0c84b61fa0c3ad973593dffa3efb5bb7ba1ed9c9774910ccff6ae7762874c4282c3a287"}, @NFTA_DATA_VALUE={0xb9, 0x1, "c6ce6a40d3ed19faf2061bc05f846955a927923332523772cf245f6538f1800104a788f3138d307c209b1377765570c3fc7f5d3a3382f2d5eb80dc0ef45dbe8318113a01cf9935533424fe29e404b3beae2c68a41fd5fafc497ec1872a3574df338af11ee6b519f49c2d527c81f98a2f4670463b51c5344680701792d0da704c47e83f1ad6acce0d6d9ac314e0305e30cb17299a092987221d3108bf9ea28c28903e7fb33bb1ee491c349f1923125804387b359050"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x99, 0x1, "5cf2a9f8863699dd3b2ae819377cde4a53055dcf7d30c52e1df05d35c7c05ad18cdd3a227c854820a4421f3f30ad67a0d7ed0841b664fadfdcb881ac8c8127627f9bfb1a0f64fd5169d5d3266564df67c1c16135d12f7a3efca668041d0b08984fd73d0a585475d0213f4d3cdc08a9c5e6fbba7c791b5f1917e7b92097a79fda312001fb00a090bc7716ee04afeea1ac976299d7fd"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "b69cd30d9c"}]}, @NFTA_SET_ELEM_DATA={0x714, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "dd5c311ad3880ab49def1810339311e81c7426c719a48a72afd6e880dab02d686d76e53dbb924b84325a109e2eaa2b241ce1c77222661656d6d7a19d3f6ece5c56b06ffefaf0ed70fed412e7ea122d9b2aab1ef966"}, @NFTA_DATA_VALUE={0x685, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 18:01:35 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) [ 528.620434][ T38] audit: type=1326 audit(1620237695.475:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17234 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 528.654840][T17249] loop2: detected capacity change from 0 to 4096 18:01:35 executing program 3: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6) [ 528.796631][T17249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:01:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd7d, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:35 executing program 1: memfd_create(&(0x7f0000000340)='\xf9\xf7\xff\xff\x7f3H\x06\xab\t\xee6\x02S\xac\x19\xef=\xa4M\xc3\x02\xed\'\xe0\xd4e>\xb7\x7fs\xae=^H\xa6\xb7\xf6\xc7d\xa7\xacN\xf3:A\xa8k\xe3\xdf\x83\xb1=\xb0T|\xa0\xf6\xefq\xd1\xca\b\xca\x8b.c\xecBi\xf0\x9d\xb0w\xaf.\xc2\xc4\xf0\xc9\b\xf7Z [\x81\x8fp\xa0b\x14\xe2\xeb\x91\xc4\xa3y#\xb7\x9e\x0e\xe6\xc1~S\x1d\xec\x8d.B\x7f\xdc-\x14\x9e\x14`9A?m\xd5W\xcb\xd5N\xfd\xd0\x15\x8c\xfd\x90\x04\xc1}N\xe2\xc0y\xa0\xf0\xcaP%\x96Ie\x83\xfc\xdb\xd1o\"K\x1c*V\v>\x1fwg@\xc1\xebv\xd0\v\xc4C;t?\x98.-\xefy@\xae\r1_\xd8\x9ay\xccH\x04\x95\x17Y\xa4#n\x96>\xf6\xa3\x13\x10\x9cXtm\xd8\x8f\xa2\xaa\x9fn\xc3U}\xf8S\xec\xb2a@\x81\xd2\x9e\xf4\xf8\xf4\xf4\xb62,\xe9LF\xd4!C\xc90\xdd\x17v\x80\xc3\xe2X;\x957:AZ\x112\x9e<\xabH\x11|\x06\xfc\x05\xd8\xcb\xd5^\xb0\xd1\xe4O\x14\xb4\x101\xa2Z~$\xbcqwn\x1c\xc4F\x1c4\xa7X\xabj\xa0\xe8\xce\xf5;y\x0eaRl\xde:\xfb\xd7\xef\xd6$ \x03|,\xcf\xb8\xf1X\xb0\x00\a\n\t4uh\f\xe0\xe8\xdb\xfa0F\xc2r\xb8\x9dVA\x88\x9fw\xbc\x19\xb4gz4\xf9\x00\xff|(\x1cG\xd7\xf2\f\xc6\xa38\x87\x03\xdc\xf4\xf5\xe0Wy1g\x0f@ET\xb4\xa7\x92(kbD\xc0\xea!\xa4?\a8rD\x91\xfe6\x01\xa3\bC\xb6\xc4\xae\xcb0q[Tq\xbcN\x9f\r\x91\x92\x974\xaa\xcb\xa7m-\xaa\xffV\x84\xf0G`#;g\xd2E\xeb}f\xb3c\xfb\xe7\xf9\xd7(&\x19N\x13n\xbb\x8cl\x9d\x97\xa6\xbd\xb5\xc6\xc6\xc5\xbfZ\xe9mU;\xc7\xeb\f>\xabM\xe4\'\xed\x85\xda\x95\xef\x8a\xd2', 0x0) [ 529.223685][T17261] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:01:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:36 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:01:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007a00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x14}}], 0x1, 0x0) 18:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8910, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)) 18:01:36 executing program 2: sched_rr_get_interval(0x0, 0x0) r0 = io_uring_setup(0x7ed, &(0x7f0000000000)={0x0, 0x2210, 0x0, 0x0, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 18:01:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x1}]}) 18:01:36 executing program 5: r0 = socket(0x28, 0x1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 18:01:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:36 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "7ab366328244b13221d8b3faa4c71d866e6511d30da355e044fedf5d9de84cd02470e85702bae984122164dc0344d1a62e0bdb89b569899175a9f2ac4cd508af"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)=@secondary) 18:01:36 executing program 2: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0) 18:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89b1, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) [ 529.823933][ T38] audit: type=1326 audit(1620237696.685:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17286 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 18:01:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:37 executing program 3: r0 = fork() syz_open_procfs$namespace(r0, 0x0) r1 = fork() syz_open_procfs$namespace(r1, 0x0) 18:01:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000005c40)=""/137, 0x2e, 0x89, 0x1}, 0x20) 18:01:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007a00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_retopts={{0xc}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}], 0x3c}}], 0x1, 0x0) 18:01:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 18:01:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x80) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:01:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @dev, 0x0, 0x600}, 0x10) 18:01:37 executing program 5: get_mempolicy(0x0, &(0x7f0000000040), 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x0) 18:01:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$sock(r0, &(0x7f0000002340)={&(0x7f0000000000)=@xdp={0x2c, 0x0, r1}, 0x80, 0x0, 0x0, &(0x7f0000002300)=[@txtime={{0x14}}], 0x14}, 0x0) 18:01:37 executing program 2: prctl$PR_SET_MM_AUXV(0x2, 0x8048000, 0x0, 0x0) 18:01:37 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 18:01:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000680)) 18:01:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16], 0x74}, 0x300}, 0x0) 18:01:38 executing program 2: r0 = socket(0x28, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x28, 0x0, 0x0, 0x0) 18:01:38 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setuid(r2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:01:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x40) 18:01:38 executing program 5: symlinkat(&(0x7f000000aac0)='./file1\x00', 0xffffffffffffffff, 0x0) 18:01:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000440)=""/152, 0x98}, {0x0}, {0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x5}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r0) 18:01:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:38 executing program 5: get_mempolicy(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4) 18:01:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x28}}, 0x0) 18:01:38 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x187}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@generic={0x0, "7c845d798f2ded8bf0b5669dd11d82442885eb1dc8372ecf3dc84f3c517b989ae436b61f7699bfb57a2ff1f86c3ef1103780967150b460880c40515f4b331d3b593c62513ab1f0378456c5ab7ce9090d923c15ef29b417cf189510f170dfe219fd5f3d123c5d8453fa92208e476891b55f57511259d25fe8b49f2222d434"}, 0x80) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00'], 0x74}}, 0x0) 18:01:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x16, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400162}) 18:01:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x6cb, &(0x7f0000000000)=ANY=[], 0x10) 18:01:39 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setuid(r2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:01:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x0, 0x1}, 0x14}, 0x300}, 0x0) 18:01:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000200)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x7f}, 0x4}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 18:01:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd77, 0x0, &(0x7f0000000cc0)) 18:01:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 533.056062][T17398] loop5: detected capacity change from 0 to 60 18:01:40 executing program 2: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x0, 0x0, 0x40000, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@nobarrier}, {@nombcache}], [{@seclabel}, {@measure}, {@audit}]}) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="720d64f8", 0x4}], 0x800, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x0, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0]}}], [{@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'orlov'}}]}) 18:01:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd80, 0x0, &(0x7f0000000cc0)) [ 533.147883][T17398] FAT-fs (loop5): bogus number of FAT sectors [ 533.199210][T17398] FAT-fs (loop5): Can't find a valid FAT filesystem [ 533.291582][T17398] loop5: detected capacity change from 0 to 60 18:01:40 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000008200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x18}, 0x0) [ 533.366302][T17398] FAT-fs (loop5): bogus number of FAT sectors [ 533.397676][T17412] tmpfs: Bad value for 'size' [ 533.427477][T17398] FAT-fs (loop5): Can't find a valid FAT filesystem [ 533.492463][T17421] tmpfs: Bad value for 'size' 18:01:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:40 executing program 1: prctl$PR_SET_MM_AUXV(0x35, 0xc, 0x0, 0x0) 18:01:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8993, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f000001440000000000000074bd0016441c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:41 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setuid(r2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:01:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x8902, &(0x7f0000000040)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x3, 0x0, 0x0) 18:01:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x700}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:01:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @broadcast}, @ipx={0x4, 0x0, 0x0, "96547d6a3325"}, @in={0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='batadv_slave_0\x00'}) 18:01:41 executing program 2: setreuid(0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11}, 0x40) 18:01:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x4004700c, 0x0) 18:01:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:41 executing program 1: keyctl$setperm(0x5, 0x0, 0x4401) 18:01:41 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 18:01:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x31, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:42 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setuid(r2) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 18:01:42 executing program 1: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0) 18:01:42 executing program 2: mq_unlink(&(0x7f0000000040)='\x8bw\xf1\xfa^\xefTN\xa0#M!\"\xf8\xe1[gz\x85\xa2\xe7\xebU\xdc\xc9\xdf\x82\t\x1e\x87~\xde\xf90\xe9^a\xdf\x909U\xd5\xb0\xd4\xd2\t\xf3ST\xcd%=\xc5%\xb4L\x97\x84^$rD[\x86ef\x93\x91\xba\xe0\xfa\xd4O@\x9bHwj-7C\xe9>\xb0r>A]\xbc\x17l}t\xd3\xbf\xcc\x91\xc2\x10@\xb8[&\xe8\x1b\x00'/115) 18:01:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:42 executing program 5: socketpair(0x10, 0x3, 0xfffffffb, &(0x7f0000000040)) 18:01:42 executing program 1: io_uring_setup(0x5b12, &(0x7f0000000000)) execveat(0xffffffffffffffff, &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x0, 0x0) 18:01:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) 18:01:42 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xe) 18:01:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x20}}, 0x0) 18:01:42 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000040)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x7}, {}]}]}}, &(0x7f0000005c40)=""/137, 0x3e, 0x89, 0x1}, 0x20) 18:01:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd78, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci, 0x0, 0xb00}) 18:01:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd7d, &(0x7f0000000000)=ANY=[], 0x10) 18:01:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @broadcast}, @ipx={0x4, 0x0, 0x0, "96547d6a3325"}, @in={0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='batadv_slave_0\x00'}) 18:01:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x10) 18:01:43 executing program 2: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x2f16638b, 0xfff, 0x0) 18:01:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004100)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {0x0, 0x0, 0xa, 0x0, '\x90#@%\xe0:#)%$'}}]}, 0xb8) 18:01:43 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000200)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000680)=0x0) io_submit(r1, 0xe00, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x8800000, 0x0, 0x1, 0x0, r0, &(0x7f0000000340)='b', 0x8800000}]) 18:01:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xfeef}]}]}, 0x28}}, 0x0) 18:01:43 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 536.891492][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.915633][T17528] loop5: detected capacity change from 0 to 60 [ 536.935350][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.965868][T17528] FAT-fs (loop5): bogus number of FAT sectors [ 536.972261][T17528] FAT-fs (loop5): Can't find a valid FAT filesystem 18:01:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x6b1, &(0x7f0000000000)=ANY=[], 0x10) 18:01:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 18:01:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:44 executing program 2: prctl$PR_SET_MM_AUXV(0x3a, 0xc, 0x0, 0x0) 18:01:44 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={r5, @loopback, @empty}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0x2f, 0x46, 0xf1, 0xfc1, 0xa, @loopback, @empty, 0x40, 0x40, 0x1, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={@local, 0x2b, r6}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x52, r5}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x5, &(0x7f00000000c0)={r7, 0x1, 0xfffffffffffffed4, @dev}, 0x10) 18:01:44 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) 18:01:44 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)) [ 537.772484][T17559] loop5: detected capacity change from 0 to 60 18:01:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:44 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r0, 0x0, 0x0, 0x0) 18:01:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x44}}, 0x0) 18:01:44 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) 18:01:44 executing program 2: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f00000001c0)=""/39, 0x27) 18:01:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x7, &(0x7f0000000000)=ANY=[], 0x10) 18:01:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008e000000000800", @ANYRES32, @ANYBLOB="640101007f000001440000000000000007000000011c07d3ac1414aa000000a7ac1414aa00000009e000000100005c1f071b6a7f000001e0000001ac1414bb00000000ac1414bbac1e01010064"], 0xc0}, 0x0) 18:01:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) 18:01:45 executing program 1: mlockall(0x3) mlockall(0x3) fork() fork() r0 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$AUDIT_SET(r0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mlockall(0x1) 18:01:45 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r0 = io_uring_setup(0x7ed, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 18:01:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)) 18:01:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:45 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000), 0x185602, 0x0) 18:01:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5460, &(0x7f00000001c0)) 18:01:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x541b, 0x0) 18:01:45 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000008200)={&(0x7f0000005b40)=@file={0x0, './file0\x00'}, 0xffffff8d, &(0x7f0000005f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000008100)}, 0x0) 18:01:45 executing program 2: setreuid(0x0, 0xee01) prctl$PR_SET_MM_AUXV(0x18, 0xc, 0x0, 0x0) 18:01:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x1600bd7d, 0x0, &(0x7f0000000cc0)) 18:01:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {}]}]}}, &(0x7f0000005c40)=""/137, 0x36, 0x89, 0x1}, 0x20) 18:01:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007a00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000002340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x14}}], 0x1, 0x0) 18:01:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x7, @local}, 0x10) 18:01:47 executing program 2: r0 = io_uring_setup(0x5f6b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1cb}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 18:01:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x13, 0x8, 0x1000, 0x0, 0x280}, 0x40) 18:01:47 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x300}, 0x0) 18:01:47 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$eventfd(r0, 0x0, 0x0) 18:01:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x30, 0x0, &(0x7f0000000cc0)) 18:01:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 18:01:47 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@size={'size', 0x3d, [0x0]}}]}) 18:01:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8904, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) [ 541.123734][T17662] tmpfs: Bad value for 'size' 18:01:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xb, &(0x7f0000000000)=ANY=[], 0x10) 18:01:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) [ 541.214008][T17662] tmpfs: Bad value for 'size' 18:01:48 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "3c6076cf653aa63979a40cc47375708cdade7fb2b8afe6c1d1d64424519c8a4a16bdade5818cbb6d950bbead37f617762399087bd89923f1e7e1f7be38b7cc4d"}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 18:01:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:01:48 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:48 executing program 3: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1], 0x74}}, 0x0) 18:01:48 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x1, 0x0) 18:01:48 executing program 2: prctl$PR_SET_MM_AUXV(0x19, 0xc, 0x0, 0x0) 18:01:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:01:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000005c40)=""/137, 0x3d, 0x89, 0x1}, 0x20) 18:01:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:48 executing program 1: syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@noauto_da_alloc}], [{@seclabel}]}) 18:01:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:01:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x7, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @broadcast}, 0x10) [ 542.056556][T17713] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 542.120807][T17713] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 542.218314][T17726] device team0 entered promiscuous mode [ 542.231038][T17726] device team_slave_0 entered promiscuous mode [ 542.247036][T17726] device team_slave_1 entered promiscuous mode [ 542.271375][T17720] device team0 left promiscuous mode [ 542.278433][T17720] device team_slave_0 left promiscuous mode [ 542.300696][T17720] device team_slave_1 left promiscuous mode [ 542.325593][T17726] device team0 entered promiscuous mode [ 542.333733][T17726] device team_slave_0 entered promiscuous mode [ 542.351872][T17726] device team_slave_1 entered promiscuous mode [ 542.370116][T17726] device team0 left promiscuous mode [ 542.391475][T17726] device team_slave_0 left promiscuous mode [ 542.410802][T17726] device team_slave_1 left promiscuous mode 18:01:49 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:49 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4) 18:01:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) 18:01:49 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:01:49 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) 18:01:49 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x1033, 0xffffffffffffffff, 0x8000000) 18:01:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000005c40)=""/137, 0x36, 0x89, 0x1}, 0x20) 18:01:49 executing program 3: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x70) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x401) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000240)={0x5, 0x4, 0x0, 0x7, 0x3d}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)="5fb5a3d876453889278f3097ca1dbf1c07cfd9972937fe04b7bdc778cad477a46d142f9c0080eec4e96e09bb17e79efdbcf910e96821ffbadd72e4", 0x3b, 0x7d}], 0x40000, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@orlov}, {@nobarrier}, {@noauto_da_alloc}, {@nombcache}], [{@seclabel}, {@measure}, {@audit}]}) name_to_handle_at(r2, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xfffffe01, 0x7}, 0x1, 0x80000001}}, &(0x7f00000004c0), 0x0) syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700)="720d64f8e58aef6fedf4dececf", 0xd, 0x9}], 0x800, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x34, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32, 0x39, 0x31, 0x31, 0x33]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'orlov'}}, {@subj_user={'subj_user', 0x3d, 'nobarrier'}}]}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000880)={0x50, 0x0, 0x0, {0x7, 0x21, 0x3, 0x4, 0x5, 0x100, 0x5e6, 0xcef}}, 0x50) 18:01:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8927, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:49 executing program 5: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) 18:01:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 543.130921][T17763] tmpfs: Bad value for 'nr_inodes' 18:01:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:50 executing program 3: setreuid(0x0, 0xee01) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) 18:01:50 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000a5f2c200004091"], 0x0) 18:01:50 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000340)='./file1\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000780)}], 0x0, &(0x7f0000000880)={[{@fat=@time_offset}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) acct(0x0) creat(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x6628, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 18:01:50 executing program 2: syz_io_uring_setup(0x597d, &(0x7f0000000000), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) 18:01:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x89e0, 0x0) 18:01:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x16, &(0x7f0000000000)=ANY=[], 0x10) 18:01:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002540)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @rand_addr, @multicast1}}}], 0x18}}], 0x1, 0x0) [ 544.005657][T17806] FAT-fs (loop5): bogus number of reserved sectors [ 544.039581][T17806] FAT-fs (loop5): Can't find a valid FAT filesystem 18:01:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000005c40)=""/137, 0x26, 0x89, 0x1}, 0x20) 18:01:51 executing program 2: add_key$keyring(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) [ 544.288444][T17806] FAT-fs (loop5): bogus number of reserved sectors [ 544.376893][T17806] FAT-fs (loop5): Can't find a valid FAT filesystem [ 544.385811][T17813] overlayfs: missing 'lowerdir' 18:01:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x1600bd7c, 0x0, 0x1c) 18:01:51 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:01:51 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x7, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:51 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 18:01:51 executing program 1: prctl$PR_SET_MM_AUXV(0x66, 0xc, 0x0, 0x0) 18:01:51 executing program 2: syz_open_dev$evdev(&(0x7f00000002c0), 0x7fff, 0x301d01) 18:01:51 executing program 3: prctl$PR_SET_MM_AUXV(0x1b, 0xc, 0x0, 0x0) 18:01:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) 18:01:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e34e0000000000000007"], 0x20}}, 0x0) 18:01:52 executing program 1: prctl$PR_SET_MM_AUXV(0x2f, 0xc, 0x0, 0x0) [ 545.317700][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 545.379275][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:01:52 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8971, &(0x7f00000000c0)={0x0, @rc={0x1f, @fixed}, @isdn, @hci}) 18:01:52 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESHEX], 0x10) 18:01:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) 18:01:52 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') [ 545.904101][T17880] device team0 entered promiscuous mode [ 545.941785][T17880] device team_slave_0 entered promiscuous mode [ 545.975116][T17880] device team_slave_1 entered promiscuous mode [ 546.029489][T17873] device team0 left promiscuous mode [ 546.040807][T17873] device team_slave_0 left promiscuous mode 18:01:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000080)) [ 546.078814][T17873] device team_slave_1 left promiscuous mode [ 546.141823][T17880] device team0 entered promiscuous mode [ 546.152552][T17880] device team_slave_0 entered promiscuous mode [ 546.210551][T17880] device team_slave_1 entered promiscuous mode [ 546.266914][T17880] device team0 left promiscuous mode [ 546.304654][T17880] device team_slave_0 left promiscuous mode 18:01:53 executing program 3: mprotect(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x3000008) [ 546.351348][T17880] device team_slave_1 left promiscuous mode 18:01:53 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005b00)={&(0x7f0000005bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x7}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000005c40)=""/137, 0x4c, 0x89, 0x1}, 0x20) 18:01:53 executing program 3: openat$hwrng(0xffffff9c, 0x0, 0x41a000, 0x0) 18:01:53 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x12, &(0x7f0000000000)=ANY=[], 0x10) 18:01:53 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:53 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0}], 0x0, 0x0) 18:01:53 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:54 executing program 1: uname(&(0x7f0000000000)=""/224) 18:01:54 executing program 3: setreuid(0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x12}, 0x40) 18:01:54 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0xb3dfde69a291b146, 0x0) ioctl(r0, 0x9377, &(0x7f00000000c0)="010000000000000018") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000300)={'veth1_virt_wifi\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000002c0)={0xfffe, 0x1}}}) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000240000042dbd7000fcdbdf250000000088a47da11bfeed62a3845c70fe80dcecb56b8d45a2230c2e7aa7a435f6526cd449", @ANYRES32=r3, @ANYBLOB="0b00f3ffffff07000500080008000d0000010000300008801c000100400000fe08000000010000000005000003100000050000000e000200ff03ff7f0400fdff0101000008000e00bc96000006000500d3000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write(r1, &(0x7f0000000080)='$', 0x300000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') 18:01:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 18:01:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) 18:01:54 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000c12e000000006044d9da2e7a14af000000000000000000000000000000000000d900000000000000ce19a0d5014941a1c38900"/139], 0x5000) 18:01:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(r0, &(0x7f00000021c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 18:01:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) 18:01:54 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100022, 0x0) 18:01:55 executing program 5: r0 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}}, 0x0) 18:01:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0) 18:01:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000003c0), 0x4) 18:01:55 executing program 2: eventfd2(0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000013c0), 0x0, &(0x7f0000001440)={0x4f}, &(0x7f0000001480)={0x0, 0x3938700}, 0x0) 18:01:55 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000080)='trusted\x00', 0x0) 18:01:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') read$FUSE(r0, 0x0, 0x0) 18:01:55 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:55 executing program 5: pipe2$9p(0x0, 0x40000) 18:01:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000002500), 0x4) 18:01:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 18:01:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 18:01:55 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x0) 18:01:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc27f, 0x6, 0x0, 'netbios-ns\x00'}}}, {{@ip={@empty, @local, 0x0, 0x0, 'veth0_vlan\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'ipvlan1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 18:01:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x3, &(0x7f0000000000)={@multicast1, @dev}, 0x10) 18:01:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 18:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) [ 549.346251][T17995] x_tables: duplicate underflow at hook 3 18:01:56 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x248400, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 