ing program 5: perf_event_open(&(0x7f0000001300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:46 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x40) 00:34:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4018aebd, &(0x7f0000000040)) 00:34:46 executing program 2: syz_open_dev$binderN(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0xc02) 00:34:46 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000100)=0x7, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x200e402, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479ceef6fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b04e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4007da3) 00:34:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000d4aa55"], 0x2c}}, 0x0) 00:34:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 00:34:46 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r0, &(0x7f0000000000), 0xc) 00:34:46 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2], 0x58}}, 0x0) 00:34:46 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 00:34:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 00:34:46 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00', r0) 00:34:46 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="f6", 0x1}], 0x1}, 0x0) [ 641.441691][T22662] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:47 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) [ 641.518469][T22670] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:47 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r1, r0) 00:34:47 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000980)='nbd\x00', 0xffffffffffffffff) 00:34:47 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast1}) 00:34:47 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) 00:34:47 executing program 5: perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) 00:34:47 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 00:34:47 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0xf0040, 0x0) 00:34:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000002e40), 0xc) 00:34:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 00:34:47 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 00:34:47 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x10) 00:34:47 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}}, 0x0) 00:34:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 00:34:47 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x101681) 00:34:47 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/self/net/pfkey\x00', 0xd0000, 0x0) 00:34:47 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:34:47 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x40) 00:34:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}], 0x1, &(0x7f0000002a40)=""/217, 0xd9}, 0x40010000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:47 executing program 0: syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0x0, 0x501200) 00:34:48 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:34:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4030ae7b, &(0x7f0000000040)) 00:34:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x9, &(0x7f0000000000)=@framed={{}, [@jmp, @ldst, @ldst, @call, @map]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xae, &(0x7f00000000c0)=""/174, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x1c) 00:34:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 00:34:48 executing program 1: mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x30, 0xffffffffffffffff, 0x0) 00:34:48 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000000)) 00:34:48 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) 00:34:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5421, 0x0) 00:34:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) 00:34:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:34:48 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) 00:34:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x140, 0x210, 0x370, 0x0, 0x370, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {"6cca"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@dev}}}, {{@ipv6={@private1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'veth0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@local}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'xfrm0\x00', 'netpci0\x00', {}, {}, 0x67}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 00:34:48 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003ac0)='/dev/vcs\x00', 0x200000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 00:34:48 executing program 5: bpf$BPF_PROG_TEST_RUN(0x14, 0x0, 0x0) 00:34:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xc00caee0, 0x0) 00:34:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) 00:34:48 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$tcp_mem(r0, 0x0, 0x0) [ 643.403364][T22759] x_tables: duplicate underflow at hook 1 00:34:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) 