18:01:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000080)) 18:01:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@empty, @local, 0x0, 0x0, 'veth0_vlan\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010101, 'ipvlan1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 18:01:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x119, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, 'x'}]}, 0x24}}, 0x0) 18:01:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 18:01:56 executing program 2: eventfd2(0x4, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000013c0), 0x0, &(0x7f0000001440)={0x4f}, &(0x7f0000001480)={0x0, 0x3938700}, 0x0) [ 550.283541][T18015] x_tables: duplicate underflow at hook 3 18:01:57 executing program 1: r0 = socket(0xa, 0x3, 0x7) accept$inet(r0, 0x0, 0x0) 18:01:57 executing program 2: r0 = socket(0xa, 0x3, 0x9) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 18:01:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x293, 0x0, 0x0, 0x0) 18:01:57 executing program 3: r0 = socket(0x1, 0x1, 0x0) getpeername$packet(r0, 0x0, 0x0) 18:01:57 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) 18:01:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:57 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 18:01:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 18:01:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000002500)=0x1, 0x4) 18:01:58 executing program 1: add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) 18:01:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x8, 0x0, 0x0) 18:01:58 executing program 1: memfd_create(&(0x7f0000000780)='mptcp_pm\x00', 0x2) 18:01:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, &(0x7f0000000040)=0x7188f037be3ab99f) 18:01:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x979c, 'netbios-ns\x00'}}}, {{@ip={@empty, @local, 0x0, 0x0, 'veth0_vlan\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'ipvlan1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 18:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1ff, 0x4) 18:01:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:58 executing program 3: r0 = fork() rt_tgsigqueueinfo(r0, r0, 0x18, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) [ 551.786059][T18058] x_tables: duplicate underflow at hook 3 18:01:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x58) 18:01:59 executing program 2: perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:01:59 executing program 5: inotify_init1(0x100000) 18:01:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f00000002c0)={0x14, 0x0, 0x7, 0x201}, 0x14}}, 0x0) 18:01:59 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, 0x0, 0x8493) 18:01:59 executing program 2: r0 = getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f00000000c0)) 18:01:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040), 0x1) 18:01:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x98, 0x158, 0x158, 0x1f0, 0x158, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendto$inet(r0, 0x0, 0x0, 0xc800, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000009200)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000200)="260d8e807963fc50d30bdcf4d2043d40618dda914004b2e1adce88da468980b6a748a2beeb75a4d763ce736e019f8576fa6920b000dcd40730fc0998d702bd0180ef092e5a7243c42988f8fb964fc7959c14eee293c446b4335dbaf6663348af0538dc65df61ea3aa48335e9751a32051e56b456ae7382df3a1e4b6fd26c97cf5962378427cd8caa9bef0874be953bbdd2450e65ad3a6aab71a6cbc64c4e7775824a286d66e2cc274dcc09d9a8ee29094aee29a9d8eff8ac570dfd88fa63d61a97faf7cb28", 0xc5}, {&(0x7f0000000300)="7cfe2a73827057bd23591316ff799eecb55739144882b5286c8d17a90c838bf3d3d12679ac2a554d314b4ee28f24465c5e24d3d0dd4da122ea59eb378e6036b36ddfadd6b19d98c1cec8d2a1f04a84b37fbe0f49cf94db7fe6ffb08da935bb3cc238d616ffd9863716ff943f2e220cf0dee93970a3eac008e748d8af64ef28727c3315b1be29f40fcf94cf87e448c011d2346abde9f3319ac959bcabc942ff2e50e47890018aa0f75ecdd8d581c6ac84b082cc98c333933de3f6b942feb2764f76e1cc7c5c9887cb823884490077851a98809429744047601c52613a2bce", 0xde}, {&(0x7f0000000140)="f80450dba9f13b3e4fa8739bcae9fa6640d6a92996fdce0b14e9cb73e494352add3d9e1e3511e37adf178a6067244cfd2329da436cd389889451497cc95bb7b2a693d19da009f89c4037b11e43", 0x4d}, {&(0x7f0000000940)="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", 0x999}], 0x4}}], 0x1, 0x0) [ 552.735845][T18093] x_tables: duplicate underflow at hook 1 18:01:59 executing program 1: mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 18:01:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:01:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040), 0x4) [ 552.787050][T18093] x_tables: duplicate underflow at hook 1 18:02:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:00 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x10001, 0x0, 0x0, 0x7d22}}) 18:02:00 executing program 3: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:02:00 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x222902, 0x0) signalfd(r0, &(0x7f0000000080), 0x8) 18:02:00 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 18:02:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 18:02:00 executing program 2: r0 = socket$inet(0x2, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24040041) 18:02:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000002300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x3) 18:02:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x8, 0x0, 0x0) 18:02:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dontfrag={{0x14}}, @hoplimit={{0x14}}, @dstopts_2292={{0x18}}], 0x48}, 0x4048090) 18:02:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:00 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 18:02:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0xda3a}) 18:02:01 executing program 5: open$dir(0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 18:02:01 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001680)) 18:02:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, 0x4000007, 0x0, 0x0) 18:02:01 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 18:02:01 executing program 3: r0 = creat(&(0x7f0000000600)='./file0\x00', 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffff5122}) 18:02:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 18:02:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) 18:02:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fdinfo\x00') preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x0) 18:02:01 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:01 executing program 5: r0 = fork() rt_tgsigqueueinfo(r0, r0, 0x1e, &(0x7f0000000000)={0x0, 0x0, 0x80000200}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) sched_setparam(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setparam(r2, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 18:02:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000ec0), 0x10) 18:02:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1a, 0x0, &(0x7f0000000080)) 18:02:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f0000000180)) 18:02:02 executing program 5: select(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)) 18:02:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000001180)) 18:02:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x8, 0x0, 0x0) 18:02:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc) 18:02:02 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)) 18:02:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x218, 0x3d8, 0x3d8, 0x218, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @dev, [], [], 'xfrm0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [], [], 'vlan0\x00', 'vcan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 18:02:02 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 18:02:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x8, 0x0, 0x0) 18:02:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000000)=@ax25={{0x3, @default}, [@null, @null, @null, @remote, @bcast, @netrom, @null, @netrom]}, 0x80, &(0x7f0000002440)=[{0x0}, {0x0}], 0x2}, 0x40012041) 18:02:03 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 18:02:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0) 18:02:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x4, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}]}, 0x68}}, 0x0) 18:02:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0) 18:02:03 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) execveat(r0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x100) 18:02:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) 18:02:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 18:02:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:03 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$nbd(r0, &(0x7f0000000040), 0x10) 18:02:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x100, 0x0, 0x0) 18:02:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0xc, r1}) 18:02:04 executing program 1: setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 18:02:04 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 18:02:04 executing program 3: gettid() syz_genetlink_get_family_id$team(&(0x7f0000000d80), 0xffffffffffffffff) pipe2$9p(&(0x7f0000003bc0), 0x0) 18:02:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xe, 0x4) 18:02:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000000300)={0x14, 0x0, 0x5, 0x201}, 0x14}}, 0x0) [ 557.690512][ T38] audit: type=1800 audit(1620237724.548:40): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15442 res=0 errno=0 [ 557.885928][ T38] audit: type=1800 audit(1620237724.738:41): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15461 res=0 errno=0 18:02:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) 18:02:04 executing program 2: r0 = socket(0x11, 0x80802, 0x0) r1 = gettid() fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}) 18:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4) 18:02:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={0x0}}, 0x20048091) 18:02:05 executing program 1: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0}}) 18:02:05 executing program 2: add_key(&(0x7f00000004c0)='trusted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:02:05 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000024c0), 0x480, 0x0) openat$incfs(r0, &(0x7f0000003680)='.log\x00', 0x101802, 0x0) 18:02:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 18:02:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') 18:02:05 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1'}, 0x4) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 18:02:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x8, 0x0, 0x0) 18:02:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) 18:02:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) 18:02:06 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b269, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:02:06 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) 18:02:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x5}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) 18:02:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) 18:02:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@window, @window, @mss, @timestamp], 0x4) 18:02:06 executing program 1: open$dir(&(0x7f0000000300)='./file0\x00', 0xa0040, 0x0) 18:02:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140), 0x4) 18:02:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:06 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 18:02:06 executing program 5: open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0x802810, 0x0) 18:02:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="5301ddcf9125aa684689e6662929107a06459d19d162be03bf1fac5d66be359a1b0504cf32506ac5dea4881df861429a84dd5d165f5c9d84c32ee61ea98d507645e20afb8bceb1b80391a2dacb37109bcf96edecd1e5cdb0b8fdd00efbc95fde32ccef918d22971596e6e1fde2a1dbf02ea7e28ac9fcfedec842cb3efb26aef9449a0080a128a66f1698187406c29fc317586088f7c6f385dbd397b68f0d86f6e844baf929712874c09f895d3ba8ab7d972eb628a64455", 0xb7}, {&(0x7f0000001240)="3db35ce6bfe16951285050fa9602c9b0fe572f7b67fda34c", 0x18}, {&(0x7f0000001280)="ace005481baab61e93d40cbf6222b41d0b15535bb11b6d4d5152829c8fd737ee6e3e210fd824a8de9c8ae49b1ee372207a913776feeb2e165b5d9fdb5461e7093df5f262ee5e023a33eceeaa138546d14de18008126e6b51097755ae08b69c37a2fa3b61415e2179259a224487426a9a490fca1716621343cd8473c5b4b1af744326fbf258893b243373131be69a65fa78d07cb68b737f67107fa6700fc18b7cbe3d6bb9463d4b5e0f96074712273ef43dc4", 0xb2}, {&(0x7f0000001340)="47168afce6ad68015e2888792f3e6206c2756f96ecf6994160a97dce6bbf03bb14ef19899c4b96639658aaaae3dc8442b6", 0x31}, {&(0x7f0000001980)="4898d18da43c436d4c79c4b506a499816d3308092b34370d526ef86657875b37b488351c1ddeb90bd896fa7bc1debc1c2d5e63f4a4efa85ba62b72ec98a4fc91f7c84b8e4cc2a584c3f62acbf40cde0a29ac38e2db3ebfee888c0a3980c4f72e29c43143d3c3329f58b36a273b5089a7af4e5e478338e1a68463241d76c259122492639dc39461c98fe381ae88d210c302b4e6f567aa5fc6673b7a50f0ef042185d874a38342d41eab6d85d9bfb26534ad7958b9006bc7b87c8f9b63e8da3e9dab9aab74dff4dce6831c0f426336ada1aa1ae4a528879b92c1881d774ff0a3db732b9072fde9f6393133d005e08dad8031bc8c872d328e4a7e23bdd4c90fb87968ce1786f4237b41c079c2653f99dfd3947640b4176e38414c14bc90f402ca477ab2cd098acc5ddd7c680711db5d49fbfbcbe195a515a4ac90b369923150eb421216a31dedcd60d0d066cbfb49d44da70e8ff701b7f307fb21910f677e51f39eeb93fd61322b3855f1513d0991b03f5f2bcc1003dd866f12a5a0ce15de5ae35eb36eb080fba044f6fae015408ac314ab94c1213bd5b2029fea9fbba556666e9aa89ed3c9678724f0fedd3a667e064a62c0602cd68a8c7fc9110d5ce3dcf9e65123578ddeffd2b9a83884a209ce3ae3b5f259a261101797d622e45d6e63dd5b47c3efa1270fc3d0ab5cd99f808a93be284e38df4121712c1d35248c5a4005c121934da327ec27aa5fc635af3053311f371fd8ded91271e2b8ad7ac000b19ea975dadb8868f30cabfd31dd4503a67efeb1f5e2b42c3112468c1cdf6fca874af436f1950d423f22e30f6c946f7d814bda878da9793976987843ac55a9813941789540e01c9b3efa615374e647150b18d261d1f49d289569388ac3eab89490ece8f4e760e92ee1969247a8a01c8ff39a7611bd1762546fa3fcea226cccaee487540b74e04f6efe7b36c595156aafb235709846e181ae082675ac7d0916bb2b76357426f1a40099bc2cd87d7b35973366a095a0819f1016e1783d0b5da118cc284c074856f765f671e126b9a393e54073a15efcaae408d16f8a37e7d7298f6f8fb44400c3dc6383f690d88abafe4b0da53a6e9aec06a393b3e026ee6298970a91cfcbd2ca4cbdceee5865d4bdbc24365f40538fbe81b1ef8e9e6d864f5595f34a5a72dd8555b115284c77c0ece44f5734ca26f37e1c3b74ce6c61332968398d3ac44256a52f6e5df1d938bd6fbbe81b19140d0c80943409763cae6830773b17d65f4c139ffd27f5f347b5f3cbfb93f2dae8e3bfc8f68e43854223fb12334ee0dfdd892760345021d074cd51ed681682322f639a6be2066106765857a57ce900a6d35c2b4343b4d9407b66feba13a76b6bd5604036f4818609cfd2794c9114f217c5540450029bb05bd7731d219d2cdce0d3e1c96a92cc18f811ccc57549e94caf0e49fdcf734b90f65f8915213ea896baf175a42c9966ef03c0a1e6e69edb45f3f75dc627ca06754c5b19ab916c67d1ee47c125742c5dd565c57a4a322b200191a6034331e69075c03afb4625cfdf28b272a9aabcc676234245829c4c47255518555e7396a508631e2d3396e259bc6aad72e41a347f42e03fa987b27e6f6c87c48eefe994e88740b4746e8bae341dba1687552fc8cc2f3a3b7f6394629582dee611da78cd0a35b02695aeb86a90b59aba676a33a199aae899142022fa6fa258fbc87044b7062001c359eb3e9ebb8801d307a550c96cd81e12cb3f51b64fa494545fbdc02964d6171950777295dc85af6828826b66a4723fad46f9e0eacf82b431eb47c119d890474ebea7e13025fb1fbd47552b7e7e7b7205a3dc922bdc691fcb2e1767492c33231cdb3d1d1b7ed242e68897de6637e1e7ee8967774da9388f1ef68f181cda22cfb68c7f1edd176c94a2f0a3ad273ab8fffff721d270b53e6fddf6726c86204a6cb41acf3d9a9854ca8f87f04a7a3a38bc43451c952e7a644e397845af67f24d3038a57e456fa2a6cbc7181eae6a46d816de21fabde0432867148864da8479e15787b3405078b2edb7a90c045895087f041c88c9d721a31def5ffdbe106310f69cc2d1d190dde38abb6c08d4f1d9eb10973e71c21cb6dad25f611f1b444df162cb65c7bf0b4c4a417e7d371f86b7b7a85b5a3c4c8aa5e4bc648cf250e2a0b7c642b37a97e7480152b5e49586b3a41f3a96bea6154c5e1926a1f21973996e3258bced6ca297a6d348d4f42b6e4e5ccab33cf2ee5589af3070e9073a8de8e101e83cbf62a789157a861863ffbff9aae9f21ae08252f467c7631ba3eced732173caae5f880c4310184bf860529b9e06ed0f4e2c5600b6db76dd48c2ec4e171480af85175df1ad01964c5295fb9db9dbc4c7b3f5b2efb0718fa43872cb5b4f94fbbb9851da681f8cc06bdadabd3321a1fb9d249c094f8c979d07060d07809bfe9d6b9d314f1eac31dd0eca624318f290a5f035454a845000496b4f4a5cf269d9602cc50bacfd7050d394e9e6b64fe3107d2b9e4bc95c22a1ce28289057b0ec90ed67cef109f4b61a5b7e77ccf625f27c4b9f5f56d49c9256eb594d7d54d93ebac421fdf0a9e5b407e61af9a997693d0547506a882dbd59e64a679c33b2ec97b232e2cc8d6a60ea6534dfd9128aa6f48c53409582b9429259982eb704abc1d8d23a3141d98763821962e62063f8186bf19de5cf523c1b38207a38172778b9e4cb39112b296a741c34adb8c4d15acbb44ff5689e0e7fd43e5739256a482513ba94fd937d3f74d1cdc8dd244728167983894cfbbb9073add8d4cb2f49d14c2aba41eb68513e6c46ea24ec68968efd51fad53759afe34ee54d26962b4842a7f27fe4ded528dbc48ff3f2a6153367680a5cafb2770ae6056adeb4783ba8724b90d35df2d4b2528b19d5d58e86d13595b045f40ff18456bbe11559374add748a07880272e7613128647976e1a7c6565245b229ca5b606fb2c59b8eda457b19c4dcb72e6813b632483809a328c8e4d45238a44f5b8e3c08d9f506cf22996bcb636d46ab5296f3101aa08b93ab4d134c8b5e66f80dd1efe7efd4c19c4004d93ad691869e4a5ad33cf4d4c10b684e2c4295c615af7e7603197ef4234ca497c0fe5e42acb538312700b609eab8dd52896a081fbda387187300916938952bf9c73315899bf654fb5a439db6bef120c3909b6ceb30a7513995a83f22226102342b83dc15657a85bc710dd5fbe6e373e9c143e061ce43ac91cbdbcb74018396df88ffc3b89e576b4ac8e54f25f69f1f531566a56d32cffa1671bca218b172dc9593d8b530afe360ad23d4756712f36801ad218c7d982df3a82dabb57865c3e130f22249bb1f13558f670d6c23166f22c42c3268a7ed3459075f7f8f6adad8cb51593c843fc991b62a7f46fd900f614e996662f155e9914ab2edc7acacf776edf9cb6726c9182a190bc299cda3dca8b739ad70a41397cdefb5e200fa4dba0b730582df2f2d7948924a046e7a695a572b7ea94aa552cf00f6cdb4e042496282e79556342ce0f2f8d5c8f2fb6314839b7c4c5cc04b817b38dc244d975fd6d6382937ea085551b66ab87d63ff1c5b57cf1ac606864e91655be223cbf1e213522009de32e6569bf6ccd72ad140ac983ddfa7dd079e784642eb5326db3b9227f9c1ce682461915faf1e374c55de038d3d9ddb73239029af05e63c109171b9c38ea91eb04454140b6276031b83f13ba96b0bd915985a2ca56bd18b60766c774ad78eaacb3678c33c04df090c59ea98643f685e9c86eeecca33d9823b813a2713e947ac2b0df1697a585c79ace3152c2623d81eb3501dadd9f3e2867a7a755e6832b7ee3352714d5b4200e0a5e72a3903f0e3d458d9d418d47cd4d6cf53dd6381397cf0964a0cb7ecfd2297e9ddcf80cedd0ecffae2e19292d9ffcac4b0e1d025b0c39f55863352d21fc592af60426b20e23f87567a80ce6b0035e1bc97e2f43fa7fc66dac564c9fb469d8d0a2482facccc307292493a06143f7de54b2a63aae52e68d86f111d28133d96e6ad6a78f150181a855f04914dc2070158cdf4940025ee3fd207f6ffa68f2a8ba3ae1d676ca0a70192e0f325b5e34f0e08cff74e663c2c02eb62145b13cbfdd71c5346c5916de9f7e2bf32dbe5f50bfff67ac9fc034ad71cfdf2753b1e9bad9487a50ff6a239065249594d9a6e01a84b04a658998e91e9040910d699d9cced4972ee87e79874d7557b1b65bb193a909b074024769514dcbc342d955e13e16533fe5515506d73e2871557f83b62a17e48d484b18a7c7845ca079a6208aaabbdf30a8c5d7d85adce67fd4cc62b47e9a00f7a75b05a90262c55440935aaad47b3927fe52b124c4e97d37a10246ab798fc3d6b42ea67cb5d4eb4c5c9c7751bf80c1446d7478e772d80abb534305d9fa34c19ba3445c94ec889415170675ae2042cc07fbccc11ef58f50805d88d45910bea0daf6f9fff7abfc0b0dfc5c74ac0abaf2639d90fa4e7a31bd4e0f2008ca255b751fdf78fd8ec8b2fb8600721c33b9514434c4b58cc8940e8b29021829eeb2482eaa41916c9ba30e325028ead61a5d078ac6788989342f99dc319a16b033f459e78a9e85afe3270038220b19428f81e1a99a8612bbddbd47c3b58bb1c812947bbe86e7f903c6357ba8fb3234862b6bafdf7f5b89adeb09f50637e57b80fe29e8e446d8502bce5b764bd9a50be138689e981b4629fea5e800901ae1ede4d7e", 0xd0f}], 0x6, &(0x7f00000014c0)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) 18:02:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0) 18:02:07 executing program 3: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0xc500c, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x88400, 0x0) [ 560.168189][ T38] audit: type=1800 audit(1620237727.018:42): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15137 res=0 errno=0 18:02:07 executing program 2: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100766c616e000000001000028006000100000000000400048008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\b\x00%'], 0x60}}, 0x0) [ 560.246126][ T38] audit: type=1800 audit(1620237727.078:43): pid=18360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15137 res=0 errno=0 [ 560.421123][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x98, 0x158, 0x158, 0x1f0, 0x158, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 18:02:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x3) 18:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 18:02:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x8}, &(0x7f0000000280), 0x0) [ 560.697463][T18385] x_tables: duplicate underflow at hook 1 [ 560.754665][T18385] x_tables: duplicate underflow at hook 1 18:02:07 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:07 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) write$nbd(r1, &(0x7f00000002c0)=ANY=[], 0x10) 18:02:07 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) 18:02:07 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x20a800) 18:02:07 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x947, 0x20a800) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001080)={{0x1, 0xee00, 0x0, 0xee01, 0xee00}}) syz_open_dev$vcsn(&(0x7f00000039c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004f00)='ns/time_for_children\x00') syz_open_dev$vcsn(&(0x7f0000006100), 0x1, 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000006140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006180)) syz_open_dev$sndpcmp(&(0x7f00000061c0), 0x9, 0x0) 18:02:08 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000480)='./file0\x00', 0xff, 0x0, 0x0, 0x0, 0x0) 18:02:08 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001580)) 18:02:08 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:08 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_sem_alloc_security\x00') 18:02:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@md0, 0x0, &(0x7f0000000240)='f2fs\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) lsetxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0), 0x2, 0x2) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1b}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x100}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x3}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x400}]}}}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:02:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 18:02:08 executing program 5: syz_open_dev$vcsa(&(0x7f00000006c0), 0x5e, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 18:02:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) 18:02:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0f85403, 0x0) 18:02:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$netlink(0x10, 0x3, 0x12) 18:02:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r2, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') fstatfs(r3, 0x0) 18:02:09 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000480)='./file0\x00', 0xff, 0x4, &(0x7f0000001740)=[{&(0x7f00000004c0)="f5", 0x1, 0x9}, {&(0x7f00000005c0)="0d68bd82cef8c1f5c3bd53e97a9217ffc3e5092bc9", 0x15, 0x3}, {&(0x7f0000000740)="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", 0xf00, 0x101}, {0x0}], 0x2020080, &(0x7f00000017c0)={[{@umask}]}) 18:02:09 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000540)) r0 = syz_open_dev$sndpcmp(&(0x7f0000001ec0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 562.500789][T18456] loop2: detected capacity change from 0 to 8 18:02:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x6681, 0x0) 18:02:09 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_sem_alloc_security\x00') [ 562.671836][ T3225] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.678227][ T3225] ieee802154 phy1 wpan1: encryption failed: -22 18:02:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0) 18:02:09 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x4c042, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1, 0x0, 0x0, 0x1b) [ 562.984001][ T38] audit: type=1800 audit(1620237729.839:44): pid=18477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15477 res=0 errno=0 18:02:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, 0x0}, 0x0) 18:02:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x3}}) 18:02:10 executing program 1: syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)) [ 563.086606][ T38] audit: type=1800 audit(1620237729.879:45): pid=18477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15477 res=0 errno=0 18:02:10 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000001b00), 0x6, 0x0) 18:02:10 executing program 5: syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f00000017c0)={[{@longad}, {@umask={'umask', 0x3d, 0xffffffff}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 18:02:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1}}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1}}) 18:02:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:10 executing program 2: msgctl$IPC_SET(0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000006100), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f00000061c0), 0x0, 0x0) 18:02:10 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{}]}) 18:02:10 executing program 1: syz_open_dev$vcsn(&(0x7f00000039c0), 0x0, 0x0) 18:02:10 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_sem_alloc_security\x00') 18:02:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0505405, &(0x7f0000000180)) 18:02:11 executing program 1: syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f00000017c0)={[], [{@dont_measure}]}) [ 564.375611][T18524] UDF-fs: bad mount option "dont_measure" or missing value [ 564.510324][T18524] UDF-fs: bad mount option "dont_measure" or missing value 18:02:11 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x40) 18:02:11 executing program 3: r0 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_sem_alloc_security\x00') 18:02:11 executing program 2: syz_read_part_table(0x0, 0x3, &(0x7f0000001580)=[{&(0x7f0000000240)="5731bf94959b278fa6cfd26faff79cb26325a08b5b21f7663d368b93650d04f3e0e1ade230ec5846f107b3d2baa7797c38a49c0dfc31832e349338c75edc0a1b136596dd82c38381ea62558b81c664c5b0e3b8adf5aca63927b4bac5c941dafdf90bb9a1464cd42f63447af032d00f0c3770c8f49eca19c32afd9d864c4ff09a8a26ef4bd061da6ea3ae27c9b372da01831b3cb087e50f64e6642a630f99c4677bbb0971771cbc9f166950ae715f6dfa60ba2fd5baf1", 0xb6, 0x80000000}, {&(0x7f00000016c0), 0x0, 0x5}, {0x0}]) 18:02:11 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002880)={0x0, [], 0x0, "483d8188430445"}) 18:02:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000005b40), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000005bc0)={0x0, 0x700}) [ 564.907763][T18544] loop2: detected capacity change from 0 to 264192 18:02:11 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x3, &(0x7f0000001740)=[{&(0x7f00000004c0)="f5", 0x1, 0x9}, {&(0x7f00000005c0)='\r', 0x1}, {&(0x7f0000000740)="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", 0xf00, 0x101}], 0x0, &(0x7f00000017c0)) [ 565.079109][T18544] loop2: detected capacity change from 0 to 264192 18:02:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x10}}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) [ 565.129424][T18557] loop1: detected capacity change from 0 to 8 [ 565.223856][T18557] loop1: detected capacity change from 0 to 8 18:02:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x80e85411, &(0x7f0000000180)) 18:02:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:12 executing program 1: syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f00000017c0)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 18:02:12 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000001ec0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) [ 565.583301][T18577] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 18:02:12 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='nostrict,undelete,gid=', @ANYRESDEC]) [ 565.648140][T18577] UDF-fs: Scanning with blocksize 512 failed [ 565.656790][T18577] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 565.665950][T18577] UDF-fs: Scanning with blocksize 1024 failed [ 565.674081][T18577] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 565.682433][T18577] UDF-fs: Scanning with blocksize 2048 failed [ 565.690923][T18577] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found 18:02:12 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000240), 0x1, 0x40) [ 565.699299][T18577] UDF-fs: Scanning with blocksize 4096 failed 18:02:12 executing program 1: syz_open_dev$vcsn(&(0x7f0000006100), 0x0, 0x1) 18:02:12 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000001ec0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000001f00)) 18:02:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:12 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 18:02:12 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0xfff, 0x1}], 0x0, 0x0) [ 566.166360][T18611] loop1: detected capacity change from 0 to 8 18:02:13 executing program 2: syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f00000017c0)={[{@umask}]}) 18:02:13 executing program 3: syz_read_part_table(0x0, 