00:34:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000024c0)=ANY=[], 0x161c}}, 0x0) 00:34:49 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) 00:34:49 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d02, &(0x7f0000000040)) 00:34:49 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:34:49 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) 00:34:49 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 00:34:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00', r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740)='l2tp\x00', 0xffffffffffffffff) 00:34:49 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 00:34:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xd09}, 0x14}}, 0x0) 00:34:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:34:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000506010200000000000000000000dfff0900020073797a3000230000050001"], 0x28}}, 0x0) 00:34:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 00:34:49 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) 00:34:49 executing program 3: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 00:34:49 executing program 4: socketpair(0x2, 0xa, 0x20, &(0x7f0000000140)) 00:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, 0x0, 0x0, 0x0) 00:34:49 executing program 2: socket$inet(0x2, 0x0, 0x120000) 00:34:49 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) 00:34:49 executing program 0: socket$inet(0x2, 0xf, 0x0) 00:34:49 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40049409, &(0x7f00000024c0)) 00:34:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) 00:34:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x40002103) 00:34:50 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x240, 0x0) 00:34:50 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop-control\x00', 0x0, 0x0) 00:34:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000140)) 00:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001780)={{0x89, @empty, 0x0, 0x0, 'ovf\x00'}, {@multicast2}}, 0x44) 00:34:50 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000009}) 00:34:50 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x26000, 0x0) 00:34:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 00:34:50 executing program 3: socket(0x29, 0x2, 0xec35) 00:34:50 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map}, 0x14) [ 644.727703][T22857] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:0 00:34:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, 0x0, 0x0) 00:34:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:34:50 executing program 1: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb, 0x1, "11e5b394b6f9083651f332580a9bae72b98ae7faf2947bb8b9f935215a79378e0cad6a38936c1c5411f1df5ca847a2ca1012529f570029e84798badd3e910e04", "b11411ea69bfb0055f758dfb7cfa94d84aa33c12584edd4a621113c26af96197c13b03b8c6a487bbce38e578e6847b80365a8f9c8c51d6ceba8cc4aa239727ea", "65638013e43c8dbb66e868aff6d496b78a725bf4b7b0f6caa59a808139bdfdc4", [0x0, 0x2]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000840)={0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00', 0xffffffffffffffff) 00:34:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) 00:34:50 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x502, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) 00:34:50 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 00:34:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 00:34:50 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5451, 0x0) 00:34:50 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, 0x0) 00:34:50 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x70000, 0x0) 00:34:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 00:34:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={&(0x7f00000004c0)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002a40)=""/217, 0xd9}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x0) 00:34:51 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) fanotify_init(0x0, 0x0) 00:34:51 executing program 5: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00'}, 0x10) 00:34:51 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 00:34:51 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000080)) 00:34:51 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 00:34:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000002c00)={[{@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@dir_umask={'dir_umask'}}]}) 00:34:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 00:34:51 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000000)) 00:34:51 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5452, 0x0) 00:34:51 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 00:34:51 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f0000000180)) 00:34:51 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc4002, 0x0) 00:34:51 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 00:34:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x1}, 