0x4, &(0x7f0000001580)=[{&(0x7f0000000200)="b693e8e84414e3ff39382dbb7ae5ec5a617308abc6d120b2a6115fefaf1bb02fad621a5f112f1998c5a8dfd1aa1d600e4a6b4bc13e", 0x35}, {&(0x7f0000000240)="5731bf94959b278fa6cfd26faff79cb26325a08b5b21f7663d368b93650d04f3e0e1ade230ec5846f107b3d2baa7797c38a49c0dfc31832e349338c75edc0a1b136596dd82c38381ea62558b81c664c5b0e3b8adf5aca63927b4bac5c941dafdf90bb9a1464cd42f63447af032d00f0c3770c8f49eca19c32afd9d864c4ff09a8a26ef4bd061da6ea3ae27c9b372da01831b3cb087e50f64e6642a630f99c4677bbb0971771cbc9f166950ae715f6dfa60ba2fd5baf1e053acb5fdf3c76486660ccbe94299b962354d550f0fb02185cb39622ceba0030b17d961", 0xda, 0x80000000}, {0x0, 0x0, 0x5}, {0x0}]) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) [ 566.286484][T18611] loop1: detected capacity change from 0 to 8 [ 566.293381][T18620] loop3: detected capacity change from 0 to 264192 18:02:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:13 executing program 5: syz_mount_image$udf(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f0000001740)=[{&(0x7f00000004c0)="f5bcace615bc4f501e659765e21a6c9b1999c1c75e7369c9ca118c654e55945a606cbe043a8c1d4ea30912a8870780960ce13ab52207866ab1e64d7d0ac7ae4a34623d2b04729cc1e50c474ca3757cd8834db2febb5c491248946957a3eb37367f11d9a7f59d89ef9b7f621de67f1cd86a53c2fcc9216522716f3b6d368b3510c5575ae855aa42701a77cb639a582c5dce4bd3726657c361acaf5b", 0x9b, 0x9}, {&(0x7f00000005c0)="0d68bd82cef8c1f5c3bd53e97a9217ffc3e5092bc954257656135e37d15aff33af6bf12ad3395c38648415b1f29b5eeb007e55de84e43e483d9d5ae9d6579c7108a04a28fa2845aaf72491d4614ca779a4031ae72733819110ba83566a0a9cb0cd708a42b534083562", 0x69, 0x3}, {0x0}], 0x0, &(0x7f00000017c0)={[{@longad}, {@umask}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x61, 0x38, 0x61, 0x0, 0x62, 0x66], 0x2d, [0x63, 0x0, 0xc], 0x2d, [0x65], 0x2d, [0x0, 0x0, 0x61, 0x34], 0x2d, [0x0, 0x36, 0x0, 0x5e, 0x0, 0x66, 0x64, 0x4a]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@dont_appraise}, {@fsmagic}]}) 18:02:13 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000000540)) [ 566.411085][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.451211][T18620] loop3: detected capacity change from 0 to 264192 [ 566.481033][T18627] UDF-fs: Scanning with blocksize 512 failed 18:02:13 executing program 1: write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffe49) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = eventfd2(0x0, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0xcc) [ 566.521329][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.552956][T18627] UDF-fs: Scanning with blocksize 1024 failed [ 566.561779][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found 18:02:13 executing program 3: syz_open_dev$vcsn(&(0x7f0000006100), 0x1, 0x0) [ 566.572007][T18627] UDF-fs: Scanning with blocksize 2048 failed [ 566.582103][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.604962][T18627] UDF-fs: Scanning with blocksize 4096 failed [ 566.649062][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.671163][T18627] UDF-fs: Scanning with blocksize 512 failed [ 566.677834][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.687859][T18627] UDF-fs: Scanning with blocksize 1024 failed 18:02:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) [ 566.694934][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.703087][T18627] UDF-fs: Scanning with blocksize 2048 failed [ 566.713874][T18627] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 566.721825][T18627] UDF-fs: Scanning with blocksize 4096 failed 18:02:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x4000) 18:02:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote, 0xffffff7f}, 0x80, 0x0}}], 0x1, 0x0) 18:02:13 executing program 1: syz_open_dev$sndpcmp(&(0x7f00000061c0), 0x0, 0x8300) 18:02:13 executing program 3: syz_read_part_table(0x0, 0x4, &(0x7f0000001580)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="5731bf94959b278fa6cfd26faff79cb26325a08b5b21f7663d368b93650d04f3e0e1ade230ec5846f107b3d2baa7797c38a49c0dfc31832e349338c75edc0a1b136596dd82c38381ea62558b81c664c5b0e3b8adf5aca63927b4bac5c941dafdf90bb9a1464cd42f63447af032d00f0c3770c8f49eca19c32afd9d864c4ff09a8a26ef4bd061da6ea3ae27c9b372da01831b3cb087e50f64e6642a630f99c4677bbb0971771cbc9f166950ae715f6dfa60ba2fd5baf1e053acb5fdf3", 0xbc, 0x80000000}, {0x0}, {0x0}]) sched_rr_get_interval(0xffffffffffffffff, 0x0) [ 567.057105][T18671] loop3: detected capacity change from 0 to 264192 18:02:13 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x10100) [ 567.161949][T18671] loop3: detected capacity change from 0 to 264192 18:02:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @private1}, 0x1c, 0x0}, 0x0) 18:02:14 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000005b40), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000005bc0)) 18:02:14 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000000300)="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", 0x3ff, 0x1}], 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB]) [ 567.511844][T18692] loop3: detected capacity change from 0 to 2 [ 567.565025][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 567.599666][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 18:02:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) [ 567.611509][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.619703][T18692] UDF-fs: Scanning with blocksize 512 failed [ 567.626663][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 567.641052][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 567.659493][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.675487][T18692] UDF-fs: Scanning with blocksize 1024 failed 18:02:14 executing program 5: syz_io_uring_setup(0x50b4, &(0x7f00000000c0), &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 18:02:14 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000300)="948db0dfecdd3ac7bd27c702716df9f83aecf0b344114a0327ffcb23d7c2ec9680c2d23524c026d7fd7300b7f786e234488563c6f1b8100dfad52edc9e22d824d087963b0438c29623f8cbf17d36d7b728f491e8f9dff840b41b185822806180a46396afa044c8b570e5c5ef65d08ab995e462bd8b8a4e932dbb253f2374e00adccdbec74b788de82028e4495f3d8b38b1fd92b1375afc8b40624012a328abcd01a2c98068ee2f0b801dd67ba14bfe0ac43de705a31be6aaeda3266896952a66db923a1e6826d5e2304067d2c477ed11606eabb1b2d0ae209d7bf9bcbcf58b834ec54104f0e4ac63fc686bfd6e17018d28d2d9951f8b870c4240042110ccbb825a8ff09447db4f8e7357eaab4eab8f592f98839d8c71599127c90cfad379836d58df7706130c7018f2ed4f0672fee28b56e1e443692ed7be4cdb907f096b8d9035e1bd86c2e849ad78090ede43e3650e06bf5cdf566bf1fec06bff711da177e09f3e40f0901fe27aa8490c5d404f7f186243116db5a4493ad76f964535ae1ffe7eb5f05ebee2ea72a6c20d215e655a79a7859b36e9c47559ce08122ccc4eee8bd574806aa1181dd8776f3818325e649fd738b8b4dadd1a3243c24bb980c1b1b0741dc349464c4865d771991c7cd679c8d045115a9aeb981338d3c469afbe8dd0c1677836c6b777f1711001c93aa9fd8d877f9eff60d18f5542a0a9b9b350c6", 0x1ff, 0x1}], 0x0, &(0x7f0000001380)=ANY=[]) [ 567.712195][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 567.738274][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 567.769180][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.782126][T18692] UDF-fs: Scanning with blocksize 2048 failed [ 567.792112][T18706] loop1: detected capacity change from 0 to 1 [ 567.800819][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 567.816395][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 567.827131][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 567.844143][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 567.884463][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.913447][T18706] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 567.956852][T18692] UDF-fs: Scanning with blocksize 4096 failed [ 567.988221][T18706] UDF-fs: Scanning with blocksize 512 failed 18:02:14 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=none,afid=0x0000000000000005,access=user,', @ANYBLOB]) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) 18:02:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) [ 568.003287][T18692] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 568.024394][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 568.102528][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 568.135056][T18692] loop3: detected capacity change from 0 to 2 [ 568.153476][T18706] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 568.161885][T18706] UDF-fs: Scanning with blocksize 1024 failed [ 568.163683][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 568.220132][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 18:02:15 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=non,,']) [ 568.290209][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 568.316134][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 18:02:15 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001080)={{0x1, 0xee00, 0x0, 0xee01, 0xee00}}) [ 568.352757][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 568.368703][T18706] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 568.379634][T18706] UDF-fs: Scanning with blocksize 2048 failed [ 568.386491][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 568.406880][T18734] 9p: Unknown Cache mode non [ 568.408596][T18692] UDF-fs: Scanning with blocksize 512 failed [ 568.428268][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 568.458642][T18706] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 568.484100][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 18:02:15 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 18:02:15 executing program 2: r0 = fork() fork() fork() wait4(r0, 0x0, 0x40000001, 0x0) [ 568.516604][T18706] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 568.554460][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 568.568634][T18706] UDF-fs: Scanning with blocksize 4096 failed [ 568.574746][T18706] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 568.610938][T18692] UDF-fs: Scanning with blocksize 1024 failed [ 568.617504][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 568.697846][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 568.737182][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 568.784923][T18692] UDF-fs: Scanning with blocksize 2048 failed [ 568.798250][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 568.858335][T18692] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 568.892649][T18692] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 568.904798][T18692] UDF-fs: Scanning with blocksize 4096 failed [ 568.929471][T18692] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) 18:02:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10b) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 18:02:15 executing program 5: pselect6(0x1e, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 18:02:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 18:02:15 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "db83346a7a7afada", "743f3172ac02b6a24b2c9ba890bffd76a1572516e492a408ca3ed423593e32bb"}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x74308580, 0x0, 0x0, 0x0, 0x0) 18:02:16 executing program 5: r0 = fsopen(&(0x7f0000000380)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 18:02:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40505331, &(0x7f0000000400)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:16 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x7}, &(0x7f0000000000)={0x0, 0x989680}, 0x0) [ 569.275366][ T38] audit: type=1400 audit(1620237736.129:46): avc: denied { sys_admin } for pid=18777 comm="syz-executor.1" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 569.291602][T18778] IPVS: ftp: loaded support on port[0] = 21 18:02:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:16 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x408c5333, &(0x7f0000000400)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:16 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)) syz_io_uring_setup(0x50b4, &(0x7f00000000c0), &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 18:02:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)={0x87}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:16 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0xfffffffffffffffa, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002680)={'ip6_vti0\x00', 0x0}) 18:02:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x8, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x4c}}, 0x0) 18:02:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)) tkill(0x0, 0x7) [ 569.842302][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.872398][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.901720][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.938457][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:16 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 18:02:16 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc04c5349, &(0x7f0000000380)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) 18:02:16 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) tkill(r0, 0x7) 18:02:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:17 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)={0x90c8, 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:17 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20c880) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100), 0x0) 18:02:17 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) tkill(r0, 0x7) 18:02:17 executing program 3: syz_io_uring_setup(0x50b1, &(0x7f00000000c0), &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x6cd8, &(0x7f0000000200), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 18:02:17 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0105303, &(0x7f0000000400)={{}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:17 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0105303, &(0x7f0000000400)={{0x0, 0xbf}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:17 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) tkill(r0, 0x7) 18:02:17 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x0) read$char_usb(r0, 0x0, 0x0) 18:02:18 executing program 2: pselect6(0x6c, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) 18:02:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mknod(&(0x7f00000002c0)='./bus/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus/file0\x00', 0x0) 18:02:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:18 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) tkill(r0, 0x7) 18:02:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) fork() 18:02:18 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0505350, &(0x7f0000000400)={{0x5}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:18 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0605345, &(0x7f0000000380)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:18 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) 18:02:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000003680)=[{{&(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast}}}], 0x20}}], 0x2, 0x0) 18:02:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:19 executing program 3: pselect6(0xfffffffffffffe82, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0, 0x0) 18:02:19 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) tkill(r0, 0x7) 18:02:19 executing program 2: pselect6(0x9f, &(0x7f0000000040), 0x0, &(0x7f0000000000)={0x72c}, 0x0, 0x0) 18:02:19 executing program 3: r0 = fsopen(&(0x7f0000000380)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 18:02:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:19 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc02c5341, &(0x7f0000000380)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:19 executing program 3: fork() wait4(0xffffffffffffffff, 0x0, 0x40000009, 0x0) 18:02:19 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000380)={0x8c}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:19 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0x40505331, &(0x7f0000000380)={0x87000000}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:19 executing program 5: socket$inet6(0xa, 0x3, 0x3a) 18:02:19 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) 18:02:19 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x40101) write$char_usb(r0, &(0x7f00000002c0)="bb", 0x1) 18:02:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:19 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:20 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap, 0x22}]}}) 18:02:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000840)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x2e0}}, 0x0) [ 573.264252][ T38] audit: type=1804 audit(1620237740.120:47): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/359/file0" dev="sda1" ino=14771 res=1 errno=0 [ 573.343704][ T38] audit: type=1804 audit(1620237740.160:48): pid=18998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/359/file0" dev="sda1" ino=14771 res=1 errno=0 [ 573.467843][ T38] audit: type=1804 audit(1620237740.230:49): pid=18998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/359/file0" dev="sda1" ino=14771 res=1 errno=0 [ 573.508456][T19009] 9p: Unknown Cache mode mmap" 18:02:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:20 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:20 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0bc5310, &(0x7f0000000380)={0x87}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:20 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85322, &(0x7f0000000400)={{}, 'port1\x00'}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) tkill(r0, 0x7) [ 573.619785][ T38] audit: type=1804 audit(1620237740.240:50): pid=19004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/359/file0" dev="sda1" ino=14771 res=1 errno=0 [ 573.746347][ T38] audit: type=1804 audit(1620237740.600:51): pid=19024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/360/file0" dev="sda1" ino=14721 res=1 errno=0 18:02:20 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 573.870215][ T38] audit: type=1804 audit(1620237740.640:52): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/360/file0" dev="sda1" ino=14721 res=1 errno=0 18:02:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 18:02:20 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) 18:02:20 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40505330, &(0x7f0000000180)={0x90c8}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc0a85322, &(0x7f0000000380)) tkill(r0, 0x7) 18:02:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 574.137378][ T38] audit: type=1804 audit(1620237740.990:53): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/361/file0" dev="sda1" ino=14273 res=1 errno=0 18:02:21 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000400)={{}, 'port1\x00'}) tkill(r0, 0x7) 18:02:21 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 574.268463][ T38] audit: type=1804 audit(1620237741.030:54): pid=19033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/361/file0" dev="sda1" ino=14273 res=1 errno=0 18:02:21 executing program 5: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='/dev/zero\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) [ 574.556976][ T38] audit: type=1804 audit(1620237741.410:55): pid=19062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/362/file0" dev="sda1" ino=14562 res=1 errno=0 18:02:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000180)=""/51, 0x33) 18:02:21 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 18:02:21 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x40}, 'port1\x00'}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 574.712005][ T38] audit: type=1804 audit(1620237741.450:56): pid=19058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/362/file0" dev="sda1" ino=14562 res=1 errno=0 18:02:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) [ 574.958986][ T38] audit: type=1804 audit(1620237741.820:57): pid=19078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/363/file0" dev="sda1" ino=14737 res=1 errno=0 18:02:21 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 18:02:21 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:21 executing program 5: syz_emit_ethernet(0x6c, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3c43d6", 0x4c, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x36, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e55d429fc0f29a4156e91dff443204fb4505a9fe6c505a48bf4b7f59e4b46fa7d63b6dc33aa5304c23db"}}}}}}}, 0x0) 18:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) 18:02:22 executing program 5: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0x404c534a, &(0x7f0000000380)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 18:02:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x0, 0xae06, 0x4d9, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0xffffb000) 18:02:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:22 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:22 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 18:02:22 executing program 5: fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) pselect6(0x40, &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x1}, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 18:02:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet6(r0, 0x0, 0x0, 0x0) 18:02:22 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) [ 575.976229][ T38] audit: type=1804 audit(1620237742.830:58): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/364/file0" dev="sda1" ino=13955 res=1 errno=0 18:02:22 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:23 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@xfs={0x1c}, &(0x7f0000000100), 0x0) 18:02:23 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:23 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x7fff) 18:02:23 executing program 5: io_setup(0x1, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001840)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:23 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:23 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 18:02:24 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:24 executing program 3: io_setup(0x1, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f0000001840)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 577.109924][ T38] audit: type=1804 audit(1620237743.970:59): pid=19154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/365/file0" dev="sda1" ino=14610 res=1 errno=0 18:02:24 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="589cf7e98c75bbae5acc6c1b61415a6f35e1322d6a93a0e43c9f", 0x1a, 0x0, 0x0, 0x0) 18:02:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:24 executing program 1: r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 18:02:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000280)=ANY=[@ANYBLOB="480100001a000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000040000000000000000000033000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000400000000000000400000000000000000000000000000000000000000000000000000000000000000000000020000414c8239000000000058000100636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x148}}, 0x0) [ 577.437983][T19168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=19168 comm=syz-executor.0 18:02:24 executing program 1: r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:24 executing program 3: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 18:02:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 18:02:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:24 executing program 1: r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000000)={'veth1_vlan\x00', @ifru_names}) 18:02:24 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:02:24 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 18:02:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(0x0, 0x7) 18:02:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fd215f0332701d9d14a3f9209d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fd", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x8000, 0x10000}, 0x1c) [ 578.208100][T19202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=362 sclass=netlink_route_socket pid=19202 comm=syz-executor.4 18:02:25 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/81) 18:02:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fd215f0332701d9d14a3f9209d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fd", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 578.424863][T19218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=19218 comm=syz-executor.0 18:02:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fd215f0332701d9d14a3f9209d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fd", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:25 executing program 5: io_setup(0x2, &(0x7f00000019c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 18:02:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fd215f0332701d9d14a3f9209d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fd", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:25 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:02:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(0x0, 0x7) 18:02:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:26 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000340)) 18:02:26 executing program 5: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) [ 579.305215][T19240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=362 sclass=netlink_route_socket pid=19240 comm=syz-executor.4 18:02:26 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xaacc0, 0x0) 18:02:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x0) [ 579.502021][T19253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=19253 comm=syz-executor.0 18:02:26 executing program 5: io_setup(0x2, &(0x7f00000019c0)=0x0) io_submit(r0, 0x0, 0x0) io_getevents(r0, 0x5, 0x0, 0x0, 0x0) 18:02:26 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 18:02:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:26 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 18:02:27 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10300, 0x0) 18:02:27 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:02:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(0x0, 0x7) 18:02:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 580.249354][T19269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=362 sclass=netlink_route_socket pid=19269 comm=syz-executor.4 18:02:27 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) 18:02:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0210080503"], 0x18}}, 0x0) 18:02:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000380)) 18:02:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 18:02:27 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 18:02:27 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futimesat(r0, 0x0, 0x0) 18:02:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:27 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x68bc0, 0x0) 18:02:27 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f0000001140)=[{&(0x7f0000001080)=""/158, 0x9e}], 0x1, &(0x7f0000001640)=[{&(0x7f0000001180)=""/152, 0x98}, {&(0x7f0000001240)=""/197, 0xfffffd6f}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/184, 0xb8}, {&(0x7f0000001440)=""/220, 0xdc}, {&(0x7f0000001540)=""/82, 0x52}], 0x6, 0x0) 18:02:28 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:02:28 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x88002) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4138fb4daa6ab346ca8e0209d357aadd40cfa291a177f5cf36ba910d3ca110469570147907a4d268ec96966d168a69d76ec12aea8bdb2573dc617c0080000096", "77ab39c57242b51caeb89c6d7c1f55ca61eb1f2df842b15a5995f7a72be147e1692c06498822c4158f49449a0fb6beba8175c8a1b7479daf01da2ed75ccf876f", "a7a8eccbcef9c84013353af9da05a12e4141eef944d82bb0c43f2330d948af34"}) 18:02:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:28 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1ff) [ 581.403208][ T38] audit: type=1804 audit(1620237748.260:60): pid=19314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/369/file0" dev="sda1" ino=14018 res=1 errno=0 18:02:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 18:02:28 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:02:28 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021008050300000029bd7000fc9bdf25010014"], 0x18}}, 0x0) [ 581.565112][ T38] audit: type=1804 audit(1620237748.300:61): pid=19308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/369/file0" dev="sda1" ino=14018 res=1 errno=0 [ 581.735214][ T38] audit: type=1804 audit(1620237748.590:62): pid=19328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/370/file0" dev="sda1" ino=13971 res=1 errno=0 [ 581.824867][ T38] audit: type=1804 audit(1620237748.590:63): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/370/file0" dev="sda1" ino=13971 res=1 errno=0 18:02:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:28 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:28 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200), 0x8, 0xfffffffffffffffd) 18:02:28 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:02:29 executing program 3: io_setup(0x2, &(0x7f00000019c0)=0x0) io_submit(r0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 18:02:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x6}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac39620378", 0x7d}], 0x100000000000011c, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 582.187079][ T38] audit: type=1804 audit(1620237749.040:64): pid=19338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/371/file0" dev="sda1" ino=14161 res=1 errno=0 18:02:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:29 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:29 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) [ 582.352640][ T38] audit: type=1804 audit(1620237749.080:65): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/371/file0" dev="sda1" ino=14161 res=1 errno=0 18:02:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x6}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac39620378", 0x7d}], 0x100000000000011c, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:29 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) [ 582.453720][ T38] audit: type=1804 audit(1620237749.310:66): pid=19354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/372/file0" dev="sda1" ino=14114 res=1 errno=0 18:02:29 executing program 3: memfd_create(&(0x7f0000000000)=':-x\x00', 0x2) [ 582.636514][ T38] audit: type=1804 audit(1620237749.350:67): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/372/file0" dev="sda1" ino=14114 res=1 errno=0 18:02:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:29 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x6}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac39620378", 0x7d}], 0x100000000000011c, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:29 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:29 executing program 3: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000004) 18:02:30 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002800)=@buf={0x50, &(0x7f0000000080)="a9c6150cf40b2cc578069952d0b3d1907bea48d957498d5ae279e1c20d4cfc7978ff4c1bb9260d31ff9c9510bebc84fe03fc80c21fd83ba6775020d9229900f3f9418938ae58a750d2c7b7d23bcbd83a"}) [ 583.132748][ T38] audit: type=1804 audit(1620237749.990:68): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/373/file0" dev="sda1" ino=14130 res=1 errno=0 18:02:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a0001"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:30 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x6}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac39620378", 0x7d}], 0x100000000000011c, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:30 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) [ 583.275776][ T38] audit: type=1804 audit(1620237749.990:69): pid=19372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/373/file0" dev="sda1" ino=14130 res=1 errno=0 18:02:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0, 0xfffffeb5}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fd215f0332701d9d14a3f9209d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000000000000000730428fde6136b8e", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x1e) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) 18:02:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000200), 0x4) 18:02:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:30 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt(r0, 0x9, 0x0, 0x0, 0x0) 18:02:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:02:30 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x5) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x90, 0x0, 0xb0, 0x90, 0xb0, 0x128, 0x1a8, 0x1a8, 0x128, 0x1a8, 0x3, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dummy0\x00', 'team0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 18:02:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a0001"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x0, @local}}) 18:02:31 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:31 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) [ 584.293531][T19422] x_tables: duplicate underflow at hook 3 18:02:31 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:31 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xfffffff7) 18:02:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:31 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x81, 0x25}, 0x1c) 18:02:31 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:31 executing program 3: r0 = getpid() migrate_pages(r0, 0x6, &(0x7f0000000080)=0xd5d, &(0x7f00000000c0)=0x1) 18:02:31 executing program 5: memfd_create(&(0x7f0000000100)='#@x*:{&%[.\x00', 0x0) 18:02:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a0001"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:32 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:32 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:32 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 18:02:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0xbbe4c03760ed3a73, 0x4) 18:02:32 executing program 5: ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80041270, 0x0) 18:02:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:32 executing program 3: openat$null(0xffffff9c, &(0x7f0000004e40), 0x6000, 0x0) 18:02:32 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:32 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005600)={'wlan1\x00'}) 18:02:33 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002440)) 18:02:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:33 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 18:02:33 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:33 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:33 executing program 3: openat(0xffffffffffffffff, 0x0, 0x400000, 0x0) 18:02:33 executing program 5: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) 18:02:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:33 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:33 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:33 executing program 3: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x5) 18:02:33 executing program 5: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 18:02:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000008ff7f000000008b569da04dddeca7060002400002000004000480050003002f0000000b0001"], 0x34}}, 0x0) [ 587.120180][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 587.120199][ T38] audit: type=1804 audit(1620237753.981:84): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/381/file0" dev="sda1" ino=14387 res=1 errno=0 18:02:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0xffff, 0x0) io_setup(0x81, &(0x7f0000000100)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) dup3(r0, r2, 0x80000) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x5, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) write$binfmt_elf32(r0, 0x0, 0x419) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:02:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r2, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='#', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000600)="fff23664898c8a2787cafdf6cc129bad1a0f26aab2e37f04b9e32314179fc4891122ab4b5204416503b6590f8c37bc9d872785d77977ffbc2249c92d6b635c401bf99dce8d936378062454f296692422e1d52c2d12682e8c9732e2325b338b35284117d297c61fc3b1436432d9042044335446494d275770f6e66d50a599cabb055d519c7d27ce0809f49e8e0000000004000000fc78a4757c89f9429940aaf746c3695e4e02f7bdfebbd11443c10d46de31fd3ff9f48fabc83fe197c64b5ddf9d87c179f6c6709bf3495ac56f2f94e4f054b40bbc", 0xd5, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 18:02:34 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:34 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) [ 587.199058][ T38] audit: type=1804 audit(1620237753.981:85): pid=19518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/381/file0" dev="sda1" ino=14387 res=1 errno=0 18:02:34 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) [ 587.484471][ T38] audit: type=1804 audit(1620237754.341:86): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/382/file0" dev="sda1" ino=14529 res=1 errno=0 [ 587.592869][ T38] audit: type=1804 audit(1620237754.341:87): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/382/file0" dev="sda1" ino=14529 res=1 errno=0 18:02:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:34 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 18:02:34 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:35 executing program 5: r0 = fork() tkill(r0, 0x36) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, r0, 0x0, 0xffffffffffffffff, 0x0) fork() tkill(0x0, 0x36) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 588.153991][ T38] audit: type=1804 audit(1620237755.011:88): pid=19562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/383/file0" dev="sda1" ino=14338 res=1 errno=0 18:02:35 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:35 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 588.263895][ T38] audit: type=1804 audit(1620237755.041:89): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/383/file0" dev="sda1" ino=14338 res=1 errno=0 18:02:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000018c0)={&(0x7f0000001800), 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14}, 0x14}}, 0x50) 18:02:35 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) 18:02:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@loopback}, 0x14) [ 588.538182][ T38] audit: type=1804 audit(1620237755.401:90): pid=19586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/384/file0" dev="sda1" ino=14532 res=1 errno=0 18:02:35 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 588.687157][ T38] audit: type=1804 audit(1620237755.401:91): pid=19577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/384/file0" dev="sda1" ino=14532 res=1 errno=0 [ 588.835023][ T38] audit: type=1804 audit(1620237755.691:92): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/385/file0" dev="sda1" ino=14306 res=1 errno=0 18:02:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000002e00)='./file0/file1\x00', 0x0, 0x0) 18:02:35 executing program 3: r0 = socket(0xa, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 18:02:35 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:35 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x1}) tkill(r0, 0x7) [ 588.955488][ T38] audit: type=1804 audit(1620237755.721:93): pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/385/file0" dev="sda1" ino=14306 res=1 errno=0 18:02:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x48842) write$evdev(r0, 0x0, 0x0) 18:02:36 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) tkill(r0, 0x7) 18:02:36 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x410000) 18:02:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14}, 0x14}}, 0x0) 18:02:36 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:02:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 18:02:36 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:36 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) tkill(r0, 0x7) 18:02:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x1f0, 0x0, 0x0, 0xb0, 0x0, 0xb0, 0x15c, 0x1a8, 0x1a8, 0x15c, 0x1a8, 0x3, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge0\x00', 'team0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 18:02:36 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:02:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0xec4}}, 0x0) 18:02:37 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:37 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) tkill(r0, 0x7) 18:02:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:02:37 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 18:02:37 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) tkill(r0, 0x7) 18:02:37 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x375, 0xf, [@challenge={0x10, 0x1}, @fast_bss_trans={0x37, 0x133, {0x0, 0x7, "f717393354c72f243c7f3c8c90d19fa2", "9976da3cc5fe6e98285d000db138408e3edec8df898d60f180a543b24b1d0ac5", "6e038c55b4daf1f06c2c26f86693a77ac3076624d4a4b178a24cac20d1112ba2", [{0x0, 0x23, "51108f85d8ed5148b69e457e64ad9fcc98f34225b5d2e29a6a9d72e0a1d78106b3066e"}, {0x0, 0x21, "57a0c44970cebd260a707a1009fd7386482410bb9ff6fe9a20b2e258bf32d03edf"}, {0x0, 0x7, "7e3cd8b9f7e2e0"}, {0x0, 0x27, "8c5fbffc87b4d92a44b52b4d25b8b20e86b85f4c7990f3c86aa000b855175b134e989672097d06"}, {0x0, 0x22, "37f1d27f7309fb81aa36c44049a8577c803655d514ac71a899c262c3175ad1242f3d"}, {0x0, 0x22, "644620db5c0d4185f533fa6539388bfff5b21c527cd02e83d71ce31c24493b37e262"}, {0x0, 0x1d, "72cd0887785e746233e94ed1df06edfd890039fdebdc19a7759aa19aa3"}]}}, @measure_req={0x26, 0x77, {0x0, 0x48, 0x0, "1c89903e1194e7ad30ce5c75bb9a2614b6c80a9f975adc932ad0bceb65f35253d1323eb8669a51507bdf10a3148773f333fce4eb2dc54abb31c4995a1b2b097ab2e3b8a2b763159120a8321b3a0430ebccf68b0568e1c0e1cd17a59c5905bb8fae00e149c36c273c89df17172e07e9007a92443b"}}, @tim={0x5, 0x20, {0x0, 0x0, 0x0, "c2ffcc658a74328b678c94ac2ab0d52cc5a14d31ca6475675ccd5600a7"}}, @random={0x0, 0x28, "8f18504aa19adb1839e97a94513031373bc8f5803b154e3b2c858455c20886be425a8c1394aa2907"}, @random_vendor={0xdd, 0xef, "a8bdafe4190639fd2dc3f79a01f20488f10143788674643dfffb5a74410476a852d3e3187914d407ce25782ee6cfe8aea2724e3ae76c89ad15213c610bc04ce1e7c11e7b4a6f85629fc10168ce82348db29f7325e25ee13b362c7c28e0514bd3c211d744448c69c41b179371d00918bfc9cad613a525dd578946b0fbbd1a13bc1286379ed2657d6dd5d458b42e0284ee6e98132f72495118809331ad03f02114a18d32248a4de432339855848005162659a1cceefe1a572063bf5358f2644aa2632d2a6d48ffdfa3181d6885209cd9918a60fd1b36f79ab5d374271ac270a05aaafb5ce6ea5882f04a5aeff3734c38"}, @erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4}, @fast_bss_trans={0x37, 0x78, {0x0, 0x1, "2241306a1015c146f857de64427a509d", "4806de7eb24c5f06c4d7958063a01732798e32570bb5c4e4f783d3d750501279", "ed17780cdafd36649bb7d1066db98c70afe397de271246239e7bf2e6774c4c0c", [{0x0, 0x24, "3de660a4e336723e37777f5732d6ade3263dffa972fdd84a68fe29701a687741c16a466e"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@dsss={0x3, 0x1}, @supported_rates={0x1, 0x1, [{}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x15c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "9f4fd24efa21f84d67c164f9eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "1a0ffdfc80ba07dd10fd0732d99fa744aa75ee2b268d81241cf89c4a68d59b008385ade1e146132eb1a68639c9fc30a9b3a9082366eeb5990399951f9089d5157edb9fb25669c7fec1ff3c6b0e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7d, 0x3, "7b64cb3162e85f8042a77333887555ff031a05b86320b837d18ce41e4a6f0dfec5c44012f8d02877c0d72714a5d0d1983757a040c208b13213e5132097d982878827142345b95a65c6202473a0275586648d007a02df5378cecc2d914c937b98823fa414bd6e01a1876e2ed49c994bd0cdaba5a81b17b4e74d"}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "097ac7ba5eda05bb723995c010609a23369be90c07e8f9d583f75b01e6f09d159ecab1d609eccd8676bb3d95bcae1a82afac6477604a81474e983a9a0ebe01f754ed403576cf003c0f58c01a79a078a1618e2e3dcc7183c73802a9d3810998eb84"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x9d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c9, 0x3, "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"}]}]}, 0xec4}}, 0x0) 18:02:37 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:02:38 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18:02:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, 0x0, 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:38 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)) tkill(0x0, 0x7) 18:02:38 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000022c0)={0xfffffffffffffffd, 0x0, &(0x7f0000002280)={0x0, 0x10}}, 0x0) 18:02:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="c3", 0x1, r0) 18:02:38 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:38 executing program 3: keyctl$update(0x2, 0x0, &(0x7f0000000000)="fc", 0x1) 18:02:38 executing program 5: socket(0x0, 0x19642f459c822bfc, 0x0) 18:02:38 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:38 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x624201) 18:02:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, 0x186, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='macsec0\x00'}) 18:02:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:39 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)) tkill(0x0, 0x7) 18:02:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:02:39 executing program 2: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) [ 592.550524][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 592.550542][ T38] audit: type=1804 audit(1620237759.411:102): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/396/file0" dev="sda1" ino=14097 res=1 errno=0 18:02:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:39 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:02:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 18:02:39 executing program 2: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 18:02:39 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:02:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) [ 592.992190][ T38] audit: type=1804 audit(1620237759.851:103): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/397/file0" dev="sda1" ino=14850 res=1 errno=0 18:02:39 executing program 2: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 18:02:40 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c"], 0x98}, 0x0) [ 593.268297][ T38] audit: type=1804 audit(1620237760.131:104): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/398/file0" dev="sda1" ino=14947 res=1 errno=0 18:02:40 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) 18:02:40 executing program 2: r0 = open(0x0, 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:40 executing program 1: gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)) tkill(0x0, 0x7) [ 593.559998][ T38] audit: type=1804 audit(1620237760.421:105): pid=19785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/399/file0" dev="sda1" ino=14130 res=1 errno=0 18:02:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:40 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x62a40) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) 18:02:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/8) 18:02:40 executing program 2: r0 = open(0x0, 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:40 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="fdb3c550aaa1cc93b09b50033cec33510eda7b2d77f7797868653bd5fe863409", 0x20, r0) [ 594.055474][ T38] audit: type=1804 audit(1620237760.911:106): pid=19799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/400/file0" dev="sda1" ino=15043 res=1 errno=0 18:02:41 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x202800) 18:02:41 executing program 2: r0 = open(0x0, 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 594.241323][T19808] trusted_key: encrypted_key: master key parameter '' is invalid 18:02:41 executing program 5: r0 = socket(0x18, 0x800, 0x3) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:02:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0) [ 594.323003][ T38] audit: type=1804 audit(1620237761.181:107): pid=19810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/401/file0" dev="sda1" ino=13923 res=1 errno=0 18:02:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r2, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 18:02:41 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:41 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) tkill(r0, 0x0) [ 594.618423][ T38] audit: type=1804 audit(1620237761.481:108): pid=19824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/402/file0" dev="sda1" ino=15043 res=1 errno=0 18:02:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:41 executing program 3: syz_open_dev$vcsa(0xfffffffffffffffe, 0x0, 0x0) 18:02:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0xfd6e69a435b9e725, 0x0, 0x0) 18:02:41 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 595.112756][ T38] audit: type=1804 audit(1620237761.971:109): pid=19838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/403/file0" dev="sda1" ino=15122 res=1 errno=0 18:02:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:02:42 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:42 executing program 5: r0 = socket(0x2, 0x3, 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) [ 595.312149][ T38] audit: type=1804 audit(1620237762.172:110): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/404/file0" dev="sda1" ino=15122 res=1 errno=0 18:02:42 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={r0}) 18:02:42 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:42 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) tkill(r0, 0x0) 18:02:42 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:42 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000540)='asymmetric\x00', 0x0, 0x0) 18:02:42 executing program 4: io_submit(0x0, 0x0, 0xffffffffffffffff) 18:02:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 18:02:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 18:02:43 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x2d, 0x0, 0x0) 18:02:43 executing program 3: syz_open_dev$loop(&(0x7f0000001000), 0x0, 0x4900) 18:02:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2041, 0x0) writev(r0, &(0x7f0000002600)=[{&(0x7f0000002280)='#', 0x1}], 0x1) 18:02:43 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:43 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) tkill(r0, 0x0) 18:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 18:02:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004a40)) 18:02:43 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000004c0)=""/239, 0xef}], 0x3, 0x0, 0x0) 18:02:43 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r0) 18:02:43 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0xfffffffffffffffc) 18:02:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:02:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r0, 0x0, 0x0) 18:02:43 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0) 18:02:43 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 18:02:44 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000440), 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 18:02:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x1, 0x1}, 0xe) 18:02:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 18:02:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:44 executing program 3: add_key$user(&(0x7f0000000c40), 0x0, &(0x7f0000000cc0)="e4", 0x1, 0xfffffffffffffffe) 18:02:44 executing program 4: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x40400) 18:02:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 18:02:44 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:44 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:02:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x62a40) 18:02:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket(0x0, 0x0, 0x5) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 18:02:45 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:45 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) 18:02:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:45 executing program 4: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 18:02:45 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0xfffffed4}}, 0x0) 18:02:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:46 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="e30700000000000000004a"], 0x18}}, 0x0) 18:02:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) 18:02:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:46 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:02:46 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000340)="d24df7a0cb3274371f4aa84d59ae8e760f8ca6a5d0c8d81270a234989755ce9dce8bef07fc70baaa7311f6f7f980b179c8d74fbd547f90c481cdb6aa34f24e6daed8afd84ab61646350e96b25c331c44", 0x50}], 0x2) 18:02:46 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x11, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) open(0x0, 0x1612c2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) fallocate(r4, 0x11, 0x100, 0x0) dup2(r0, 0xffffffffffffffff) 18:02:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:47 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r1, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x6}}, 0x0, 0x0, 0x2d, 0x0, "011e1f312af8d0a7ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000002c0)=""/109, 0x6d}], 0x2, 0x3, 0xeecb5c6) [ 600.503367][ T38] audit: type=1804 audit(1620237767.362:111): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/417/file0" dev="sda1" ino=15521 res=1 errno=0 [ 600.614396][ T38] audit: type=1804 audit(1620237767.392:112): pid=20020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/417/file0" dev="sda1" ino=15521 res=1 errno=0 18:02:47 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 18:02:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) 18:02:47 executing program 4: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='9', 0x1, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 18:02:47 executing program 3: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) [ 601.252903][ T38] audit: type=1804 audit(1620237768.102:113): pid=20041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/418/file0" dev="sda1" ino=15202 res=1 errno=0 18:02:48 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 18:02:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x14}, 0x14}}, 0x0) 18:02:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) [ 601.910048][ T38] audit: type=1804 audit(1620237768.772:114): pid=20035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/418/file0" dev="sda1" ino=15202 res=1 errno=0 18:02:48 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:48 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 18:02:48 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x8, 0x2d, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 18:02:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:02:49 executing program 3: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:02:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, 0x186, 0x0, 0x0, 0x0, 0x9}) 18:02:49 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0}, 0xa0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50}, 0x50) 18:02:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}}) 18:02:49 executing program 1: getrusage(0x0, &(0x7f0000000200)) getrusage(0x0, &(0x7f00000002c0)) 18:02:49 executing program 4: socket(0x2, 0x3, 0x3) 18:02:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x2bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x3f, 0x0, "011e1f312af8f112ef80ca791a9e3700d026e26498bb74c36671a7bf3b73ebe5a98c5e4718a488cd3adccbf61b482886e36dbebc1eed5918fee04c2900669fb6f91a3dce7a8b4201c65a29979c0f7cd2"}, 0xd8) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 602.394721][ T38] audit: type=1804 audit(1620237769.252:115): pid=20068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/419/file0" dev="sda1" ino=15544 res=1 errno=0 18:02:49 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 602.524932][ T38] audit: type=1804 audit(1620237769.282:116): pid=20061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/419/file0" dev="sda1" ino=15544 res=1 errno=0 18:02:49 executing program 0: r0 = add_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=':\x00', r0) 18:02:49 executing program 4: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0xf99beb054be55688) 18:02:49 executing program 1: add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 18:02:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(&(0x7f0000002040)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 18:02:49 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r0, 0x0, &(0x7f0000001bc0)) 18:02:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 18:02:50 executing program 5: syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x48000) 18:02:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) 18:02:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00], 0x98}, 0x0) 18:02:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x4) 18:02:50 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)) 18:02:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) 18:02:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa7d, 0x4) 18:02:50 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0xfffffffffffffffe, 0x0, 0x0) 18:02:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:02:50 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_1\x00'}) 18:02:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000240)="86e2", 0x2, r0) 18:02:51 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000180)=""/185, 0xfffffdef) close(r0) preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/87, 0x57}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/47, 0x2f}], 0x9, 0x595, 0xfffffffd) 18:02:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:02:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x3, 0x6, 0x1, 0xaf, 0x2, 0x6, 0xb049, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x10000034, 0xff, 0x74a6, 0x9, 0x0, 0x4, 0x3, 0x1000}, 