0x20) 00:34:51 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00', 0xffffffffffffffff) 00:34:51 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x40002103) 00:34:51 executing program 1: perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:51 executing program 2: r0 = epoll_create1(0x0) r1 = fanotify_init(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x4008556c, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 00:34:51 executing program 4: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:51 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000001}, 0x44000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x3f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xffff}, 0xa4d, 0x0, 0x4, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000ad80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000009c00)=""/4096, 0x1000}, {&(0x7f000000ac00)=""/97, 0x61}, {0x0}], 0x3}, 0x40000020) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x48000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18ff7f0000000000000100ff0d0000002300000000000000"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x2, 0x1, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=[{0x10, 0x84}, {0x10, 0x10c, 0xfffffff7}, {0x68, 0x111, 0x5, "341c0827a58cd07a60feedd8f90fdc0bf77cf1c57db4c29956c6163dd3d217d672b17857594c90683eb5a625d794acb14dc643ed63b32cd3de96bfb08364bc676294aa3e97da92b7e87dbe91683db07fc58e394464"}, {0x68, 0x6, 0x80000001, "3d59f98ba2ce482df7cf01ea055991df2df708a0d97c5347081c02c1b5f3bb22a8ea7e21c79b10da14c2ed487da862567e267d80f75ba85f3124d8199b89b9b314d6f4e942471f7130fc833e7b8c60579623f381653e"}, {0xe0, 0x118, 0x2, "c7ff1163f57268b438cc1cecce459027eb9c489055f2d60c640dfd179a76fe83f50f8c1bd9b237175e30d04fefb4762ca07f488704c7f3ee542ced3fb5c0c86bbf69ee4f4bc3c8d1ba895860c0f9470e987096c962fe5706db20222e7d88bf56844130a4bf98ff3ddb0f48687f29f4c18a7168449f42638c7b4d0847fb3c1135abfe1a1349299b8e36fa05a0a31f707be6cdc65a73ebdc36a853f12a5c36fd3d13c07f650672832df3b81d6cb2a4a15522c0ce843418eb8ba229d66f975ba35f4a35d911f60479faefdeb1"}, {0x18, 0x103, 0xc33, "bd09c013"}, {0xd0, 0x6, 0x4dc67979, "74836499749a5750252640615c8e3bd2652ba160a64320e03e43ee7d6bd83837e5bb9b4f385b5e91e6c110b8b594198a5052728bfb67ef17715aa42a955655157cd02ccd79c38a15667f5f7eb03046f6a57e59bb2bdc106cd59c95fc6cae9c5cbe695dfe4d21b44df9978c1fb747cdbaabbdcffc53930d860a2e1d973be6c0c79c949bd0dabd976959e7eec81cd63c1cf0d682e8d4080afce0fbc05fab2216f1742700773fd17e820ea7ab77315c3b7299c95df9548d840e72522b"}, {0x40, 0x113, 0x8001, "d83e3427a0c94943308bef84891752cd79191b149c57a131c8006b1b49a869a238988c3dc9e210ba9f621682849230"}], 0x2f8}, 0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 00:34:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x1}, 0x20) 00:34:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 00:34:51 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:34:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, 0x0}, 0x0) 00:34:52 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xc020660b, 0x0) 00:34:52 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self\x00', 0xe8100, 0x0) 00:34:52 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000240)) 00:34:52 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe0, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe0}}, 0x0) 00:34:52 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x103000, 0x0) 00:34:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x0) 00:34:52 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) 00:34:52 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000001c0)="a1", 0x1}], 0x2}, 0x0) [ 646.684655][T22974] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 00:34:52 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', 0xffffffffffffffff) fork() 00:34:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 00:34:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1098, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 00:34:52 executing program 3: socketpair(0x2, 0xa, 0x0, &(0x7f0000000140)) 00:34:52 executing program 0: perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19131, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x80000) 00:34:52 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x4400, 0x0) 00:34:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000140)) 00:34:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x8010aebc, 0x0) 00:34:52 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001000)='/dev/mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={0x0, "1004c64ffae04b6b4d0eda7c9e810568"}) 00:34:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000015000)={0xe}, 0x40) 00:34:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x140, 0x210, 0x370, 0x0, 0x370, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc1, 0x2}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x8, 0x2, 0x1, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x3f, 0x3f, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1f], 