0x0) ioprio_set$pid(0x3, 0x0, 0x2004) [ 604.240695][ T38] audit: type=1804 audit(1620237771.092:117): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/423/file0" dev="sda1" ino=15533 res=1 errno=0 18:02:51 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 604.331825][ T38] audit: type=1804 audit(1620237771.102:118): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/423/file0" dev="sda1" ino=15533 res=1 errno=0 18:02:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040), 0x4) 18:02:51 executing program 3: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000180)=""/98) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)) 18:02:51 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') 18:02:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000004b00)={'ip6gre0\x00', 0x0}) 18:02:51 executing program 0: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) 18:02:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x401, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000100)="6d91ac878385", 0x6}]) 18:02:51 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') [ 604.743321][ T38] audit: type=1804 audit(1620237771.602:119): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/424/file0" dev="sda1" ino=15532 res=1 errno=0 18:02:51 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 604.868683][ T38] audit: type=1804 audit(1620237771.632:120): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/424/file0" dev="sda1" ino=15532 res=1 errno=0 18:02:52 executing program 1: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='W', 0x1, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 18:02:52 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:52 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x650002) 18:02:52 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r0, r1, 0x0) 18:02:52 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') 18:02:52 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/input/event#\x00', 0x0) 18:02:52 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') 18:02:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 18:02:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[], 0xec4}}, 0x0) 18:02:52 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b6", 0x1}], 0x1) 18:02:52 executing program 1: r0 = socket(0x18, 0x0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 605.513921][ T38] audit: type=1804 audit(1620237772.372:121): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/425/file0" dev="sda1" ino=15572 res=1 errno=0 18:02:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r1, 0x803, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 18:02:52 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x18, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x18}}, 0x0) 18:02:53 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:53 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x5}}) 18:02:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) 18:02:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x375, 0xf, [@challenge={0x10, 0x1}, @fast_bss_trans={0x37, 0x133, {0x0, 0x7, "f717393354c72f243c7f3c8c90d19fa2", "9976da3cc5fe6e98285d000db138408e3edec8df898d60f180a543b24b1d0ac5", "6e038c55b4daf1f06c2c26f86693a77ac3076624d4a4b178a24cac20d1112ba2", [{0x0, 0x23, "51108f85d8ed5148b69e457e64ad9fcc98f34225b5d2e29a6a9d72e0a1d78106b3066e"}, {0x0, 0x21, "57a0c44970cebd260a707a1009fd7386482410bb9ff6fe9a20b2e258bf32d03edf"}, {0x0, 0x7, "7e3cd8b9f7e2e0"}, {0x0, 0x27, "8c5fbffc87b4d92a44b52b4d25b8b20e86b85f4c7990f3c86aa000b855175b134e989672097d06"}, {0x0, 0x22, "37f1d27f7309fb81aa36c44049a8577c803655d514ac71a899c262c3175ad1242f3d"}, {0x0, 0x22, "644620db5c0d4185f533fa6539388bfff5b21c527cd02e83d71ce31c24493b37e262"}, {0x0, 0x1d, "72cd0887785e746233e94ed1df06edfd890039fdebdc19a7759aa19aa3"}]}}, @measure_req={0x26, 0x77, {0x0, 0x0, 0x0, "1c89903e1194e7ad30ce5c75bb9a2614b6c80a9f975adc932ad0bceb65f35253d1323eb8669a51507bdf10a3148773f333fce4eb2dc54abb31c4995a1b2b097ab2e3b8a2b763159120a8321b3a0430ebccf68b0568e1c0e1cd17a59c5905bb8fae00e149c36c273c89df17172e07e9007a92443b"}}, @tim={0x5, 0x20, {0x0, 0xf4, 0x0, "c2ffcc658a74328b678c94ac2ab0d52cc5a14d31ca6475675ccd5600a7"}}, @random={0x0, 0x28, "8f18504aa19adb1839e97a94513031373bc8f5803b154e3b2c858455c20886be425a8c1394aa2907"}, @random_vendor={0xdd, 0xef, "a8bdafe4190639fd2dc3f79a01f20488f10143788674643dfffb5a74410476a852d3e3187914d407ce25782ee6cfe8aea2724e3ae76c89ad15213c610bc04ce1e7c11e7b4a6f85629fc10168ce82348db29f7325e25ee13b362c7c28e0514bd3c211d744448c69c41b179371d00918bfc9cad613a525dd578946b0fbbd1a13bc1286379ed2657d6dd5d458b42e0284ee6e98132f72495118809331ad03f02114a18d32248a4de432339855848005162659a1cceefe1a572063bf5358f2644aa2632d2a6d48ffdfa3181d6885209cd9918a60fd1b36f79ab5d374271ac270a05aaafb5ce6ea5882f04a5aeff3734c38"}, @erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4}, @fast_bss_trans={0x37, 0x78, {0x0, 0x1, "2241306a1015c146f857de64427a509d", "4806de7eb24c5f06c4d7958063a01732798e32570bb5c4e4f783d3d750501279", "ed17780cdafd36649bb7d1066db98c70afe397de271246239e7bf2e6774c4c0c", [{0x0, 0x24, "3de660a4e336723e37777f5732d6ade3263dffa972fdd84a68fe29701a687741c16a466e"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@dsss={0x3, 0x1}, @supported_rates]}, @NL80211_ATTR_FTM_RESPONDER={0x15c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "9f4fd24efa21f84d67c164f9eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "1a0ffdfc80ba07dd10fd0732d99fa744aa75ee2b268d81241cf89c4a68d59b008385ade1e146132eb1a68639c9fc30a9b3a9082366eeb5990399951f9089d5157edb9fb25669c7fec1ff3c6b0e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7d, 0x3, "7b64cb3162e85f8042a77333887555ff031a05b86320b837d18ce41e4a6f0dfec5c44012f8d02877c0d72714a5d0d1983757a040c208b13213e5132097d982878827142345b95a65c6202473a0275586648d007a02df5378cecc2d914c937b98823fa414bd6e01a1876e2ed49c994bd0cdaba5a81b17b4e74d"}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "097ac7ba5eda05bb723995c010609a23369be90c07e8f9d583f75b01e6f09d159ecab1d609eccd8676bb3d95bcae1a82afac6477604a81474e983a9a0ebe01f754ed403576cf003c0f58c01a79a078a1618e2e3dcc7183c73802a9d3810998eb84"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x9d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c9, 0x3, "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"}]}]}, 0xec4}}, 0x0) 18:02:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="d8a2b85d53a4ba8d", 0x8) 18:02:53 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91563ea55c88e81833d4490c4111432af4d944c1a4b5e3b0ef61915923f635ea0e527c68887275f8f3f94b2496e495003d0db31e25d0a14b26a1c30bb641a41c3c9b2e5f820cf5281e13c9f0745bd52d", 0x50}, {&(0x7f0000000340)="d24df7a0cb3274371f4aa84d59ae8e760f8ca6a5d0c8d81270a234989755ce9dce8bef07fc70baaa7311f6f7f980b179c8d74fbd547f90c481cdb6aa34f24e6daed8afd84ab61646350e96b25c331c44e147bef8d4d5f1622553bf6e5b64bd6aaa6856f2d6a4f223814a56d6df6f359359bf313a4156114425bc89207af2918779d00684a664e2b63926001d934a2ddcb5b8719d26bd1b3dd3519dbe0a11f6d605a983c68d970ce663804f18d4386f8db641", 0xb2}], 0x2) 18:02:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000480)={&(0x7f0000004640)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @device_b}}, @NL80211_ATTR_FRAME={0x1e88, 0x33, @data_frame={@qos_no_ht={{@type10={{}, {}, @from_mac=@device_b, @device_a, @broadcast}}, {@type10={{}, {}, @from_mac, @device_b}}}, @a_msdu=[{@device_a, @device_a, 0xd7, "7be5281d5a8e6afacc155406dbdbe59f35f5cacf602c344b5f148fe170aecfc214397726999e5fbcc6ee4b92bb821e9b354e1463af6b7c4b38511b691712f978b0815854fb25884d7457040c0862d5d5c16a7f4ab052230fb5f14fe9d3df6890aa2b3b8c8af2cf57854e0962bfcd6898b257c94a4b7fa684b7bc7fc4cc3b47ef10315df55b3d7a3cd83be5cbefe1737f3d483f519d1b35e07a220aee0f172ec3f6b74e91dcc95ffd72454b927b70987908184e2bacb8972701ef05105cc8468a1b02c658836b1c8731504223d65876c4b55f6488e479b9"}, {@broadcast, @device_a, 0x17, "c00d65965d6f25baad3c53808ff51e822b73c915382cb9"}, {@device_a, @device_b, 0x3f, "07355c34f57e56da93c09dd04d8afac83b0992feef9af0dc7acd2416cd8864fe5be8da0d4bb8eb271f2e3f68d1aafe341eab09028c972fd04de814c392f5a4"}, {@device_b, @broadcast, 0xfb, "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"}, {@device_a, @broadcast, 0x93, "175a0c5a2de05677fafce09b478a835ca6e696830ebe691d16457c0ec8ca69f378d8d34c86490c77eb83f7938361b4d75784ff6cf89d7c6b2f63d8658c75f5cbf5b03c85acbda7517500a6a2696ceaf19c41589e8846f87de9b776778988690445f30003d4dc03ed88b7a6ca0e40d5687aec209d3fbd2d2192530ab6a90b569b3ac1ec8311b9b5a9ba9b505c55889336466d7a"}, {@device_a, @device_a, 0xfff, "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"}, {@device_a, @broadcast, 0xdf, "e3f3193fae7e392b7621c3b3c38d748eac00e75f27d351322958cfb4f7a258a6b1d27c9876410da82b9f0040fd08cdd2ecadcf3adc2c2dc3f163b6e909ab6185caf7c4ce825c638982ca9e3bc923456da3af0c19de6283892a31f1a866c982dce6ec06c406c6d2f0f9999383e9a312d27bbe143812daae0d02ebfcf412baa8bbe726d0464610c89b73a931e772f3e1e7db70bad381e38f89dc936515d73b4b14ee0fa2e60ad7e81a83d821ebaec49441ab5a49563afdb11837f73042b07f2cb263e7d9c2014fe8425a52281b04f5d61a565c46e297160c0091e4ddea4297ec"}, {@broadcast, @device_b, 0xa2f, "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"}]}}]}, 0x1ec4}}, 0x0) 18:02:53 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0}, 0xa0) 18:02:53 executing program 3: r0 = socket(0x18, 0x0, 0x3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:02:53 executing program 4: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:02:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed, 0x0, 0x1}, 0xe) [ 606.533466][ T38] audit: type=1804 audit(1620237773.392:122): pid=20227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/426/file0" dev="sda1" ino=15558 res=1 errno=0 18:02:53 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 606.674629][ T38] audit: type=1804 audit(1620237773.432:123): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/426/file0" dev="sda1" ino=15558 res=1 errno=0 18:02:53 executing program 1: prctl$PR_SET_TIMERSLACK(0x66, 0x800800) 18:02:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x9, 0x64, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 18:02:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6c0a0f62d5a42739d6e542853040835c596790f81b88a6d96fdbafbcd2dd9029aa33c0530e5d6242873eb3c3693010737de228a630d60073105c96d06f011cba", "d442b622ac21f1fb3c5f0513a29d1bbe112990e7fddf3e4e0526bcb6e547bdcb43c904080da65b24e66311e93b64db7af0d5c3f5c2fbd11eabfc10dd52b1595e", "a56d21f82b685dc1586e1d98b3e384d2d83c8cdba4ce4c39b75b65a3fe361e43"}) 18:02:53 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') 18:02:53 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 18:02:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, 0x0, 0x0, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 606.979319][ T38] audit: type=1804 audit(1620237773.842:124): pid=20248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/427/file0" dev="sda1" ino=15558 res=1 errno=0 18:02:53 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r1, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 18:02:54 executing program 1 (fault-call:10 fault-nth:0): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:54 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:54 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 607.123569][ T38] audit: type=1804 audit(1620237773.882:125): pid=20245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/427/file0" dev="sda1" ino=15558 res=1 errno=0 [ 607.247297][ T38] audit: type=1804 audit(1620237774.113:126): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir234584011/syzkaller.o2Y877/399/file0" dev="sda1" ino=15575 res=1 errno=0 18:02:54 executing program 4 (fault-call:10 fault-nth:0): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 607.459281][ T38] audit: type=1804 audit(1620237774.323:127): pid=20268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/428/file0" dev="sda1" ino=15600 res=1 errno=0 [ 607.477739][T20269] FAULT_INJECTION: forcing a failure. [ 607.477739][T20269] name failslab, interval 1, probability 0, space 0, times 1 18:02:54 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:54 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) fsync(0xffffffffffffffff) open(0x0, 0x0, 0x0) r0 = open(0x0, 0x202000, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'wg1\x00', @dev}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x82) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) close(r0) [ 607.549991][ T38] audit: type=1804 audit(1620237774.353:128): pid=20264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/428/file0" dev="sda1" ino=15600 res=1 errno=0 [ 607.616919][T20269] CPU: 1 PID: 20269 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 607.625391][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.631760][T20273] FAULT_INJECTION: forcing a failure. [ 607.631760][T20273] name failslab, interval 1, probability 0, space 0, times 1 [ 607.635462][T20269] Call Trace: [ 607.635473][T20269] dump_stack+0x141/0x1d7 [ 607.635585][T20269] should_fail.cold+0x5/0xa [ 607.635610][T20269] should_failslab+0x5/0x10 [ 607.664894][T20269] kmem_cache_alloc_node_trace+0x69/0x580 [ 607.670677][T20269] __get_vm_area_node+0xd3/0x380 [ 607.675652][T20269] ? netlink_sendmsg+0x5f0/0xd90 [ 607.680634][T20269] vmalloc+0xf2/0x1a0 [ 607.684611][T20269] ? netlink_sendmsg+0x5f0/0xd90 [ 607.689540][T20269] netlink_sendmsg+0x5f0/0xd90 [ 607.695600][T20269] ? netlink_unicast+0x7d0/0x7d0 [ 607.700533][T20269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.706812][T20269] ? netlink_unicast+0x7d0/0x7d0 [ 607.711742][T20269] sock_sendmsg+0xcf/0x120 [ 607.716207][T20269] sock_no_sendpage+0xf3/0x130 [ 607.720964][T20269] ? sk_page_frag_refill+0x1d0/0x1d0 [ 607.726241][T20269] ? lock_release+0x720/0x720 [ 607.730946][T20269] ? get_page_from_freelist+0x1c6f/0x3fb0 [ 607.736658][T20269] kernel_sendpage.part.0+0x1ab/0x350 [ 607.742021][T20269] sock_sendpage+0xe5/0x140 [ 607.746515][T20269] ? __sock_recv_ts_and_drops+0x430/0x430 [ 607.752230][T20269] pipe_to_sendpage+0x2ad/0x380 [ 607.757106][T20269] ? propagate_umount+0x19f0/0x19f0 [ 607.762292][T20269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.768530][T20269] ? splice_from_pipe_next.part.0+0x167/0x520 [ 607.774634][T20269] __splice_from_pipe+0x43e/0x8a0 [ 607.779652][T20269] ? propagate_umount+0x19f0/0x19f0 [ 607.784844][T20269] generic_splice_sendpage+0xd4/0x140 [ 607.790208][T20269] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 607.795310][T20269] ? security_file_permission+0x248/0x560 [ 607.801089][T20269] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 607.806192][T20269] do_splice+0xb7e/0x1940 [ 607.810529][T20269] ? find_held_lock+0x2d/0x110 [ 607.815287][T20269] ? splice_file_to_pipe+0x120/0x120 [ 607.820562][T20269] ? find_held_lock+0x2d/0x110 [ 607.825315][T20269] __do_splice+0x134/0x250 [ 607.829725][T20269] ? do_splice+0x1940/0x1940 [ 607.834307][T20269] __x64_sys_splice+0x198/0x250 [ 607.839149][T20269] do_syscall_64+0x3a/0xb0 [ 607.843612][T20269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 607.849519][T20269] RIP: 0033:0x4665f9 [ 607.853404][T20269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.873003][T20269] RSP: 002b:00007f7b2d287188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 607.881411][T20269] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 607.889374][T20269] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 607.897335][T20269] RBP: 00007f7b2d2871d0 R08: 000000000004ffe2 R09: 0000000000000000 [ 607.905306][T20269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.913268][T20269] R13: 00007ffd1f02518f R14: 00007f7b2d287300 R15: 0000000000022000 [ 607.978425][T20273] CPU: 1 PID: 20273 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 607.986896][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.996976][T20273] Call Trace: [ 608.000276][T20273] dump_stack+0x141/0x1d7 [ 608.004631][T20273] should_fail.cold+0x5/0xa [ 608.009158][T20273] should_failslab+0x5/0x10 [ 608.013688][T20273] kmem_cache_alloc_node_trace+0x69/0x580 [ 608.019436][T20273] __get_vm_area_node+0xd3/0x380 [ 608.024403][T20273] ? netlink_sendmsg+0x5f0/0xd90 [ 608.029367][T20273] vmalloc+0xf2/0x1a0 [ 608.033375][T20273] ? netlink_sendmsg+0x5f0/0xd90 [ 608.035211][ T38] audit: type=1804 audit(1620237774.393:129): pid=20271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/555/file0" dev="sda1" ino=15589 res=1 errno=0 [ 608.038329][T20273] netlink_sendmsg+0x5f0/0xd90 [ 608.038364][T20273] ? netlink_unicast+0x7d0/0x7d0 [ 608.038393][T20273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 608.081197][T20273] ? netlink_unicast+0x7d0/0x7d0 [ 608.086162][T20273] sock_sendmsg+0xcf/0x120 [ 608.090604][T20273] sock_no_sendpage+0xf3/0x130 [ 608.095394][T20273] ? sk_page_frag_refill+0x1d0/0x1d0 [ 608.100703][T20273] ? lock_release+0x720/0x720 [ 608.105403][T20273] ? get_page_from_freelist+0x1c6f/0x3fb0 [ 608.111145][T20273] kernel_sendpage.part.0+0x1ab/0x350 [ 608.116543][T20273] sock_sendpage+0xe5/0x140 [ 608.121066][T20273] ? __sock_recv_ts_and_drops+0x430/0x430 [ 608.126807][T20273] pipe_to_sendpage+0x2ad/0x380 [ 608.131678][T20273] ? propagate_umount+0x19f0/0x19f0 [ 608.136901][T20273] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 608.143174][T20273] ? splice_from_pipe_next.part.0+0x167/0x520 [ 608.149276][T20273] __splice_from_pipe+0x43e/0x8a0 [ 608.151998][ T38] audit: type=1804 audit(1620237774.393:130): pid=20265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/555/file0" dev="sda1" ino=15589 res=1 errno=0 [ 608.154325][T20273] ? propagate_umount+0x19f0/0x19f0 [ 608.154358][T20273] generic_splice_sendpage+0xd4/0x140 [ 608.154387][T20273] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 608.196388][T20273] ? security_file_permission+0x248/0x560 [ 608.202139][T20273] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 608.207276][T20273] do_splice+0xb7e/0x1940 [ 608.211630][T20273] ? find_held_lock+0x2d/0x110 [ 608.216419][T20273] ? splice_file_to_pipe+0x120/0x120 [ 608.221734][T20273] ? find_held_lock+0x2d/0x110 [ 608.226520][T20273] __do_splice+0x134/0x250 [ 608.230959][T20273] ? do_splice+0x1940/0x1940 [ 608.235568][T20273] __x64_sys_splice+0x198/0x250 [ 608.240439][T20273] do_syscall_64+0x3a/0xb0 [ 608.244881][T20273] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 608.250793][T20273] RIP: 0033:0x4665f9 [ 608.254697][T20273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 608.274330][T20273] RSP: 002b:00007f2218d35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 608.282771][T20273] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 608.290769][T20273] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.298768][T20273] RBP: 00007f2218d351d0 R08: 000000000004ffe2 R09: 0000000000000000 [ 608.306764][T20273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.314753][T20273] R13: 00007fff26528bff R14: 00007f2218d35300 R15: 0000000000022000 18:02:55 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) 18:02:55 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003e6d0708f00a01790a5b000000010902120001000000000904000000ff260200"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001100000004"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "c08c2f9e", {0x3, 0x105, 0x0, 0x0, 0x800, 0x4, 0x19}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "de04e4cd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "36f5134b"}) [ 608.468840][T20269] syz-executor.1: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 608.485773][T20269] CPU: 1 PID: 20269 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 608.486994][T20282] loop5: detected capacity change from 0 to 264192 [ 608.494222][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.494241][T20269] Call Trace: [ 608.494250][T20269] dump_stack+0x141/0x1d7 [ 608.494281][T20269] warn_alloc.cold+0x87/0x17a [ 608.494349][T20269] ? zone_watermark_ok_safe+0x2a0/0x2a0 [ 608.494374][T20269] ? rcu_read_lock_sched_held+0x3a/0x70 [ 608.494466][T20269] ? __get_vm_area_node+0x292/0x380 [ 608.494496][T20269] ? netlink_sendmsg+0x5f0/0xd90 [ 608.494523][T20269] vmalloc+0x163/0x1a0 [ 608.494551][T20269] netlink_sendmsg+0x5f0/0xd90 [ 608.494579][T20269] ? netlink_unicast+0x7d0/0x7d0 [ 608.494608][T20269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 608.494641][T20269] ? netlink_unicast+0x7d0/0x7d0 [ 608.494668][T20269] sock_sendmsg+0xcf/0x120 [ 608.494694][T20269] sock_no_sendpage+0xf3/0x130 [ 608.494724][T20269] ? sk_page_frag_refill+0x1d0/0x1d0 [ 608.494754][T20269] ? lock_release+0x720/0x720 [ 608.494783][T20269] ? get_page_from_freelist+0x1c6f/0x3fb0 [ 608.494810][T20269] kernel_sendpage.part.0+0x1ab/0x350 [ 608.494838][T20269] sock_sendpage+0xe5/0x140 [ 608.494862][T20269] ? __sock_recv_ts_and_drops+0x430/0x430 [ 608.494889][T20269] pipe_to_sendpage+0x2ad/0x380 [ 608.494914][T20269] ? propagate_umount+0x19f0/0x19f0 [ 608.494937][T20269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 608.494969][T20269] ? splice_from_pipe_next.part.0+0x167/0x520 [ 608.494999][T20269] __splice_from_pipe+0x43e/0x8a0 [ 608.495026][T20269] ? propagate_umount+0x19f0/0x19f0 [ 608.495053][T20269] generic_splice_sendpage+0xd4/0x140 [ 608.495082][T20269] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 608.495107][T20269] ? security_file_permission+0x248/0x560 [ 608.659875][T20269] ? __do_sys_vmsplice+0x9d0/0x9d0 [ 608.665028][T20269] do_splice+0xb7e/0x1940 [ 608.669355][T20269] ? find_held_lock+0x2d/0x110 [ 608.674128][T20269] ? splice_file_to_pipe+0x120/0x120 [ 608.679404][T20269] ? find_held_lock+0x2d/0x110 [ 608.684160][T20269] __do_splice+0x134/0x250 [ 608.688570][T20269] ? do_splice+0x1940/0x1940 [ 608.693156][T20269] __x64_sys_splice+0x198/0x250 [ 608.698004][T20269] do_syscall_64+0x3a/0xb0 [ 608.702416][T20269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 608.708410][T20269] RIP: 0033:0x4665f9 [ 608.712303][T20269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 608.731903][T20269] RSP: 002b:00007f7b2d287188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 608.740320][T20269] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 608.748281][T20269] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.756242][T20269] RBP: 00007f7b2d2871d0 R08: 000000000004ffe2 R09: 0000000000000000 [ 608.764203][T20269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.772160][T20269] R13: 00007ffd1f02518f R14: 00007f7b2d287300 R15: 0000000000022000 [ 608.787924][T20269] Mem-Info: [ 608.791076][T20269] active_anon:281 inactive_anon:223580 isolated_anon:0 [ 608.791076][T20269] active_file:27622 inactive_file:66236 isolated_file:0 [ 608.791076][T20269] unevictable:768 dirty:252 writeback:0 [ 608.791076][T20269] slab_reclaimable:18716 slab_unreclaimable:113176 [ 608.791076][T20269] mapped:60784 shmem:6143 pagetables:3137 bounce:0 [ 608.791076][T20269] free:1147510 free_pcp:306 free_cma:0 [ 608.830316][T20269] Node 0 active_anon:1124kB inactive_anon:891696kB active_file:110368kB inactive_file:264944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:243032kB dirty:1008kB writeback:0kB shmem:22416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 679936kB writeback_tmp:0kB kernel_stack:11072kB pagetables:12544kB all_unreclaimable? no 18:02:55 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 608.864014][T20269] Node 1 active_anon:0kB inactive_anon:620kB active_file:120kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:2156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB pagetables:4kB all_unreclaimable? no [ 608.899332][T20269] Node 0 DMA free:11404kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4504kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.932275][T20269] lowmem_reserve[]: 0 2643 2643 2643 2643 [ 608.938821][T20269] Node 0 DMA32 free:575076kB min:35656kB low:44568kB high:53480kB reserved_highatomic:0KB active_anon:1120kB inactive_anon:887000kB active_file:110368kB inactive_file:264944kB unevictable:1536kB writepending:1008kB present:3129332kB managed:2713504kB mlocked:0kB bounce:0kB free_pcp:1492kB local_pcp:580kB free_cma:0kB [ 608.975610][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 608.979477][T20269] lowmem_reserve[]: 0 0 0 0 0 [ 608.989833][T20269] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:196kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.096340][T20269] lowmem_reserve[]: 0 0 0 0 0 [ 609.116867][T20269] Node 1 Normal free:4005456kB min:54240kB low:67800kB high:81360kB reserved_highatomic:0KB active_anon:0kB inactive_anon:620kB active_file:120kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117768kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.162004][T20282] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:02:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:56 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 609.355826][T20269] lowmem_reserve[]: 0 0 0 0 0 [ 609.377289][T20269] Node 0 DMA: 5*4kB (UM) 1*8kB (M) 3*16kB (M) 2*32kB (UM) 2*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 0*2048kB 2*4096kB (U) = 11404kB 18:02:56 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) [ 609.484990][T20269] Node 0 DMA32: 6602*4kB (UME) 648*8kB (UME) 834*16kB (UME) 1389*32kB (UME) 1006*64kB (UME) 676*128kB (UME) 358*256kB (UME) 255*512kB (UM) 104*1024kB (UM) 2*2048kB (M) 0*4096kB = 573096kB [ 609.574240][T20269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 609.621241][T20269] Node 1 Normal: 90*4kB (UME) 199*8kB (UME) 203*16kB (UME) 110*32kB (UME) 47*64kB (UME) 31*128kB (U) 7*256kB (U) 9*512kB (UME) 4*1024kB (UE) 1*2048kB (U) 971*4096kB (UM) = 4005456kB [ 609.625694][ T37] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 609.677355][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.697713][ T37] usb 4-1: Product: syz [ 609.706193][T20269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.709311][ T37] usb 4-1: Manufacturer: syz [ 609.748604][ T37] usb 4-1: SerialNumber: syz [ 609.756358][T20269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.778269][T20269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.794565][T20269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.804865][T20269] 49860 total pagecache pages [ 609.809962][T20269] 0 pages in swap cache [ 609.814560][T20269] Swap cache stats: add 0, delete 0, find 0/0 [ 609.824594][ T37] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 609.834979][T20269] Free swap = 0kB [ 609.841546][T20269] Total swap = 0kB [ 609.866396][T20269] 2097051 pages RAM [ 609.876354][T20269] 0 pages HighMem/MovableOnly [ 609.888744][T20269] 385207 pages reserved [ 609.904562][T20269] 0 pages cma reserved 18:02:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:02:56 executing program 5: r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r4 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000240), 0xfb3f) fallocate(r3, 0x8, 0x0, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x218500, 0x1c8) 18:02:56 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:57 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:57 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x3) io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_out(r2, 0x3, &(0x7f0000000040)) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 18:02:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2) 18:02:57 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 610.597393][ T37] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.805793][T20281] udc-core: couldn't find an available UDC or it's busy [ 610.819722][T20281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 610.842792][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 610.842809][ T38] audit: type=1804 audit(1620237777.703:145): pid=20342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/434/file0" dev="sda1" ino=13969 res=1 errno=0 [ 611.045461][ T38] audit: type=1804 audit(1620237777.743:146): pid=20341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/434/file0" dev="sda1" ino=13969 res=1 errno=0 [ 611.306989][ T9676] usb 4-1: USB disconnect, device number 2 [ 611.954959][ T37] usb 4-1: Service connection timeout for: 256 [ 611.961343][ T37] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 611.977858][ T37] ath9k_htc: Failed to initialize the device [ 611.985115][ T9676] usb 4-1: ath9k_htc: USB layer deinitialized [ 612.364748][ T9676] usb 4-1: new high-speed USB device number 3 using dummy_hcd 18:02:59 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:02:59 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:02:59 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2) 18:02:59 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x2b) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffff92c) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random="fc9a32564b94", 'veth1_macvtap\x00'}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="9ad04e8c688b0d560ddafcac49c59c9560d253bf77d8f519d32a07983b8898737d71409e48de10ac5fa7bf6ac2985a334b005d53a98b387c0e5d0b16d10df7164c50f09628f80b890f01921adeb2851af5144f56deeee29c17c96e339c10098bc21a0f15231f07067772bcac00b8ae771a42bd8cc72a4f4b752a5f70e5b157ea210edd34155d63f28e46b9e5696927b5", 