0x10}}, @common=@mh={{0x28, 'mh\x00'}, {"6cca", 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}, 0x23, 0x3d, 0x3}}}, {{@ipv6={@private1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0x0, 0xff, 0xff000000], 'team_slave_0\x00', 'veth0\x00', {0xff}, {}, 0x21, 0x40, 0x5, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x3, 0x1, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@local, 0x0, 0x0, 0x7}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0x0, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'xfrm0\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x2, 0x60}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1, 0x33, 0x2c, 0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 00:34:52 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_clear_extent_bit\x00'}, 0x10) 00:34:52 executing program 1: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, 0x0) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00', 0xffffffffffffffff) 00:34:52 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x1}, 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 00:34:52 executing program 3: socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00', 0xffffffffffffffff) 00:34:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1, 0x101, 0x6], 0x3, 0xc0800, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x14}}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000840)={0x0, 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000840)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000840)={0x0, 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) [ 647.348315][T23017] x_tables: duplicate underflow at hook 1 00:34:53 executing program 4: socket$netlink(0x10, 0x3, 0x2f) 00:34:53 executing program 2: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:34:53 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x321901, 0x0) 00:34:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00', r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0xe8}}, 0x0) 00:34:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x30, 0x0, &(0x7f0000000600)=[@release, @increfs, @increfs_done, @dead_binder_done], 0x1, 0x0, &(0x7f0000000680)="f0"}) 00:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) 00:34:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:53 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x101200, 0x0) 00:34:53 executing program 5: socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00', 0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x0, 0x3) 00:34:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {0x0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, &(0x7f0000002f80)=@nfc_llcp, &(0x7f0000003000)=0x80) 00:34:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000004200)) 00:34:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:34:53 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:34:53 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, 0x0) 00:34:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={0x0}}, 0x0) 00:34:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)=@can, 0x80, 0x0}}], 0x1, 0x0) 00:34:53 executing program 2: socketpair(0x18, 0x0, 0xfff, &(0x7f0000000000)) 00:34:53 executing program 0: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) 00:34:53 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 00:34:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xe8}}, 0x0) 00:34:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) 00:34:54 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) 00:34:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002a40)=""/217, 0xd9}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000540)=""/160, 0xa0}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:54 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) 00:34:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) 00:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000840)={0x0, 0x0}) 00:34:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 00:34:54 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x65, 0x48000000, r4, 0x0) fanotify_mark(r2, 0x62, 0x40000019, r1, 0x0) 00:34:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='inode_readahead_blks=0x0000000000100000,data_err=abort,init_itable']) 00:34:54 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000001c0)) 00:34:54 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/nvme-fabrics\x00', 0x0, 0x0) 00:34:54 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000240)={r1}) 00:34:54 executing program 4: syz_mount_image$qnx4(&(0x7f0000000ac0)='qnx4\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)) 00:34:54 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f0000000100)) 00:34:54 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mixer\x00', 0x20000, 0x0) 00:34:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 