0x90}, {&(0x7f00000004c0)="730958ee334a7d226043d578e151c1c2b34acd1fe529394bad59a2f8ef5d9b6f7ac25b563accba6914c9468bc702b6501da7236d7d39b9a09bdbcbe0d7ad491f173addf12c8ee5c05d5b3fe47642135bc69404486c8001c1386759f6ea037dea9a45a303a5dea201229766f1563d2c4ab78bcb31a847972d983a3a1153c90390092124022e2b4219e0d9d86327e2d28d4fbe43859efbefa209210e39c11d4eeee526b33f5d12509e16aacf9c0a2f3e87cfd682f37c7c657e990a0273653fb044d72eebab748a1efbd2be254a7bc258be7bb886086a6874522de86d98bd", 0xdd}, {&(0x7f00000005c0)="1e50b3bf7bcd926a5531762058b557c11d5417440fbb5e10cdc9f6c87fa4ad035499ab2b9b17a5e70767dcfff115708673efbceff18d3af75955a6fc568b3f36f93c3b41c23c3e84afa206b2dca218180af5d49a43a4eadaf42e5912d94337b258ca92f5dbefdc29865195dc5acc457b20474700ffb701fcc2154136940c37ef27ff861b565a1f2684f70e41c7bfcd64deb75623b4fc17930f73214631c42253954293826940a5dec132bd94be8fb64c097756e51320be880a2ca040ad294619", 0xc0}, {&(0x7f0000000780)="cf569cf64bc8a7ba962a66410ea994d59085d59e7dfcd1999da4c7965e836909d93f10c86a698634930d368d3dad623c41b84f87cb45975bbbab4e16173554ae9fdb94700d8eb581e0162e440f08fc60601f228dfd2ded8ba96c5913ab6aa88c93526dc675e1dbc00c15cf94442b4ca5353a9ca9c0c5baecf7f50565c66461d15806bafc6e93695e31be719b545a184442b835f9eb8567507dcc1f60a4df34441f", 0xa1}, {&(0x7f0000000680)="5bc0a5", 0x3}], 0x5, &(0x7f0000000840)=[@mark={{0x10, 0x1, 0x24, 0x3d7acd8f}}, @mark={{0x10, 0x1, 0x24, 0x9071}}], 0x20}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000900)="f41e6c458fa5cd8027effd9f622f47263a0e90ef6f652b5c56ffe848e81540fab9af11bc23e141ba8d12944207afce86e6688373f9e01be449", 0x39}, {&(0x7f0000000940)="c1850dad8c810d4f575d2eb2229da599a850db534d987b6e27d6c01563c3f0dad0114de94f9bb220d73e61a4a398885c10c7965fd1656a6dfb6867a41dfb829d7ddb66d678d94d9bca37792e9def42fe641d2936bb3cbe7270c1a4a7fc8a95d9aae0e281ed9c090fb8eb5f7fe44f264bc6146b7217f719c059987b7eea0468ba4ec3e1", 0x83}, {&(0x7f0000000a00)="3cc17b0d295601021b352f31b9a50dd8bf104b9f4e1cfb88a93324e07df8f67953da6f7fd124b66e05e7e1eb740674e1c99c2808b02970f06a60ef691ca741682707867432b6e694e4afc68bc7287536e1a98313546f86d9cca0b77a393cfbd45235da49595ab569d82b", 0x6a}, {&(0x7f0000000a80)="0b8cae8b01984d67924f696c608783cf16cee7683a74f5a2312580a423bbb0ac0c34a7d7676f7ee225c0646564660c2f93a9714d7786bbe63436a9f4b5fd23a78f7dd205f2c6b5009362375717135dd00db5b7788a2b847293445ea8ace497639f77482fe991150021e9331aa83f", 0x6e}, {&(0x7f0000000b00)="0b4cc29310edbd76419a2e5d7009644c8bc6db19d82254e6b4775c5dd903c1ceae59b0684724dd12daa5b0b6d065f8352e8a45d132889cded7e2184a793e39b6066df7e29d49cd3ca8a5f40246cf4b258589cbc0a1e460ade5c383d57c2517c1aba91c6545e9ce6b1567e66fc5b6ce7e799a6fe203f4089c141752564a1be5e06cb8ef16a26e98bcc004a6eb005b596e811ae5c138350affe0f99dc14bec6324391131adaa5be1580b99e74f0a3f08494c4833e413d6353bbf4907faf1a6", 0xbe}, {&(0x7f0000000bc0)="a1ed660d3cfe0915be04c794ae3369a23a60bcdcb1173d331ff1ddca3d1d603f8e8e28d407708da6f6795e", 0x2b}, {&(0x7f0000000c00)="b776382a726a4768bca45be16931f144ef2085988747c0c823bf8eccc2f91bc6145787bbe96ad00221393175ff6ebdf2b3e73de7b25739c7f87e3cd46d257062933319c6abd0afc8fa0d5c432e92373c710f7b251008acb739ce1ae07d67a375f4f3c4e068a342f1cac73e7e9fe3285139c28e9984ac016345fc0b0f4aeae7982eb9c56a75fdc168b9707e223432a635b9e8b55cebef2c4b099e304c828704c0f3b82bc83ab6f18b93456937cacc7e5450e7d5f554400a5ac06de6e17facc0f3d70602ae5ab65a84514875fad6b926e64ab27350b959458c1bcfa4f8ce85b9ce60d70d4a", 0xe4}, {&(0x7f0000000d00)="ac85e2e25ebb42cdea2e3ef46f3b06360ccda60c4a71783948aa0eca8f27763b99bff6125700e297f7b29ede739f670d788d3c497e9c1adefe7997f7ec070629e6888824f333cf28af7085a4fe41a5510439ca2ee67222154d7086ed30ad6857cc29", 0x62}], 0x8, &(0x7f0000000dc0)=[@timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x37}}, @mark={{0x10, 0x1, 0x24, 0x3}}], 0x30}}], 0x2, 0x4000800) fallocate(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000002c0)={0x7, 'batadv_slave_1\x00', {0x1000}, 0x8}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) clone(0x24300900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="0200000001000d0600a796a6107090c4fa77c97eacda593f881fc25ea28cf42667ce", @ANYBLOB="00f300", @ANYRES32=0x0, @ANYBLOB="020001001434419666bd8651d560d7d369856fc97581d8a15110ec8b6e047ad7a7eb7efe91ad880a25a7e9973a0917adc7", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32=0xee01], 0x54, 0x2) mount$9p_tcp(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x1010001, &(0x7f00000003c0)=ANY=[@ANYBLOB='traas=tcp,port=0x0000000000004e20,\x00']) mount(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000534000/0x3000)=nil, 0x3000, 0x1000003, 0x10010, 0xffffffffffffffff, 0xec432000) 18:02:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) open(0x0, 0x0, 0x190) r3 = dup(0xffffffffffffffff) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x3ff, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000003c0)=ANY=[]) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4820, 0x0, 0x0, 0x0, 0x0, 0x8ae5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff9) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000003c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000050) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x20006, 0x3ffffffffffffffd, 0x10}) unshare(0x60000000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)) 18:02:59 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4) [ 612.576336][ T38] audit: type=1804 audit(1620237779.443:147): pid=20373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/435/file0" dev="sda1" ino=14212 res=1 errno=0 [ 612.628946][T20376] 9pnet_virtio: no channels available for device 127.0.0.1 [ 612.663063][T20371] 9pnet_virtio: no channels available for device 127.0.0.1 18:02:59 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x2b) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffff92c) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random="fc9a32564b94", 'veth1_macvtap\x00'}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="9ad04e8c688b0d560ddafcac49c59c9560d253bf77d8f519d32a07983b8898737d71409e48de10ac5fa7bf6ac2985a334b005d53a98b387c0e5d0b16d10df7164c50f09628f80b890f01921adeb2851af5144f56deeee29c17c96e339c10098bc21a0f15231f07067772bcac00b8ae771a42bd8cc72a4f4b752a5f70e5b157ea210edd34155d63f28e46b9e5696927b5", 0x90}, {&(0x7f00000004c0)="730958ee334a7d226043d578e151c1c2b34acd1fe529394bad59a2f8ef5d9b6f7ac25b563accba6914c9468bc702b6501da7236d7d39b9a09bdbcbe0d7ad491f173addf12c8ee5c05d5b3fe47642135bc69404486c8001c1386759f6ea037dea9a45a303a5dea201229766f1563d2c4ab78bcb31a847972d983a3a1153c90390092124022e2b4219e0d9d86327e2d28d4fbe43859efbefa209210e39c11d4eeee526b33f5d12509e16aacf9c0a2f3e87cfd682f37c7c657e990a0273653fb044d72eebab748a1efbd2be254a7bc258be7bb886086a6874522de86d98bd", 0xdd}, {&(0x7f00000005c0)="1e50b3bf7bcd926a5531762058b557c11d5417440fbb5e10cdc9f6c87fa4ad035499ab2b9b17a5e70767dcfff115708673efbceff18d3af75955a6fc568b3f36f93c3b41c23c3e84afa206b2dca218180af5d49a43a4eadaf42e5912d94337b258ca92f5dbefdc29865195dc5acc457b20474700ffb701fcc2154136940c37ef27ff861b565a1f2684f70e41c7bfcd64deb75623b4fc17930f73214631c42253954293826940a5dec132bd94be8fb64c097756e51320be880a2ca040ad294619", 0xc0}, {&(0x7f0000000780)="cf569cf64bc8a7ba962a66410ea994d59085d59e7dfcd1999da4c7965e836909d93f10c86a698634930d368d3dad623c41b84f87cb45975bbbab4e16173554ae9fdb94700d8eb581e0162e440f08fc60601f228dfd2ded8ba96c5913ab6aa88c93526dc675e1dbc00c15cf94442b4ca5353a9ca9c0c5baecf7f50565c66461d15806bafc6e93695e31be719b545a184442b835f9eb8567507dcc1f60a4df34441f", 0xa1}, {&(0x7f0000000680)="5bc0a5", 0x3}], 0x5, &(0x7f0000000840)=[@mark={{0x10, 0x1, 0x24, 0x3d7acd8f}}, @mark={{0x10, 0x1, 0x24, 0x9071}}], 0x20}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000900)="f41e6c458fa5cd8027effd9f622f47263a0e90ef6f652b5c56ffe848e81540fab9af11bc23e141ba8d12944207afce86e6688373f9e01be449", 0x39}, {&(0x7f0000000940)="c1850dad8c810d4f575d2eb2229da599a850db534d987b6e27d6c01563c3f0dad0114de94f9bb220d73e61a4a398885c10c7965fd1656a6dfb6867a41dfb829d7ddb66d678d94d9bca37792e9def42fe641d2936bb3cbe7270c1a4a7fc8a95d9aae0e281ed9c090fb8eb5f7fe44f264bc6146b7217f719c059987b7eea0468ba4ec3e1", 0x83}, {&(0x7f0000000a00)="3cc17b0d295601021b352f31b9a50dd8bf104b9f4e1cfb88a93324e07df8f67953da6f7fd124b66e05e7e1eb740674e1c99c2808b02970f06a60ef691ca741682707867432b6e694e4afc68bc7287536e1a98313546f86d9cca0b77a393cfbd45235da49595ab569d82b", 0x6a}, {&(0x7f0000000a80)="0b8cae8b01984d67924f696c608783cf16cee7683a74f5a2312580a423bbb0ac0c34a7d7676f7ee225c0646564660c2f93a9714d7786bbe63436a9f4b5fd23a78f7dd205f2c6b5009362375717135dd00db5b7788a2b847293445ea8ace497639f77482fe991150021e9331aa83f", 0x6e}, {&(0x7f0000000b00)="0b4cc29310edbd76419a2e5d7009644c8bc6db19d82254e6b4775c5dd903c1ceae59b0684724dd12daa5b0b6d065f8352e8a45d132889cded7e2184a793e39b6066df7e29d49cd3ca8a5f40246cf4b258589cbc0a1e460ade5c383d57c2517c1aba91c6545e9ce6b1567e66fc5b6ce7e799a6fe203f4089c141752564a1be5e06cb8ef16a26e98bcc004a6eb005b596e811ae5c138350affe0f99dc14bec6324391131adaa5be1580b99e74f0a3f08494c4833e413d6353bbf4907faf1a6", 0xbe}, {&(0x7f0000000bc0)="a1ed660d3cfe0915be04c794ae3369a23a60bcdcb1173d331ff1ddca3d1d603f8e8e28d407708da6f6795e", 0x2b}, {&(0x7f0000000c00)="b776382a726a4768bca45be16931f144ef2085988747c0c823bf8eccc2f91bc6145787bbe96ad00221393175ff6ebdf2b3e73de7b25739c7f87e3cd46d257062933319c6abd0afc8fa0d5c432e92373c710f7b251008acb739ce1ae07d67a375f4f3c4e068a342f1cac73e7e9fe3285139c28e9984ac016345fc0b0f4aeae7982eb9c56a75fdc168b9707e223432a635b9e8b55cebef2c4b099e304c828704c0f3b82bc83ab6f18b93456937cacc7e5450e7d5f554400a5ac06de6e17facc0f3d70602ae5ab65a84514875fad6b926e64ab27350b959458c1bcfa4f8ce85b9ce60d70d4a", 0xe4}, {&(0x7f0000000d00)="ac85e2e25ebb42cdea2e3ef46f3b06360ccda60c4a71783948aa0eca8f27763b99bff6125700e297f7b29ede739f670d788d3c497e9c1adefe7997f7ec070629e6888824f333cf28af7085a4fe41a5510439ca2ee67222154d7086ed30ad6857cc29", 0x62}], 0x8, &(0x7f0000000dc0)=[@timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x37}}, @mark={{0x10, 0x1, 0x24, 0x3}}], 0x30}}], 0x2, 0x4000800) fallocate(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000002c0)={0x7, 'batadv_slave_1\x00', {0x1000}, 0x8}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) clone(0x24300900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="0200000001000d0600a796a6107090c4fa77c97eacda593f881fc25ea28cf42667ce", @ANYBLOB="00f300", @ANYRES32=0x0, @ANYBLOB="020001001434419666bd8651d560d7d369856fc97581d8a15110ec8b6e047ad7a7eb7efe91ad880a25a7e9973a0917adc7", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32=0xee01], 0x54, 0x2) mount$9p_tcp(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x1010001, &(0x7f00000003c0)=ANY=[@ANYBLOB='traas=tcp,port=0x0000000000004e20,\x00']) mount(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000534000/0x3000)=nil, 0x3000, 0x1000003, 0x10010, 0xffffffffffffffff, 0xec432000) 18:02:59 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 612.697717][T20377] IPVS: ftp: loaded support on port[0] = 21 [ 612.699123][ T38] audit: type=1804 audit(1620237779.473:148): pid=20367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/435/file0" dev="sda1" ino=14212 res=1 errno=0 [ 612.916232][T20380] IPVS: ftp: loaded support on port[0] = 21 [ 612.929290][T20405] 9pnet_virtio: no channels available for device 127.0.0.1 [ 612.939210][ T38] audit: type=1804 audit(1620237779.803:149): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/436/file0" dev="sda1" ino=14307 res=1 errno=0 18:02:59 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x2b) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffff92c) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random="fc9a32564b94", 'veth1_macvtap\x00'}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="9ad04e8c688b0d560ddafcac49c59c9560d253bf77d8f519d32a07983b8898737d71409e48de10ac5fa7bf6ac2985a334b005d53a98b387c0e5d0b16d10df7164c50f09628f80b890f01921adeb2851af5144f56deeee29c17c96e339c10098bc21a0f15231f07067772bcac00b8ae771a42bd8cc72a4f4b752a5f70e5b157ea210edd34155d63f28e46b9e5696927b5", 0x90}, {&(0x7f00000004c0)="730958ee334a7d226043d578e151c1c2b34acd1fe529394bad59a2f8ef5d9b6f7ac25b563accba6914c9468bc702b6501da7236d7d39b9a09bdbcbe0d7ad491f173addf12c8ee5c05d5b3fe47642135bc69404486c8001c1386759f6ea037dea9a45a303a5dea201229766f1563d2c4ab78bcb31a847972d983a3a1153c90390092124022e2b4219e0d9d86327e2d28d4fbe43859efbefa209210e39c11d4eeee526b33f5d12509e16aacf9c0a2f3e87cfd682f37c7c657e990a0273653fb044d72eebab748a1efbd2be254a7bc258be7bb886086a6874522de86d98bd", 0xdd}, {&(0x7f00000005c0)="1e50b3bf7bcd926a5531762058b557c11d5417440fbb5e10cdc9f6c87fa4ad035499ab2b9b17a5e70767dcfff115708673efbceff18d3af75955a6fc568b3f36f93c3b41c23c3e84afa206b2dca218180af5d49a43a4eadaf42e5912d94337b258ca92f5dbefdc29865195dc5acc457b20474700ffb701fcc2154136940c37ef27ff861b565a1f2684f70e41c7bfcd64deb75623b4fc17930f73214631c42253954293826940a5dec132bd94be8fb64c097756e51320be880a2ca040ad294619", 0xc0}, {&(0x7f0000000780)="cf569cf64bc8a7ba962a66410ea994d59085d59e7dfcd1999da4c7965e836909d93f10c86a698634930d368d3dad623c41b84f87cb45975bbbab4e16173554ae9fdb94700d8eb581e0162e440f08fc60601f228dfd2ded8ba96c5913ab6aa88c93526dc675e1dbc00c15cf94442b4ca5353a9ca9c0c5baecf7f50565c66461d15806bafc6e93695e31be719b545a184442b835f9eb8567507dcc1f60a4df34441f", 0xa1}, {&(0x7f0000000680)="5bc0a5", 0x3}], 0x5, &(0x7f0000000840)=[@mark={{0x10, 0x1, 0x24, 0x3d7acd8f}}, @mark={{0x10, 0x1, 0x24, 0x9071}}], 0x20}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000900)="f41e6c458fa5cd8027effd9f622f47263a0e90ef6f652b5c56ffe848e81540fab9af11bc23e141ba8d12944207afce86e6688373f9e01be449", 0x39}, {&(0x7f0000000940)="c1850dad8c810d4f575d2eb2229da599a850db534d987b6e27d6c01563c3f0dad0114de94f9bb220d73e61a4a398885c10c7965fd1656a6dfb6867a41dfb829d7ddb66d678d94d9bca37792e9def42fe641d2936bb3cbe7270c1a4a7fc8a95d9aae0e281ed9c090fb8eb5f7fe44f264bc6146b7217f719c059987b7eea0468ba4ec3e1", 0x83}, {&(0x7f0000000a00)="3cc17b0d295601021b352f31b9a50dd8bf104b9f4e1cfb88a93324e07df8f67953da6f7fd124b66e05e7e1eb740674e1c99c2808b02970f06a60ef691ca741682707867432b6e694e4afc68bc7287536e1a98313546f86d9cca0b77a393cfbd45235da49595ab569d82b", 0x6a}, {&(0x7f0000000a80)="0b8cae8b01984d67924f696c608783cf16cee7683a74f5a2312580a423bbb0ac0c34a7d7676f7ee225c0646564660c2f93a9714d7786bbe63436a9f4b5fd23a78f7dd205f2c6b5009362375717135dd00db5b7788a2b847293445ea8ace497639f77482fe991150021e9331aa83f", 0x6e}, {&(0x7f0000000b00)="0b4cc29310edbd76419a2e5d7009644c8bc6db19d82254e6b4775c5dd903c1ceae59b0684724dd12daa5b0b6d065f8352e8a45d132889cded7e2184a793e39b6066df7e29d49cd3ca8a5f40246cf4b258589cbc0a1e460ade5c383d57c2517c1aba91c6545e9ce6b1567e66fc5b6ce7e799a6fe203f4089c141752564a1be5e06cb8ef16a26e98bcc004a6eb005b596e811ae5c138350affe0f99dc14bec6324391131adaa5be1580b99e74f0a3f08494c4833e413d6353bbf4907faf1a6", 0xbe}, {&(0x7f0000000bc0)="a1ed660d3cfe0915be04c794ae3369a23a60bcdcb1173d331ff1ddca3d1d603f8e8e28d407708da6f6795e", 0x2b}, {&(0x7f0000000c00)="b776382a726a4768bca45be16931f144ef2085988747c0c823bf8eccc2f91bc6145787bbe96ad00221393175ff6ebdf2b3e73de7b25739c7f87e3cd46d257062933319c6abd0afc8fa0d5c432e92373c710f7b251008acb739ce1ae07d67a375f4f3c4e068a342f1cac73e7e9fe3285139c28e9984ac016345fc0b0f4aeae7982eb9c56a75fdc168b9707e223432a635b9e8b55cebef2c4b099e304c828704c0f3b82bc83ab6f18b93456937cacc7e5450e7d5f554400a5ac06de6e17facc0f3d70602ae5ab65a84514875fad6b926e64ab27350b959458c1bcfa4f8ce85b9ce60d70d4a", 0xe4}, {&(0x7f0000000d00)="ac85e2e25ebb42cdea2e3ef46f3b06360ccda60c4a71783948aa0eca8f27763b99bff6125700e297f7b29ede739f670d788d3c497e9c1adefe7997f7ec070629e6888824f333cf28af7085a4fe41a5510439ca2ee67222154d7086ed30ad6857cc29", 0x62}], 0x8, &(0x7f0000000dc0)=[@timestamping={{0x10, 0x1, 0x25, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x37}}, @mark={{0x10, 0x1, 0x24, 0x3}}], 0x30}}], 0x2, 0x4000800) fallocate(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000002c0)={0x7, 'batadv_slave_1\x00', {0x1000}, 0x8}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) clone(0x24300900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="0200000001000d0600a796a6107090c4fa77c97eacda593f881fc25ea28cf42667ce", @ANYBLOB="00f300", @ANYRES32=0x0, @ANYBLOB="020001001434419666bd8651d560d7d369856fc97581d8a15110ec8b6e047ad7a7eb7efe91ad880a25a7e9973a0917adc7", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32=0xee01], 0x54, 0x2) mount$9p_tcp(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x1010001, &(0x7f00000003c0)=ANY=[@ANYBLOB='traas=tcp,port=0x0000000000004e20,\x00']) mount(&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000534000/0x3000)=nil, 0x3000, 0x1000003, 0x10010, 0xffffffffffffffff, 0xec432000) 18:02:59 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 613.022424][ T38] audit: type=1804 audit(1620237779.803:150): pid=20395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/436/file0" dev="sda1" ino=14307 res=1 errno=0 18:03:00 executing program 5: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000580)={0x5, 0x83, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000500)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000540)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) futex(&(0x7f0000000240), 0x4, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)=0x1, 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x7f, 0x69d68f42, 0x5, 0x1f, 0x0, 0x23, 0x4, 0xff}, &(0x7f00000003c0)={0xfff, 0x3, 0xfffffffffffffff8, 0x7, 0x3, 0x0, 0x0, 0xd7}, &(0x7f0000000400)={0x9, 0x401, 0x8, 0xd2af, 0x2, 0x4, 0xfff, 0x3}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) [ 613.142473][T20423] 9pnet_virtio: no channels available for device 127.0.0.1 18:03:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:00 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6) [ 613.349907][T20429] IPVS: ftp: loaded support on port[0] = 21 [ 613.362324][ T38] audit: type=1804 audit(1620237780.223:151): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/437/file0" dev="sda1" ino=14370 res=1 errno=0 18:03:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4) 18:03:00 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 613.543839][ T38] audit: type=1804 audit(1620237780.263:152): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/437/file0" dev="sda1" ino=14370 res=1 errno=0 [ 613.667235][ T38] audit: type=1804 audit(1620237780.533:153): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/438/file0" dev="sda1" ino=14370 res=1 errno=0 18:03:00 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) [ 613.848660][ T38] audit: type=1804 audit(1620237780.563:154): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/438/file0" dev="sda1" ino=14370 res=1 errno=0 [ 614.618810][T20481] IPVS: ftp: loaded support on port[0] = 21 18:03:03 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:03:03 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) 18:03:03 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x7) 18:03:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6) 18:03:03 executing program 5: ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000580)={0x5, 0x83, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000500)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000540)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) futex(&(0x7f0000000240), 0x4, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)=0x1, 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x7f, 0x69d68f42, 0x5, 0x1f, 0x0, 0x23, 0x4, 0xff}, &(0x7f00000003c0)={0xfff, 0x3, 0xfffffffffffffff8, 0x7, 0x3, 0x0, 0x0, 0xd7}, &(0x7f0000000400)={0x9, 0x401, 0x8, 0xd2af, 0x2, 0x4, 0xfff, 0x3}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) 18:03:03 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 616.864671][ T38] audit: type=1804 audit(1620237783.723:155): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/439/file0" dev="sda1" ino=14594 res=1 errno=0 18:03:03 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) [ 617.022442][T20514] IPVS: ftp: loaded support on port[0] = 21 [ 617.023782][ T38] audit: type=1804 audit(1620237783.733:156): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/439/file0" dev="sda1" ino=14594 res=1 errno=0 18:03:04 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 617.252093][ T38] audit: type=1804 audit(1620237784.013:157): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/440/file0" dev="sda1" ino=14513 res=1 errno=0 18:03:04 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) [ 617.434633][ T38] audit: type=1804 audit(1620237784.023:158): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/440/file0" dev="sda1" ino=14513 res=1 errno=0 [ 617.650456][ T38] audit: type=1804 audit(1620237784.483:159): pid=20549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/441/file0" dev="sda1" ino=14513 res=1 errno=0 18:03:04 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:04 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:04 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:03:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8) 18:03:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x7) [ 617.894445][ T38] audit: type=1804 audit(1620237784.483:160): pid=20541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/441/file0" dev="sda1" ino=14513 res=1 errno=0 18:03:04 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:05 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) [ 618.092619][ T38] audit: type=1804 audit(1620237784.883:161): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/442/file0" dev="sda1" ino=14500 res=1 errno=0 [ 618.238409][ T38] audit: type=1804 audit(1620237784.883:162): pid=20558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/442/file0" dev="sda1" ino=14500 res=1 errno=0 [ 618.375112][ T38] audit: type=1804 audit(1620237785.203:163): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/443/file0" dev="sda1" ino=14755 res=1 errno=0 [ 618.519375][ T38] audit: type=1804 audit(1620237785.203:164): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/443/file0" dev="sda1" ino=14755 res=1 errno=0 18:03:05 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:05 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:05 executing program 5: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0xda2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x80) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'wg1\x00', @multicast}) write$P9_RREADLINK(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e914f238157e80f5762446dded1b2c35cf78336dfbdb5401418459a4edb0aa5bb8734cf2512188eadb3fd594cd835cf4be8180b20a884a8bdf47ce37ea73928029680ab2be64b3824edbd8cf8088e15342254144c4883655577f62e497d017eed9362c059c37898938b2f6cf82da76ec932d563f739ed7c58559722affaaf4ab75365af4807989eae3b02868b72bc6a8b1aa4e33b2a7df3f66967f3acfa3581f5e974cc1609e7f3798f5d7a142e9293d95ee7c8c3cb4ab8117882401643489ac774a3d783f90cb3de2d58fff81f5b11b1304cc338c9dfb2c3ada7e38c37047dc7f5b94b9ea52b96d4268d559fdb12c1f5d71dfad189807b962da3be8e64ec65b7a23e417fa435715f411fc4cf563b97edc289c126c1b874ee99d8c1527b59272d83eaf396c8842143e9fe1a80090bccf89f6c91876c5488b9eb496498cd389e15186f1280c57dd6515b40cb8e420a4b5759ee3a8471c678b2a2244722467c1a051836404c0424d7b3093b6f4b03e7755daee9df45330c276a1cb5e70d8fcf38b29c9aea77156645f84dfd08fac5d1adce3d50d1407a58d4ff441792d05818642ed929e066e460b3a79cc8e5d65dd77731bcaa7e1b5f6ac81a1ff53d9f5a0770c2dca762395c069df8bd27ad41326e1f7efb38c99c7007b2a760022f7b97b1f050766ae56477a112d3b82eca8cc44607ff81c225b3c69ef55fcbae90ae30c063ca88db5b699e4e6518ab649d473d974e8442eac71cef5d3b0630b46145ac1903591e8865dcee97773431f256ff7c73972cac67decd4b186af0909a3aedc3dc149fd26c6fe9bc36094726d785cbdf7e049a7c0eb8e7024b32a68eae0f0c688a38dc968d6f827c711deb071ff318e519c901984f160e014438fff8a37a4a55a992fc826e0ee16db1b9db576602cf335f1b20daa7bb82fbce143a65217ba023fdd4345ee88cc78ba27db2bcd10f9b6e6d5c9672fd6638ea59c63b9dcb1262d7ccc50aa48cf43193f80e43497ced6b36b8d0a39840ae9c16c86ee38fdfd797e08d2572d49a80c1350eb5eda9e68d9238023d1af569961fd26b978c4babdbb4c2564be1745de83fabba1874ad35b2bf30c4a9b2b241af26b4465fed9aeb7ae08fc85eb3382a6ec019a33b585f30ac70a0cdda33a5d1b13faca16b24dc258e8e03fa4b9ce5e7f683f8d1fc818df62a05f095c1fbbddd4df97a37dc36ead565eab84525b6c8bd7e5d1c83aa83b6537d6547f077fb5667a4213af15fb7c3c8627e721c375cfc8be5de82329822fe0323835622a2226913f57b35e67b9514cc0ecff7d174238ffd288100d22f7f7b20bfbdaa7f553e12897cfe8e04652fe704035617786264ccc3397a5dc20ccf670d16164a4d2a63f473c2274dbb521b09208a7d3a7f7b6d4e82c7c4026cb0ace088caad799e5b52c3b5eafb2a0a0dfa054cc6d5aaac311634e5c08a70860334452172399c3997f88be279379a63d42879ead51cb6b187866a148afb2d424f0d15482cbd4eaf3759fc01c6eec7cc4a9b6a8eac4432912e509e8b3628d0cf751343a6b252d40be9cd6f0babbd12ee31c8201e945ad664504ad71936dc37df40779b782c9381f6d978a19fda6dba4789db382799297e4b598683cc3482c8b22591ba1ac7eee21948d3b4db5920f6ed3328bd28f0f75f6ac2848ec90da1b14f3d927c9a97ee3e0c6be02248d42acc3378ae2d8a3d1847e34bfbcb820bf96fabff6c3fda2ce86fd089faa3d2c14abe96b20562e1476bcfdd49acd1f3652fe8f796b9810befcddc45905604fa15b392169725de5c28fe9b4dc2aa4b507d66ada7cccacb04d82532f732a403ab1eaad436c1a10f679459f651443c8580240d3f98a71da557460bc587552fd718b091c39c35ceecece01d3a64121bf48cc2fbed7db9e481e820e4466fbc13ba349b1894784bc0bf1f5b74b91fed5e2b474b47772b52df0de2ddd51f7017129c763ffb2287cceb531658ac5be0ba01a3105fe400e5afe90be49839f7588eff5834fbe13423d701b748a8cbd93db62ecbbb5f4202f36eb12ed73ee18d21667051ccb277d98d761877d285402363b334ad90a5f0ae66c73f01aaef7518bfdea2536fa346eacf53b324a2489ef4972d868689b1437d56b9a00896649d9e620fa2c0d77eab16549cab858fcbe79f406920433d7b1695c19612469e19d37df08be533c85f0b7b02c7a3cede6aef9d956bff774d257c6ce10628ae157dee9720c538b057b761c881b3b03e2fd4708b40f493a29eecc30e84391657b78a59ab95c6e5c1df87fd05fb77bf2158bdcb807785f1097abf1b9e97bc90f23148f7be41187940948ed5ab4b43dcb9d2ff94869706813717715d4d6194d2238fd3a75b933ab60379ff17a04b810a67b838dadb15a91d8a9e6ddca0b9372aa8699b8cc7c30b152a6778723034bb9edfb3320545ed7c3d899898fa5729f51190946607370cdc64c477fe504838420f569ac46dc07236526e87f27c0900611dcdfc813ab83d7ae251dfbab820a07f76d9098dc40850f68e7bce892fea53f709461d6df9e40b308b692768475a0e7fb39c83b651c6b9ec47673fb1bea76a7ef78debb6cac027900fd23887d4032ee66909f5814dcbe0dda73c1587a0696f4b44bc1dedb0c61b97099db8527ee995aa177280b625a77e3012364f462594d2b642c4097de0c2b32b89ac182593525048bbf8868b4f49027d9e0964a1be7e5258e9340feec52bebc6dd99f7b944f9733081bf039d0e1b6daf3f32d675ec956a3012f2989c7f3a9729535215a6f254ec79e63a03ee44acb521265c65aeef9d9313c981ad9841856cf018b3b983cb7224055837e940c1f7f11e8f75146bff45f8114df3fed4cbb64f719e976a79269fe012285676b86a786e6c369da121cdab9f519e4e07fb0ae56ed1485b3e4662ad606c7edbdb5d915da73fee2c0f2816be114d715e8bf8df01955c3fb71a869c8e0b1d93a9d68abb61fdae1699937bf53accdeff0f7e931fbfcb839e7eaac0ae04f60ac0c487f58cf12f4bea4718cee8407fb7f0a59c642416236363da854ac1386c7685112ef90b862eb292c6c19482745888e6d1766512601e4b2de5c0d66a402202871908706a16108f697c76bab7c922998849495d48a3d253611ebad37be81d19616ba0641cf6b08832de1131459a017d6c1782fbac85b53e61baeb4b5a2ae16fcd9c81322ee89bfe37203516c12d16f638d80b909c5522a711f9743c1c4ad70288f62cc9bfd15f6cfc2d054719dfc70aba91f1f3802d7373969e062351f2673e3151701d40e861ac6ad0f4289d8ca281fd0341e294ae3a0c04561a6f704ef020941c22e9c94147f7cac7a9968f9cff28eb902b0132f8dcefffe6444baca5ba33a7f88d32ab70a65a0f5d07dabaf1fc0f50ee3271e99831bab511af5018f6b02344745bfe2aedf27adaa38c43f22ba763f470d7f9c933163e94cb5ea5a7b15ac192ec52b421033db587436d613fc99b66cea506b93685bd2a1d21cef5945d634a1c090f6ef4c6e3e499b064e0684eae5fdd7ad99126c0224a244af3a483a5d2cd75e2a2d244bf035347d65ca9c9ac73da93cd8b565e0aaf69882ee97a10445d98b53c7519ac0a0461d9f86f60d1767ae9f51182ac04470ab2bf01d4079c0659bd44ce703690454e99d00c4ce5c0e50620cfdef9c1a2ade87a502464bf9ab191fab9e65413da85bcc98118c219a568604e1492f0ee9008b2d69f3530c0266faf177f525885899155137da10801e74c075881bfe398281a51eeb53d936a781b5e6aeb2c3bd3df80c81fd6b439b61e3a342181c07d2b0fc04a2221f52a18d20d494b0dcafb835bc6d13cc8284743d0648049d1017f6273fc86dc3432040b6635d46c3b46aa83ba65c1976135f0b736040553efa86d2375282a47bf2f0b2628d4c523610c63e5175582c500e5ef8618ec2ec99eec57b53252fa314908acc6e9ebbf0af3ac4de56c7e9a18e60ee9a13332edd5e1fe99bdbd7e6d757094cbeb48ee8fdc559575afa2c4cf3d80c03329a19d83b5d4c7ca2ccc5583a044cb479700a244d3cd411118aa3e9c1faa854b35ecb1b7cac2b576f0690d2cceb2f544de647c6af934416ca0bfef65bef3a47c4aaffd7a69a97155d8a2fd14fbb183c46a045e8a38aa01dd248089b6bccfa95630f71a9d5b7e2d1ec072199cdc75f123aa050e5ad84da4aa367c47c814e9cb8bb9b5d13634db28dc3e8c38a6d1231c63f3f98a9838325e441ae31a4686293c0cbefd6235354a7dc8841bec1086b9108609adf63759d84b9688117792f4fb4b72fd51d038c99448f63d283d9417905f8b873763adc1b5e19088c870188174a679ec9085527dbffa55847b19a8a73aa4f48dfea68cf9eee16d9e749162f725d5753439e73e6d573f36ac7fc50ef3888474c6cf845af9a8779a0edbcfa8cb86a1650143848cd8a148976f235998244e840f5b7a3a4a6d0737df12fa7d6ef6c722562644df66601ac6ed60f7ca9224c0d7ac1850f9bacf2829a7e62df186f4f7fe69854f0a7f4a17a3c37fd268f416e12468f0f289155731d230e9462ed32de5381ad912654c7f6b3e934a3f3f1e575a2a9ba22954e8b58723be55dfe14c14823b2e5b4ff0d319f825f66c3535090bc3cca684da5bdd205176419814e40bf74af2c6a443e227c92a456696585b99c4ea2554550a9b1b36849fcc51f4097a5c3fe7a36bebc7bd7ec3255414754f4c5cb388b1e02264e19dc45a7e1ffa4cb109dd2b6c3a92040a6ca25c14d2b6aee9221620fbae08ff0aaf79bb245e01f28a1fe9681a8da2fe5de9d6003cdc61d5f0e1d433685efcf29f7074ff3e03edbd627e233835329e58103c6ba0f58c9157e2ef9b831daf04d4bbcc0580668025c6f822f503f15db5d4bf8f86e256744bb1a1dbb03f857a3783ee4c9b28bc7dae7e889e9c2c5a45a2aa53d80cb8c2a9f672fd96133a067f458d5e80b0c7ef5329a4ee120bd6654baf93ce9226ed0c6152e4dcfda8569522a9da398d2bc54a76e5ebf1c8a51a0d9daf77b74b4d7046c3b1b1b071e86eaccbb2aeba657dd48be2ee1070839075df0a2630cff66f60ce588a9ada9d78a3dbace6840fffdd1740372ecbd57598c047bf42679a2c1b8cee9a0c0ac37a2a63350a20d95dd2a838e4264a5993d46d992e4d7e31c8aee87ff84c9b961a1a7f74ff41f150b003db7688f55c8a5775984e2ff8d45f704f7ada83a92d86649d2327b633e91b41ff1dc93f6a2e045f18b510c74786434202fb3c3cd65534ba80b769cab0d200ce680720f13233e47d287d2540c90ec46c8f952297dfc74692d722ab87c48ffd176b0fdbcbcd176569b4b879505b4ebbed6947ae38d71dcbc9aee9b7eeb6455a52e6cbced33a52d9e9c4fc01ebd43d29145120ef452cefe9f2d2fd1e1b0026b4cef92d8e699cf284dfa5b9f337bf310f2e1594111ebb11fc67caae2c27f86f0ee6572a1dc69e49d6bf6cc896ff2badc9adf815d373757c37d799423f45221b1f87fba25d25037e07f20e6cf11788ec489278281edf3c81e41e8df9c1ee38e899785d3eb4c1ec4605f249f212d0eb19bedf83392f8b0e44a8d71b0e4a2e426db5fd3499e8ea7df5ee9041c88f624837f387e44b22abf60907266539b0bec04690e2bbce1f8a4ed8ef4493f8c1e77dbf2ffaa468440d630834c6515bd5744dcb9e44d17ec336759d29c4c60f57ee162c9029830c05686d250a44f547c61865200a77f2f9be2e6e9e15febea2db05949af4e9e9d922331eebf4b5aa04718c23681b75af79ed5ce39b68789f0", @ANYBLOB="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", @ANYRESOCT=r1, @ANYRESHEX=r4], 0x1c) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x8000000000001000}) 18:03:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8) 18:03:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa) 18:03:05 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:03:05 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:05 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a68, 0x4080) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x40000022}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x10001}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7) close(r4) r5 = syz_open_pts(r4, 0x840) r6 = open(&(0x7f0000000340)='./file0\x00', 0x40000, 0x101) fcntl$setlease(r6, 0x400, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x57, 0x40, 0xf8, 0x9, 0x0, 0x7fffffff, 0x4, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xdbd6, 0x4, @perf_config_ext={0x400, 0x40}, 0x80, 0x9, 0xc93d, 0x9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x6, r6, 0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x15) socket$inet_udp(0x2, 0x2, 0x0) 18:03:06 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:06 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:06 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:06 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa) 18:03:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc) 18:03:06 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:06 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:07 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:03:07 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:07 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:08 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:08 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:03:08 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) 18:03:08 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc) 18:03:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe) 18:03:08 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) 18:03:08 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) [ 621.957473][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 621.957490][ T38] audit: type=1804 audit(1620237788.824:178): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/449/file0" dev="sda1" ino=15171 res=1 errno=0 [ 622.123074][ T38] audit: type=1804 audit(1620237788.974:179): pid=20665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/566/file0" dev="sda1" ino=15235 res=1 errno=0 18:03:09 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) 18:03:09 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3effffffc) 18:03:09 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) [ 622.271670][ T38] audit: type=1804 audit(1620237788.984:180): pid=20657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/566/file0" dev="sda1" ino=15235 res=1 errno=0 18:03:09 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 622.480487][ T38] audit: type=1804 audit(1620237789.344:181): pid=20677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/567/file0" dev="sda1" ino=15123 res=1 errno=0 18:03:09 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r5, r0, 0x0) [ 622.591518][ T38] audit: type=1804 audit(1620237789.354:182): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/567/file0" dev="sda1" ino=15123 res=1 errno=0 18:03:09 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3effffffc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 18:03:09 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe) 18:03:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x10) 18:03:09 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:09 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) [ 622.935949][ T38] audit: type=1804 audit(1620237789.804:183): pid=20693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/568/file0" dev="sda1" ino=13937 res=1 errno=0 18:03:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/98, 0x62}], 0x1, 0x2000a, 0x0) 18:03:10 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) [ 623.094348][ T38] audit: type=1804 audit(1620237789.804:184): pid=20684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir468821249/syzkaller.Xd0Fs2/568/file0" dev="sda1" ino=13937 res=1 errno=0 18:03:10 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 623.241215][ T38] audit: type=1804 audit(1620237789.914:185): pid=20695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/450/file0" dev="sda1" ino=15235 res=1 errno=0 18:03:10 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:10 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 623.370709][ T38] audit: type=1804 audit(1620237789.914:186): pid=20692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/450/file0" dev="sda1" ino=15235 res=1 errno=0 18:03:10 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:10 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) [ 623.522788][ T38] audit: type=1804 audit(1620237790.314:187): pid=20710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/451/file0" dev="sda1" ino=14418 res=1 errno=0 18:03:10 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x10) 18:03:10 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:10 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x30) 18:03:10 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:10 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/131, 0x83}], 0x1) 18:03:10 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) [ 624.105591][ T3225] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.111952][ T3225] ieee802154 phy1 wpan1: encryption failed: -22 18:03:11 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000002400), 0x7, 0x841) writev(r0, &(0x7f0000001080)=[{&(0x7f0000000080)="a5", 0x1}], 0x1) 18:03:11 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:11 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:11 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x30) 18:03:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0xfffffffffffffffc, 0x0) 18:03:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x60) 18:03:11 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(0x0, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:11 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:11 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:11 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:12 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) 18:03:12 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:12 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000072800)={0x3a, [], 0x0, "8958aeeb7c3440"}) 18:03:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x60) 18:03:12 executing program 0: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:12 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf0) 18:03:12 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:12 executing program 5: add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 18:03:12 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:13 executing program 0: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:13 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x8, 0x0) fcntl$setlease(r0, 0x400, 0x2) 18:03:13 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:13 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 18:03:13 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x3effffffc) 18:03:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf0) 18:03:13 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3b7) 18:03:13 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={0x0, r0/1000+10000}) 18:03:13 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:13 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) dup3(r4, r0, 0x0) 18:03:14 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x1}, 0xe) 18:03:14 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:14 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:03:14 executing program 0: r0 = gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:14 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 627.579232][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 627.579250][ T38] audit: type=1804 audit(1620237794.444:191): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/459/file0" dev="sda1" ino=14835 res=1 errno=0 18:03:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4f9) 18:03:14 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x600) 18:03:14 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:15 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:15 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 18:03:15 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:03:15 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) [ 628.325094][ T38] audit: type=1804 audit(1620237795.184:192): pid=20845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/459/file0" dev="sda1" ino=14835 res=1 errno=0 18:03:15 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:15 executing program 5: accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) pipe(&(0x7f0000000700)) 18:03:15 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) [ 628.621715][ T38] audit: type=1804 audit(1620237795.484:193): pid=20880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/460/file0" dev="sda1" ino=13924 res=1 errno=0 18:03:15 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x600) 18:03:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x700) 18:03:16 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:16 executing program 5: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="fa", 0x1}], 0x1, 0x0) dup3(r1, r0, 0x0) 18:03:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:16 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 18:03:16 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:16 executing program 3: r0 = open(0x0, 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 629.463408][ T9677] Bluetooth: hci5: command 0x0405 tx timeout 18:03:16 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) [ 629.655881][ T38] audit: type=1804 audit(1620237796.524:194): pid=20915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/461/file0" dev="sda1" ino=13924 res=1 errno=0 18:03:16 executing program 3: r0 = open(0x0, 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x700) 18:03:16 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:17 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa00) 18:03:17 executing program 3: r0 = open(0x0, 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:17 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:17 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:17 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:17 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:17 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 18:03:17 executing program 5: r0 = socket(0x18, 0x800, 0x3) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/14, 0xe}], 0x1) 18:03:17 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:17 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) [ 630.724097][ T38] audit: type=1804 audit(1620237797.584:195): pid=20951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/462/file0" dev="sda1" ino=15644 res=1 errno=0 18:03:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa00) 18:03:17 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x0, 0x6}}) 18:03:18 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc00) 18:03:18 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:18 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:18 executing program 5: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0}, 0xa0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18}, 0x18) 18:03:18 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:18 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:18 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 18:03:18 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:18 executing program 5: add_key$user(&(0x7f0000000c40), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:03:18 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 631.772222][ T38] audit: type=1804 audit(1620237798.634:196): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/463/file0" dev="sda1" ino=15635 res=1 errno=0 18:03:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc00) 18:03:18 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:19 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe00) 18:03:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 18:03:19 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:19 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:19 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:19 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:19 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) [ 632.475477][ T38] audit: type=1804 audit(1620237799.345:197): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/463/file0" dev="sda1" ino=15635 res=1 errno=0 18:03:19 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:19 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) [ 632.687260][ T38] audit: type=1804 audit(1620237799.555:198): pid=21016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/464/file0" dev="sda1" ino=15659 res=1 errno=0 18:03:19 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:19 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe00) 18:03:19 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:20 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:20 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:20 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xec0) 18:03:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={0x0}}, 0x0) 18:03:20 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000340)="cece232e39028a90e6ffca8c2c7c01ed157591b7ab2d19a683d58a08c5716ed9c6a8a208d0e90cacc936e0a2e852b4d2cba0c734c59bb13aa3c29726deb179380c55a40e75"}, {&(0x7f0000000000)="3589ad8e75b365b116f53ca2"}, {&(0x7f00000003c0)="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"}, {&(0x7f00000013c0)="fd32d796969a65db9ea43a8374001fd1eba3bd6be05e0346cf2871e21c12410498f4b055569347ba2876b6642e0f7b488866"}, {&(0x7f0000002080)="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"}, {&(0x7f0000001400)="d326d37391124837c6fc7686745808a20a81e0a4210b8951cc52ed9cd5595da5781d446ea8532e4f1f1d31b19bf382f3121c17feed3304255fc51e"}, {&(0x7f0000001440)="251edc8ff5e53201ead2a3b499c3a6afd8cbfe636dcbd6307223c79bd0252bd208439a5e997f922a0796d5cf08c58e42d5d7f327c1a6a5138f5c4c2e0ecf707743abc8258d71e4361ee7ea45f6ce25ff30e30e1b4c35cf4198de43f732c2faf677afca63356dc40827ae5b7bb42576b307d0c3c6780bc70638eab1b5635906ba8c6057f5acae35e9694685620ea05409cb94dbf05195ee5f1f78122e014a91707ad4bc47f23e9ec240c177d7d69ffb0533822cadfc41ceac2329e8ba668bad880758301ed85e724eda9814ff768f60e4969e45e20483278e"}, {&(0x7f0000001540)="f39ab16360a1df157b75ffed79a3d08a24fa19f53997d79163424e80134e9ae33b58ea2c1b2f96d9040516f7988866a82877158d4f71bd703872da7b7cc81f52b15730ce93a7f85fd8d1669f7a746c2f8b7b06e1f9fde692fd6e70e7f60766d79c4ed902931f20b2b85faf7c9a83b7969df5cdfaca3fac7bfe3673ddc64e3a163cc2eb0739df5284fc64bdb47dbe0d7f0cbaed80f847225126fd3598a7217e084bc783f618fff907ef90bf0c130e57e077337229330d06ae9f058fb52cf3fc07dd3f40d346b3"}], 0x1000000000000277, 0x5) 18:03:20 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) [ 633.423131][ T38] audit: type=1804 audit(1620237800.275:199): pid=21013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir017609785/syzkaller.zkIS9q/464/file0" dev="sda1" ino=15659 res=1 errno=0 18:03:20 executing program 2: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 18:03:20 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x1) 18:03:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) 18:03:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xfec) 18:03:20 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:20 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:20 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f00000010c0)) 18:03:21 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xfec) 18:03:21 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) pwrite64(r0, 0x0, 0x0, 0x7ff) 18:03:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, 0x0) 18:03:21 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:21 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="17000016"], 0x2c}}, 0x0) 18:03:21 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:21 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3000) 18:03:21 executing program 5: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="fa", 0x1}], 0x1, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18}, 0x18) 18:03:21 executing program 2: r0 = socket(0x18, 0x0, 0x3) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) 18:03:21 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3000) 18:03:22 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:22 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:22 executing program 5: clock_getres(0x0, &(0x7f0000000240)) 18:03:22 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/255) 18:03:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000240)="d70ab6cfb591c2605acd7480f2f313f6c572627090a297c0c2b52a914d87763b44f4084f9d6e27dabc9001f6c58d7040c4344b40034b86c0f6fda89eb2383cbe2a91884be2dbf684b669587c840897d4fbd329b731e6f1990dac3ba08c7b1c143ee0fa8d9e5e9553d535d9e4e176f766ed4c8809db10106a02fd5f89c50be67790e307deb043e0b1", 0x88) 18:03:22 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000008d}, 0x0) r0 = getpid() getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x3, 0x10000010, 0x800, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x2004) 18:03:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x5865) 18:03:22 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:22 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2}, 0x14}}, 0x0) 18:03:23 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x5865) 18:03:23 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) 18:03:23 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:23 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x4c}}, 0x0) 18:03:23 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:23 executing program 5: socketpair(0x10, 0x2, 0xea5, 0x0) 18:03:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002000)={0x0, 0x0, "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", "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"}) 18:03:23 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) 18:03:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6000) 18:03:23 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00'}) 18:03:23 executing program 5: r0 = socket(0x18, 0x0, 0x3) pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 18:03:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6000) 18:03:24 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) 18:03:24 executing program 5: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='W', 0x1, 0xfffffffffffffffd) 18:03:24 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:24 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00R\x00', 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0x2}, {0x16}]}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000000004ffe0, 0x0) recvmmsg(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:03:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="02", 0x1, r0) 18:03:24 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) 18:03:24 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6558) 18:03:24 executing program 5: r0 = socket(0x2, 0x3, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 18:03:24 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) 18:03:24 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6558) 18:03:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="25e00000000000000000080000000c"], 0x20}}, 0x0) 18:03:25 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) 18:03:25 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:25 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00R\x00', 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0x2}, {0x16}]}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000000004ffe0, 0x0) recvmmsg(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:03:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="25e0000000000000000008"], 0x20}}, 0x0) 18:03:25 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:25 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r1, 0x0, 0x3effffffc) [ 638.852821][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 638.867985][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 18:03:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8100) 18:03:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 18:03:25 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:25 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8100) 18:03:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 18:03:26 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:26 executing program 3: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00R\x00', 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0x2}, {0x16}]}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000000004ffe0, 0x0) recvmmsg(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:03:26 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1) 18:03:26 executing program 3: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xec0f) 18:03:26 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x0) 18:03:27 executing program 3: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x3effffffc) 18:03:27 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x0) 18:03:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xb703) 18:03:27 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:27 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x0) 18:03:27 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00R\x00', 0x6) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x44, 0x0, 0x0, 0x2}, {0x16}]}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000000004ffe0, 0x0) recvmmsg(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18:03:27 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0x0, r0) 18:03:27 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)) 18:03:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed, 0x1}, 0xe) 18:03:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf000) 18:03:27 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:27 executing program 0: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)="8abb4bd0a2785f4d025dcef5be87a89a81a2ce09f9a5feacee", 0x19}], 0x1, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18}, 0x18) 18:03:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002800)) 18:03:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc00e) 18:03:28 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0xad, 0x0) 18:03:28 executing program 5: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 18:03:28 executing program 2: r0 = socket(0xa, 0x3, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 18:03:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:28 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002300), 0x4000000000001e4, 0x0, 0x0) 18:03:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000022c0)={0xfffffffffffffffd, 0x0, &(0x7f0000002280)={0x0}}, 0x0) 18:03:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf904) 18:03:28 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 18:03:28 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 18:03:29 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xec0f) 18:03:29 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 18:03:29 executing program 2: r0 = socket(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 18:03:29 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x3effffffc) 18:03:29 executing program 5: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x400) 18:03:29 executing program 2: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) 18:03:29 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 18:03:29 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:29 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x34000) 18:03:29 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0x0, 0x0) 18:03:29 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='raw', r0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="96b6d9bbedb767d4271949a1dec708a9ecfa5a1b65380df9764101e9c3d5d8c67113677c563d56fe034c97814cdb67662c3e6fb59cdaedc4310dde184dde67a9aca2c3cd0dc3cc5aad05d2ea431487fe71a6ea43ab2944c5c6c847454825f334aac3eacd6dec0bac965767781f95281df68e0e5280fcb3ccb6f9a221b2b822719459e02c1374005104a3751614eece6dae58810acc1d520bb2a9d1dce79d35ca9db1d3818d636634977c17389d5da55f7d5241ea716bb68a63982c56e3ed86bdec1ddf64ef284fc90b4e6a", 0xcb, r0) 18:03:30 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf000) 18:03:30 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:30 executing program 0: io_setup(0x4, &(0x7f0000000c80)=0x0) pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 18:03:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:30 executing program 2: request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='--\x00', 0x0) 18:03:30 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:30 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7}, &(0x7f00000000c0)={r0}) 18:03:30 executing program 5: syz_emit_ethernet(0x16, &(0x7f0000000740)={@dev, @link_local, @void, {@llc={0x8906, {@snap={0x0, 0x0, '\f', "de0f0f"}}}}}, 0x0) 18:03:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x300000) 18:03:30 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x375, 0xf, [@challenge={0x10, 0x1}, @fast_bss_trans={0x37, 0x133, {0x0, 0x7, "f717393354c72f243c7f3c8c90d19fa2", "9976da3cc5fe6e98285d000db138408e3edec8df898d60f180a543b24b1d0ac5", "6e038c55b4daf1f06c2c26f86693a77ac3076624d4a4b178a24cac20d1112ba2", [{0x0, 0x23, "51108f85d8ed5148b69e457e64ad9fcc98f34225b5d2e29a6a9d72e0a1d78106b3066e"}, {0x0, 0x21, "57a0c44970cebd260a707a1009fd7386482410bb9ff6fe9a20b2e258bf32d03edf"}, {0x0, 0x7, "7e3cd8b9f7e2e0"}, {0x0, 0x27, "8c5fbffc87b4d92a44b52b4d25b8b20e86b85f4c7990f3c86aa000b855175b134e989672097d06"}, {0x0, 0x22, "37f1d27f7309fb81aa36c44049a8577c803655d514ac71a899c262c3175ad1242f3d"}, {0x0, 0x22, "644620db5c0d4185f533fa6539388bfff5b21c527cd02e83d71ce31c24493b37e262"}, {0x0, 0x1d, "72cd0887785e746233e94ed1df06edfd890039fdebdc19a7759aa19aa3"}]}}, @measure_req={0x26, 0x77, {0x0, 0x0, 0x0, "1c89903e1194e7ad30ce5c75bb9a2614b6c80a9f975adc932ad0bceb65f35253d1323eb8669a51507bdf10a3148773f333fce4eb2dc54abb31c4995a1b2b097ab2e3b8a2b763159120a8321b3a0430ebccf68b0568e1c0e1cd17a59c5905bb8fae00e149c36c273c89df17172e07e9007a92443b"}}, @tim={0x5, 0x20, {0x0, 0x0, 0x0, "c2ffcc658a74328b678c94ac2ab0d52cc5a14d31ca6475675ccd5600a7"}}, @random={0x0, 0x28, "8f18504aa19adb1839e97a94513031373bc8f5803b154e3b2c858455c20886be425a8c1394aa2907"}, @random_vendor={0xdd, 0xef, "a8bdafe4190639fd2dc3f79a01f20488f10143788674643dfffb5a74410476a852d3e3187914d407ce25782ee6cfe8aea2724e3ae76c89ad15213c610bc04ce1e7c11e7b4a6f85629fc10168ce82348db29f7325e25ee13b362c7c28e0514bd3c211d744448c69c41b179371d00918bfc9cad613a525dd578946b0fbbd1a13bc1286379ed2657d6dd5d458b42e0284ee6e98132f72495118809331ad03f02114a18d32248a4de432339855848005162659a1cceefe1a572063bf5358f2644aa2632d2a6d48ffdfa3181d6885209cd9918a60fd1b36f79ab5d374271ac270a05aaafb5ce6ea5882f04a5aeff3734c38"}, @erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4}, @fast_bss_trans={0x37, 0x78, {0x0, 0x1, "2241306a1015c146f857de64427a509d", "4806de7eb24c5f06c4d7958063a01732798e32570bb5c4e4f783d3d750501279", "ed17780cdafd36649bb7d1066db98c70afe397de271246239e7bf2e6774c4c0c", [{0x0, 0x24, "3de660a4e336723e37777f5732d6ade3263dffa972fdd84a68fe29701a687741c16a466e"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@dsss={0x3, 