00:34:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r2, &(0x7f0000003900)=[{{&(0x7f0000001540)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000019c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa, [@broadcast, @multicast1, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_u8={{0x11}}], 0x58}}], 0x1, 0x0) 00:34:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 00:34:54 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x4040, 0x0) 00:34:54 executing program 4: getgroups(0x1, &(0x7f0000000280)=[0x0]) 00:34:54 executing program 3: syz_mount_image$btrfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 00:34:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) 00:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 00:34:55 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='target_sequencer_start\x00'}, 0x10) 00:34:55 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2], 0x58}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:34:55 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x46cbad9fd0631fe5) 00:34:55 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) 00:34:55 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f0000003000)) 00:34:55 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5450, 0x0) [ 649.626109][T23154] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.663840][T23154] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:55 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) 00:34:55 executing program 4: syz_mount_image$omfs(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000001040)='omfs\x00', &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)) 00:34:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:34:55 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x24, &(0x7f00000001c0)) 00:34:55 executing program 1: bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 00:34:55 executing program 3: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 00:34:55 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:34:55 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@delchain={0x24}, 0x24}}, 0x0) 00:34:55 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000540)=0x1) 00:34:55 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000180), 0x4) 00:34:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x1}, 0x20}}, 0x0) 00:34:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d19, &(0x7f0000002300)) [ 650.084925][T23177] bridge0: port 3(macvtap1) entered blocking state [ 650.111917][T23177] bridge0: port 3(macvtap1) entered disabled state 00:34:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000580)) 00:34:55 executing program 4: syz_mount_image$squashfs(&(0x7f0000000400)='squashfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f00000082c0), 0x2040, &(0x7f0000008340)) 00:34:55 executing program 3: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 00:34:55 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000180), 0x4) 00:34:55 executing program 5: r0 = socket$caif_stream(0x25, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 00:34:55 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 00:34:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b']}) 00:34:56 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000180), 0x4) [ 650.575356][T23202] bridge0: port 3(macvtap1) entered blocking state 00:34:56 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00', 0xffffffffffffffff) 00:34:56 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x24}}, 0x0) 00:34:56 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) [ 650.646614][T23202] bridge0: port 3(macvtap1) entered disabled state 00:34:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x0) 00:34:56 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 00:34:56 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000180), 0x4) 00:34:56 executing program 3: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 00:34:56 executing program 5: fadvise64(0xffffffffffffffff, 0x4, 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007243b717afd7030a7c", 0x12, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x6, 0x4000) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) 00:34:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0xa0000, 0x0) 00:34:56 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000500)) 00:34:56 executing program 2: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001140)=[{&(0x7f00000010c0)="c2", 0x1}], 0x0, 0x0) 00:34:56 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) [ 651.176901][T23240] bridge0: port 3(macvtap1) entered blocking state [ 651.206232][T23240] bridge0: port 3(macvtap1) entered disabled state 00:34:56 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 00:34:56 executing program 3: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x15, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 00:34:57 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044dfb, &(0x7f00000024c0)) 00:34:57 executing program 5: fadvise64(0xffffffffffffffff, 0x4, 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007243b717afd7030a7c", 