0x1}, @supported_rates]}, @NL80211_ATTR_FTM_RESPONDER={0x15c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "9f4fd24efa21f84d67c164f9eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "1a0ffdfc80ba07dd10fd0732d99fa744aa75ee2b268d81241cf89c4a68d59b008385ade1e146132eb1a68639c9fc30a9b3a9082366eeb5990399951f9089d5157edb9fb25669c7fec1ff3c6b0e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7d, 0x3, "7b64cb3162e85f8042a77333887555ff031a05b86320b837d18ce41e4a6f0dfec5c44012f8d02877c0d72714a5d0d1983757a040c208b13213e5132097d982878827142345b95a65c6202473a0275586648d007a02df5378cecc2d914c937b98823fa414bd6e01a1876e2ed49c994bd0cdaba5a81b17b4e74d"}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "097ac7ba5eda05bb723995c010609a23369be90c07e8f9d583f75b01e6f09d159ecab1d609eccd8676bb3d95bcae1a82afac6477604a81474e983a9a0ebe01f754ed403576cf003c0f58c01a79a078a1618e2e3dcc7183c73802a9d3810998eb84"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x9d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c9, 0x3, "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"}]}]}, 0xec4}}, 0x0) 18:03:30 executing program 5: add_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:03:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x34000) 18:03:31 executing program 0: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x1, 0x0) 18:03:31 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x48842) write$evdev(r0, &(0x7f0000000140)=[{{}, 0x0, 0x1}], 0x18) 18:03:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000002c0)) 18:03:31 executing program 5: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 18:03:31 executing program 2: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 18:03:31 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r2, 0x0, 0x3effffffc) 18:03:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x400300) 18:03:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nfc, @rc={0x1f, @fixed}, @sco}) 18:03:31 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 18:03:31 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 18:03:32 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x300000) 18:03:32 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:32 executing program 0: request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 18:03:32 executing program 5: pipe(&(0x7f0000002040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="a4", 0x1}], 0x1, 0x6) 18:03:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000015c0), 0x1, 0x0) 18:03:32 executing program 0: r0 = socket(0x11, 0x3, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 18:03:32 executing program 2: accept$unix(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000016c0)={0x77359400}) sendto$unix(0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)) 18:03:32 executing program 5: r0 = socket(0x2, 0x3, 0x3) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 18:03:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf0ffff) 18:03:32 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) 18:03:32 executing program 5: r0 = socket(0x2, 0x3, 0x3) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/104, 0x68}], 0x1) 18:03:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x400300) 18:03:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 18:03:33 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3effffffc) 18:03:33 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000440), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xa3000407) 18:03:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:33 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r0, 0x0) 18:03:33 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x0) 18:03:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x1000000) 18:03:33 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x0) 18:03:33 executing program 0: socket(0xa, 0x0, 0xfffffff9) 18:03:33 executing program 5: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) 18:03:34 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf0ffff) 18:03:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000b68630cf3cc2fc5f"], 0x28}}, 0x0) 18:03:34 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x0) 18:03:34 executing program 5: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 18:03:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r1, 0x803, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 647.633382][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:34 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x202800) [ 647.714679][T21552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2000000) 18:03:34 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/87, 0x57}], 0x1, 0x80000000, 0x0) 18:03:34 executing program 3: add_key(&(0x7f0000000040)='id_resolver\x00', 0x0, 0x0, 0xfd6e, 0xfffffffffffffffe) 18:03:34 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r2, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) 18:03:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x1000000) 18:03:35 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00], 0x98}, 0x0) 18:03:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:35 executing program 5: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0xffffffffffffff92}, 0xfffffffffffffda0) 18:03:35 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) 18:03:35 executing program 5: add_key(&(0x7f00000000c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:03:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 18:03:35 executing program 2: request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 18:03:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4000000) 18:03:35 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1, 0x80000003, 0x0) 18:03:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0x0, 0x0) 18:03:35 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)) 18:03:36 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2000000) 18:03:36 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0xa3000407) 18:03:36 executing program 3: request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\x00', 0xfffffffffffffffe) 18:03:36 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 18:03:36 executing program 2: pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18}, 0x18) 18:03:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}}, 0x200408d5) 18:03:36 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x90801, 0x0) 18:03:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0) 18:03:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6000000) 18:03:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x0, 0x0, 'client0\x00', 0x0, "155ce346a2e46e33", "c4fddb46311d99b300837523ae0329f94f30bc869ae4e7a411520a044fef9fb3"}) 18:03:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000022c0)={0xfffffffffffffffd, 0x62, &(0x7f0000002280)={0x0}}, 0x0) 18:03:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 18:03:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4000000) 18:03:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:03:37 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x0) 18:03:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)=',(#!}]\'\x00', r0) 18:03:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000440), 0x97, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x0) 18:03:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x1}, 0xe) 18:03:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={&(0x7f00000012c0), 0xffffffffffffffd5, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) 18:03:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x7000000) 18:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) 18:03:37 executing program 5: add_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:03:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:03:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x6000000) 18:03:38 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:38 executing program 2: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='([]\\*&/&\x00', 0x0) 18:03:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x44}}, 0x0) 18:03:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x375, 0xf, [@challenge={0x10, 0x1}, @fast_bss_trans={0x37, 0x133, {0x0, 0x7, "f717393354c72f243c7f3c8c90d19fa2", "9976da3cc5fe6e98285d000db138408e3edec8df898d60f180a543b24b1d0ac5", "6e038c55b4daf1f06c2c26f86693a77ac3076624d4a4b178a24cac20d1112ba2", [{0x0, 0x23, "51108f85d8ed5148b69e457e64ad9fcc98f34225b5d2e29a6a9d72e0a1d78106b3066e"}, {0x0, 0x21, "57a0c44970cebd260a707a1009fd7386482410bb9ff6fe9a20b2e258bf32d03edf"}, {0x0, 0x7, "7e3cd8b9f7e2e0"}, {0x0, 0x27, "8c5fbffc87b4d92a44b52b4d25b8b20e86b85f4c7990f3c86aa000b855175b134e989672097d06"}, {0x0, 0x22, "37f1d27f7309fb81aa36c44049a8577c803655d514ac71a899c262c3175ad1242f3d"}, {0x4, 0x22, "644620db5c0d4185f533fa6539388bfff5b21c527cd02e83d71ce31c24493b37e262"}, {0x0, 0x1d, "72cd0887785e746233e94ed1df06edfd890039fdebdc19a7759aa19aa3"}]}}, @measure_req={0x26, 0x77, {0x0, 0x0, 0x0, "1c89903e1194e7ad30ce5c75bb9a2614b6c80a9f975adc932ad0bceb65f35253d1323eb8669a51507bdf10a3148773f333fce4eb2dc54abb31c4995a1b2b097ab2e3b8a2b763159120a8321b3a0430ebccf68b0568e1c0e1cd17a59c5905bb8fae00e149c36c273c89df17172e07e9007a92443b"}}, @tim={0x5, 0x20, {0x0, 0x0, 0x0, "c2ffcc658a74328b678c94ac2ab0d52cc5a14d31ca6475675ccd5600a7"}}, @random={0x0, 0x28, "8f18504aa19adb1839e97a94513031373bc8f5803b154e3b2c858455c20886be425a8c1394aa2907"}, @random_vendor={0xdd, 0xef, "a8bdafe4190639fd2dc3f79a01f20488f10143788674643dfffb5a74410476a852d3e3187914d407ce25782ee6cfe8aea2724e3ae76c89ad15213c610bc04ce1e7c11e7b4a6f85629fc10168ce82348db29f7325e25ee13b362c7c28e0514bd3c211d744448c69c41b179371d00918bfc9cad613a525dd578946b0fbbd1a13bc1286379ed2657d6dd5d458b42e0284ee6e98132f72495118809331ad03f02114a18d32248a4de432339855848005162659a1cceefe1a572063bf5358f2644aa2632d2a6d48ffdfa3181d6885209cd9918a60fd1b36f79ab5d374271ac270a05aaafb5ce6ea5882f04a5aeff3734c38"}, @erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4}, @fast_bss_trans={0x37, 0x78, {0x0, 0x1, "2241306a1015c146f857de64427a509d", "4806de7eb24c5f06c4d7958063a01732798e32570bb5c4e4f783d3d750501279", "ed17780cdafd36649bb7d1066db98c70afe397de271246239e7bf2e6774c4c0c", [{0x0, 0x24, "3de660a4e336723e37777f5732d6ade3263dffa972fdd84a68fe29701a687741c16a466e"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@dsss={0x3, 0x1}, @supported_rates]}, @NL80211_ATTR_FTM_RESPONDER={0x15c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x11, 0x2, "9f4fd24efa21f84d67c164f9eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "1a0ffdfc80ba07dd10fd0732d99fa744aa75ee2b268d81241cf89c4a68d59b008385ade1e146132eb1a68639c9fc30a9b3a9082366eeb5990399951f9089d5157edb9fb25669c7fec1ff3c6b0e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7d, 0x3, "7b64cb3162e85f8042a77333887555ff031a05b86320b837d18ce41e4a6f0dfec5c44012f8d02877c0d72714a5d0d1983757a040c208b13213e5132097d982878827142345b95a65c6202473a0275586648d007a02df5378cecc2d914c937b98823fa414bd6e01a1876e2ed49c994bd0cdaba5a81b17b4e74d"}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "097ac7ba5eda05bb723995c010609a23369be90c07e8f9d583f75b01e6f09d159ecab1d609eccd8676bb3d95bcae1a82afac6477604a81474e983a9a0ebe01f754ed403576cf003c0f58c01a79a078a1618e2e3dcc7183c73802a9d3810998eb84"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x9d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9c9, 0x3, "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"}]}]}, 0xec4}}, 0x0) 18:03:38 executing program 2: add_key(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0x25, 0xfffffffffffffff8) 18:03:38 executing program 3: io_setup(0x4, &(0x7f0000000c80)=0x0) pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:03:38 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1, 0x1, 0x0) 18:03:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8000000) 18:03:38 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:38 executing program 5: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000002c0)="5b3f3fbe1b54e87ee8dc56389d8c648fb7e1b35c8ef61690f2c70a826341550008000000000000d8f38d167b9373bcd434ddcdb311eae0c45d5d37ba9db7235758562929651cfb48d4521f97c6bba46763e47ab2dcf71aed8497e09cfb906f78b0e93fd2f35daef4850ab26c9cb168b0909c283bfcbde57652cf34086ed3dd626f87f0dd8bc38480a8dce831c2bd2302d71c79e55b5523f95db7954e780440c46e93389e7731e90d0fd5ab8d4d3bc2958000", 0xb2, 0xfffffffffffffffc) 18:03:38 executing program 2: r0 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) [ 652.047543][T21711] Option 'WXV))eHRƻgcz턗ox?] [ 652.047543][T21711] lh(;vR4nbo݋Ä1½' to dns_resolver key: bad/missing value [ 652.146484][T21711] Option 'WXV))eHRƻgcz턗ox?] [ 652.146484][T21711] lh(;vR4nbo݋Ä1½' to dns_resolver key: bad/missing value 18:03:39 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x7000000) 18:03:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r1, 0x803, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 18:03:39 executing program 2: syz_open_dev$vcsa(&(0x7f0000000280), 0x80000001, 0x202) 18:03:39 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'tunl0\x00'}) 18:03:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0308000100000000000008"], 0x28}}, 0x0) 18:03:39 executing program 5: r0 = socket(0x2, 0x3, 0x3) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000002c0)="a4", 0x1}], 0x1) 18:03:39 executing program 3: request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='.@(%)$(@{%-\\@\x00', 0x0) [ 652.815395][T21736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 652.863950][T21740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:03:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa000000) 18:03:39 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:39 executing program 5: pipe(&(0x7f0000000700)) 18:03:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000440), 0x97, 0x0) write$evdev(r0, 0x0, 0x0) 18:03:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8000000) 18:03:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 18:03:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000280), 0x5, 0x0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0xfffffe3a) 18:03:40 executing program 0: request_key(&(0x7f0000000900)='dns_resolver\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0) 18:03:40 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000580)={0x0, 0x31, &(0x7f0000000000)={&(0x7f0000000100)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}}, 0x0) 18:03:40 executing program 2: io_setup(0x130e, &(0x7f0000000040)=0x0) pipe(&(0x7f0000002040)) io_submit(r0, 0x0, 0x0) 18:03:40 executing program 3: clock_gettime(0xf9c5fd6ae98dab67, 0x0) [ 653.705392][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 653.761857][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:03:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc000000) 18:03:40 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 18:03:40 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0) 18:03:40 executing program 3: r0 = socket(0x18, 0x0, 0x4) pipe(&(0x7f0000002040)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 18:03:41 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa000000) 18:03:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 18:03:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x7, 0x0) 18:03:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, 0x186, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='macsec0\x00'}) 18:03:41 executing program 5: r0 = inotify_init() ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 18:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x4060) 18:03:41 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:41 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) 18:03:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe000000) 18:03:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 18:03:41 executing program 2: add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 18:03:41 executing program 3: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0x0) 18:03:42 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc000000) 18:03:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x7fff}]}) 18:03:42 executing program 0: socket$packet(0x11, 0x1fc2d0b9315856dc, 0x300) 18:03:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, 0x0, 0x101}, 0x14}}, 0x0) 18:03:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 18:03:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r0) 18:03:42 executing program 5: io_setup(0x4, &(0x7f0000000c80)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) 18:03:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f00000001c0)={[{@fat=@allow_utime}, {@utf8no}, {@fat=@fmask}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000300)={0x6, 0x7, 0x1, 0x2, 0x8, [{0x0, 0xfffffffffffffffb, 0x40, '\x00', 0x6}, {0x2, 0x8, 0xb8, '\x00', 0x1180}, {0x6, 0x2, 0x0, '\x00', 0x281}, {0x7ff, 0xe12, 0x6, '\x00', 0xa84}, {0x63, 0x4, 0x6, '\x00', 0x4}, {0x101, 0x5, 0xfffffffffffffffe, '\x00', 0x480}, {0x0, 0x4, 0x6, '\x00', 0x2}, {0xfffffffffffff001, 0x6, 0x1}]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept$inet6(r0, 0x0, &(0x7f0000000040)) getsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$getownex(r2, 0x10, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) dup2(0xffffffffffffffff, r4) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) [ 655.961583][T21850] loop2: detected capacity change from 0 to 3480 18:03:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x10000000) 18:03:42 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0x0) 18:03:42 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x90801, 0x0) syz_open_dev$vcsn(&(0x7f0000000440), 0x0, 0x0) 18:03:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x48842) write$evdev(r0, &(0x7f0000000140)=[{{0x0, 0x2710}}], 0x18) 18:03:43 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe000000) 18:03:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 18:03:43 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18:03:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffffbb, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}}, 0x0) 18:03:43 executing program 0: add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:03:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed}, 0xe) 18:03:43 executing program 2: request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffc) 18:03:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) 18:03:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a000100"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x60000000) 18:03:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 18:03:44 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000001980), 0x1, 0x0) 18:03:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/7, 0x7}], 0x1) 18:03:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x1012, r3, 0x0) preadv(r3, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000006a00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x10000000) 18:03:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="d8a2b85d", 0x4) 18:03:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4eac}]}) [ 657.734302][T21882] ------------[ cut here ]------------ [ 657.740409][T21882] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 657.750584][T21882] WARNING: CPU: 0 PID: 21882 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 [ 657.760274][T21882] Modules linked in: [ 657.764202][T21882] CPU: 0 PID: 21882 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 657.772838][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:03:44 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x80000000, 0x0) [ 657.783017][T21882] RIP: 0010:debug_print_object+0x16e/0x250 [ 657.789139][T21882] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 20 04 c2 89 4c 89 ee 48 c7 c7 20 f8 c1 89 e8 61 a7 f7 04 <0f> 0b 83 05 c5 ed f6 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 657.808924][T21882] RSP: 0000:ffffc9000b7176a0 EFLAGS: 00010082 [ 657.815032][T21882] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 657.823177][T21882] RDX: 0000000000040000 RSI: ffffffff815bb075 RDI: fffff520016e2ec6 18:03:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/8) [ 657.831183][T21882] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 657.839187][T21882] R10: ffffffff815b4eae R11: 0000000000000000 R12: ffffffff896d78a0 [ 657.847190][T21882] R13: ffffffff89c1fea0 R14: ffffffff81627a30 R15: 1ffff920016e2edf [ 657.855198][T21882] FS: 00007f37b9a57700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 657.864320][T21882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.871085][T21882] CR2: 0000000020000000 CR3: 000000002c357000 CR4: 00000000001526f0 [ 657.879231][T21882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.887243][T21882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.895263][T21882] Call Trace: [ 657.898570][T21882] debug_object_assert_init+0x1f4/0x2e0 [ 657.904158][T21882] ? debug_object_free+0x350/0x350 [ 657.909393][T21882] ? mark_lock+0xef/0x17b0 [ 657.913854][T21882] ? lock_chain_count+0x20/0x20 [ 657.918736][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 657.923855][T21882] del_timer+0x6d/0x110 [ 657.928047][T21882] ? detach_if_pending+0x470/0x470 [ 657.933196][T21882] ? try_to_grab_pending+0xbd/0xd0 [ 657.938412][T21882] ? lockdep_hardirqs_off+0x90/0xd0 [ 657.943649][T21882] try_to_grab_pending+0x6d/0xd0 [ 657.948633][T21882] cancel_delayed_work+0x79/0x340 [ 657.953697][T21882] ? cancel_delayed_work_sync+0x20/0x20 [ 657.959307][T21882] ? lockdep_hardirqs_on+0x79/0x100 [ 657.964576][T21882] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 657.970854][T21882] ? queue_delayed_work_on+0xbb/0x120 [ 657.976260][T21882] l2cap_chan_del+0x517/0xa80 [ 657.981042][T21882] l2cap_chan_close+0x1bc/0xaf0 [ 657.986072][T21882] ? l2cap_rx+0x1fb0/0x1fb0 [ 657.990608][T21882] ? __mutex_unlock_slowpath+0xe2/0x610 [ 657.996403][T21882] ? wait_for_completion_io+0x270/0x270 [ 658.001995][T21882] ? __local_bh_enable_ip+0xa0/0x120 [ 658.007325][T21882] l2cap_sock_shutdown+0x3e7/0x1100 [ 658.012571][T21882] ? l2cap_sock_suspend_cb+0x80/0x80 [ 658.017893][T21882] ? find_held_lock+0x2d/0x110 [ 658.022699][T21882] ? l2cap_sock_release+0x65/0x200 [ 658.027974][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 658.032874][T21882] ? do_raw_read_unlock+0x70/0x70 [ 658.038048][T21882] l2cap_sock_release+0x72/0x200 [ 658.043019][T21882] __sock_release+0xcd/0x280 [ 658.047702][T21882] sock_close+0x18/0x20 [ 658.051888][T21882] __fput+0x288/0x920 [ 658.056101][T21882] ? __sock_release+0x280/0x280 [ 658.061137][T21882] task_work_run+0xdd/0x1a0 [ 658.065766][T21882] get_signal+0x1ba2/0x2150 [ 658.070360][T21882] ? lockdep_hardirqs_on+0x79/0x100 [ 658.075598][T21882] ? l2cap_sock_connect+0x388/0x6c0 [ 658.080836][T21882] ? l2cap_sock_recv_cb+0x1e0/0x1e0 [ 658.086080][T21882] ? selinux_netlbl_socket_connect+0x2e/0x40 [ 658.092155][T21882] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 658.097898][T21882] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 658.104168][T21882] ? fput_many.part.0+0xc6/0x170 [ 658.109130][T21882] ? fput+0x3b/0x50 [ 658.112960][T21882] ? copy_siginfo_to_user32+0xa0/0xa0 [ 658.118362][T21882] ? __sys_connect_file+0x1a0/0x1a0 [ 658.123590][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 658.128476][T21882] exit_to_user_mode_prepare+0x171/0x280 [ 658.134145][T21882] syscall_exit_to_user_mode+0x19/0x60 [ 658.139649][T21882] do_syscall_64+0x47/0xb0 [ 658.144106][T21882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.150039][T21882] RIP: 0033:0x4665f9 [ 658.153963][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.173982][T21882] RSP: 002b:00007f37b9a57188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 658.182497][T21882] RAX: fffffffffffffffc RBX: 000000000056bf60 RCX: 00000000004665f9 [ 658.190589][T21882] RDX: 000000000000000e RSI: 0000000020000040 RDI: 0000000000000004 [ 658.198589][T21882] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 658.206585][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 658.214581][T21882] R13: 00007ffcd65996ff R14: 00007f37b9a57300 R15: 0000000000022000 [ 658.222588][T21882] Kernel panic - not syncing: panic_on_warn set ... [ 658.229198][T21882] CPU: 0 PID: 21882 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 658.237767][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.247859][T21882] Call Trace: [ 658.251162][T21882] dump_stack+0x141/0x1d7 [ 658.255633][T21882] panic+0x306/0x73d [ 658.259596][T21882] ? __warn_printk+0xf3/0xf3 [ 658.264232][T21882] ? __warn.cold+0x1a/0x44 [ 658.268686][T21882] ? debug_print_object+0x16e/0x250 [ 658.273948][T21882] __warn.cold+0x35/0x44 [ 658.278227][T21882] ? debug_print_object+0x16e/0x250 [ 658.283465][T21882] report_bug+0x1bd/0x210 [ 658.287907][T21882] handle_bug+0x3c/0x60 [ 658.292097][T21882] exc_invalid_op+0x14/0x40 [ 658.296636][T21882] asm_exc_invalid_op+0x12/0x20 [ 658.301666][T21882] RIP: 0010:debug_print_object+0x16e/0x250 [ 658.307507][T21882] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 20 04 c2 89 4c 89 ee 48 c7 c7 20 f8 c1 89 e8 61 a7 f7 04 <0f> 0b 83 05 c5 ed f6 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 658.327246][T21882] RSP: 0000:ffffc9000b7176a0 EFLAGS: 00010082 [ 658.333345][T21882] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 658.341334][T21882] RDX: 0000000000040000 RSI: ffffffff815bb075 RDI: fffff520016e2ec6 [ 658.349495][T21882] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 658.357498][T21882] R10: ffffffff815b4eae R11: 0000000000000000 R12: ffffffff896d78a0 [ 658.365505][T21882] R13: ffffffff89c1fea0 R14: ffffffff81627a30 R15: 1ffff920016e2edf [ 658.373511][T21882] ? calc_wheel_index+0x3f0/0x3f0 [ 658.378847][T21882] ? wake_up_klogd.part.0+0x8e/0xd0 [ 658.384093][T21882] ? vprintk+0x95/0x260 [ 658.388414][T21882] debug_object_assert_init+0x1f4/0x2e0 [ 658.394001][T21882] ? debug_object_free+0x350/0x350 [ 658.399242][T21882] ? mark_lock+0xef/0x17b0 [ 658.403685][T21882] ? lock_chain_count+0x20/0x20 [ 658.408565][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 658.413439][T21882] del_timer+0x6d/0x110 [ 658.417613][T21882] ? detach_if_pending+0x470/0x470 [ 658.422746][T21882] ? try_to_grab_pending+0xbd/0xd0 [ 658.428045][T21882] ? lockdep_hardirqs_off+0x90/0xd0 [ 658.433274][T21882] try_to_grab_pending+0x6d/0xd0 [ 658.438272][T21882] cancel_delayed_work+0x79/0x340 [ 658.443359][T21882] ? cancel_delayed_work_sync+0x20/0x20 [ 658.448963][T21882] ? lockdep_hardirqs_on+0x79/0x100 [ 658.454297][T21882] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 658.460592][T21882] ? queue_delayed_work_on+0xbb/0x120 [ 658.466008][T21882] l2cap_chan_del+0x517/0xa80 [ 658.470853][T21882] l2cap_chan_close+0x1bc/0xaf0 [ 658.475761][T21882] ? l2cap_rx+0x1fb0/0x1fb0 [ 658.480296][T21882] ? __mutex_unlock_slowpath+0xe2/0x610 [ 658.487377][T21882] ? wait_for_completion_io+0x270/0x270 [ 658.492964][T21882] ? __local_bh_enable_ip+0xa0/0x120 [ 658.498275][T21882] l2cap_sock_shutdown+0x3e7/0x1100 [ 658.503510][T21882] ? l2cap_sock_suspend_cb+0x80/0x80 [ 658.508832][T21882] ? find_held_lock+0x2d/0x110 [ 658.513630][T21882] ? l2cap_sock_release+0x65/0x200 [ 658.518853][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 658.523742][T21882] ? do_raw_read_unlock+0x70/0x70 [ 658.528812][T21882] l2cap_sock_release+0x72/0x200 [ 658.533785][T21882] __sock_release+0xcd/0x280 [ 658.538418][T21882] sock_close+0x18/0x20 [ 658.542747][T21882] __fput+0x288/0x920 [ 658.546762][T21882] ? __sock_release+0x280/0x280 [ 658.551654][T21882] task_work_run+0xdd/0x1a0 [ 658.556203][T21882] get_signal+0x1ba2/0x2150 [ 658.560766][T21882] ? lockdep_hardirqs_on+0x79/0x100 [ 658.566002][T21882] ? l2cap_sock_connect+0x388/0x6c0 [ 658.571363][T21882] ? l2cap_sock_recv_cb+0x1e0/0x1e0 [ 658.576754][T21882] ? selinux_netlbl_socket_connect+0x2e/0x40 [ 658.582903][T21882] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 658.588655][T21882] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 658.595075][T21882] ? fput_many.part.0+0xc6/0x170 [ 658.600170][T21882] ? fput+0x3b/0x50 [ 658.604129][T21882] ? copy_siginfo_to_user32+0xa0/0xa0 [ 658.609694][T21882] ? __sys_connect_file+0x1a0/0x1a0 [ 658.614934][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 658.619819][T21882] exit_to_user_mode_prepare+0x171/0x280 [ 658.625491][T21882] syscall_exit_to_user_mode+0x19/0x60 [ 658.630995][T21882] do_syscall_64+0x47/0xb0 [ 658.635537][T21882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.641717][T21882] RIP: 0033:0x4665f9 [ 658.645639][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.665593][T21882] RSP: 002b:00007f37b9a57188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 658.674190][T21882] RAX: fffffffffffffffc RBX: 000000000056bf60 RCX: 00000000004665f9 [ 658.682446][T21882] RDX: 000000000000000e RSI: 0000000020000040 RDI: 0000000000000004 [ 658.690624][T21882] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 658.698601][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 658.707103][T21882] R13: 00007ffcd65996ff R14: 00007f37b9a57300 R15: 0000000000022000 [ 658.716236][T21882] Kernel Offset: disabled [ 658.720917][T21882] Rebooting in 86400 seconds..