0x12, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x6, 0x4000) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) 00:34:57 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x80000, 0x0) 00:34:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) 00:34:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={&(0x7f0000000000), 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0xec4, 0x464, 0x0, 0x70bd25, 0x0, "ada45a3d6af83cffa6d1952faee7eac3f7b53c748dc72be48ec7ee53c4cf9dadfc391900f97c0c08a88d94fad225782a40bd56b0efbe0933ca5900e3db57c738aa70e74be1f46d76c02dd3a72c829727eb3f5502b1a900df4e3a96b7f6bce52cc7da3647ad6882a4f49fc9396bfbde7bc48371f98858f51798e0351b198794db3d330557116e26d0b1476b431e25c593bc7b54bd822f5cc12699b17389bd55023867e6410ab2e2670f2c19c309e4a36e525476e6a33a26322691029427ef050f45e6c292f9d00f83a44c0d5ecca9908dbe55bdb442dc528dc5e07015419d73c5cbc3fbebbe4aaad4c2037558f1ea705d7f295df9735b9226b00228697d71c067e5bebe295111b16321bceeae234c8e4dbaa27e8a9543368f4bec51909e819f91250927f8c2e363f1595aff6eb0c45ee383a5d0bebcfc83499f3cdc67c1d0750ef3cbfd780fa03404e5166facce6e366ceba7f150e00ee7b62e1eba1d38df540565988b7029f4d67fa0ff2ccb3a3a27a18ab636cca9f25520be19c1ead8ef21cea6ca4073fe2154152ba79345625e3bc6550f56de12ad08aef0f53e168bf8960d2a83fc5c6eaab016563446990287417828f11deba22fdce37869cdfb1a9537d1ccf6b8a9fbf7b2979e95dbbc10bbad81f93d5efd167e8611d29ebd14b039943ea5783ac523bd9788f1bacf8feee54d981d0e1a4a729c62daa4f8adad024e1a9c292e0461ebc0fa6821582f81cdbc194166ed23f4801a86152258e4dd3bfe4a6d6e7427a29f398ca11274910b1a544459fd0ff3f2d4a92fc8705aa951d4bdf8e8b3a05db089cef29ac5aea73996dab596d978355af8ecd504c46a7ccd3fb6b0e41045e55c491d0e8e87c34d680522a34bbaa10c183854d964468f53f19ad7e823dba4b72f49b6fbfdad5213940f5119618bfd7b2f3208541f6f2c8a6f9d2a97e5373d5b38d28023c9dcc49d6b992320814d7f85ae056e89ff51edeb3d55e7b309535f39cb5425d3d08241a239f6f811fb553def4102f00f4a77d4b1f543a497ebb5ff956f6c3d4e38583ee2dc3a76cc50bafa36bcf57f7ebd21a32d584d44e885ff034f25fc54037207bdbcb791a5bd6cf09f14a79b12f221fa23ec5770d3cb5f28287f1dc58f9e2b612fb7b086cc8c08c32b286a7ff1c75281828ad2a98e1a101df8fab13c7f7df1cbe5b39b3c451a77121199d10b1cf5a39dee1825aa57419b5498a2866caa4ff7c1b3189f1ace036b868fcf7aa080ac597bd954ece9a4b3c855e19acffb9c4632be46fd04b5f9bb6bc9ab63732ccdff9a3a89b9d564845f0c2d88768acf660c3a35ded858ddd396828d298e3c47ba3652e796e1d54bed288519d9efafa2dbed29ff7db825777c893dbf892be2bea94591ea442b7b2817c6b8c695b1ed6356063bf10a1914537e6aedfa0cdda81c74ec3e2e96546ed4d083f6d4b756a466a696d5f2683d30df8ebd11771deff254d9377cdbd5b8d74dc9778a62a9490f9f4ea991b7d5e0fc131e55c49d8626969c4ca071ca1e4468e91b0b3281fdf14c271679b80c501278b8f626381e38426d4e9e5a21ea7992b6ea56e144a516728491068416fbcc6fe6e2c398a889788d22a1f3bf7250a590549e643b72dfad326eb42d21bfcd0ce56e402efeb0d848d46e782a64b68d6897d2c1ade16e0b275bec411f67c549e2c250af191b398562e36f77a56bd1a5b1ac180e8eb7a7c77285d8595549be1535fee6f7ee39e32726f128047b4034b8536e53fc5fa065e176b97598b9a7f2e3fed83bcd417952b641c5e3f6b87675677c79b73eeb64a22a5644b028403ec803cb01ee92f552d17559655c13f0a5e7c2dda5931892981070b0e9431827a9babe7e0eafcf5ec5cdc851eb4b00ae98206568cb24a0ab090ac332f592d3eb84f9afacfa7edeb66cc52cb7b9e6cca5d49a5c3aa95fbca07c263c6e5d3fc1511061dea630245ca8c2d2e4b9be0e9684277f3ae824e0b9ad22c1d1099652b23f1e20a1085616212a6dfe9e0817b15f7b7fa34157df8efc5b3e1ba9d2f910eef51c309c4003d318dc24f47fa4f8660836c205b361076ca7f1b56fd227e9501ac79c2c84be50c6e612f93d3697ed255806aec4976a21e88aabb78ec5c1f5edc44aadfe7ab657234cb7ca6a1044e9e6439754e17c9dd33cc02c4ea7db2ccc954903f2ab5440d5568ad46df1cbb9928b6b5e92265ee4a14cdbbb7a6baa650907380019a5657b031d10a2d057999c93a7ed5eb994feeafa36c796178b63793f4ea207e98a2b7e7c1fa30b980416a1da1207bf2ab28f041bcf4f61ac407c835c208c627ac6039a6b88ee7ab1f3442b61b118f9ceec37977d7dedd332247b2dc95d5c4015de551ae437ff0e72c047f8a0329e53b0e83fe57040312c5deefb8f543fc7d8348cf454d0988423945c53eb3f47af481706a92ef7ed29f920c90bf2288a6c8d4dbed12347e93040993ee85f498a43d939edd21412ef2b2185d9eb6905a1527ac57cd17dd86216895c8fd699306d1829013b66128918d12e26d6926c312b05aa5c9ec33eee8356dc66d30abf9c433ab5d4985c0058e3e4427c35635091ece1b41da85c5dca993b149ea2929c8d0d837835d2f8d4ce007cb107b2cd53112b6194519d92d625c77741e9cdcd285c3506187c5107a436bb0a07adc35a5b51025345882d7e91f2adc4a133229ae1df6f10324a3da4a82d831b868a21a42d6f79d9c2b48c6a45474ddcb3a1fa766679c90bf5607a47203e85e3081936f23d8a731d234c609539644ef69ef289a6b57520e59c7391c69db38d380049d0cab12a0199c0aaf6adda535395ebcb0483c900bf0f940d87a6f603019753016b477eb2fcca62fadaf5292b331a982023e2031a651dd21d07d4b00bd5be55a50562d0aa1e6334599d7c69e5a1f5f523a57a8ad33961c8af1000cbab95740b4c38faf40fb60bd7e25956adc73ef6de80b3cc5176eaf28f78b5127e455544f3a36364878952573176b0884ff71bb8471b17f6b73954c3b676cd3a6513e6f4c5e8c5fa9abda638f9c3d191dcfbc09077f8787cede7bc61e66ce6111fddce693f0ddd87a3e918702ad7afb8a8c53e26ebde24be37d55dd89256b277647b0ee4f43e0473b6b51cd0f57f8cf9c43fe1907b0d30d8cc50923347d6dc64b009b4b0a3de6e0c03d602836062772b3126a207eaf48efc2b6243fb68ace18d2b574027c71047324c275cff247362a28a2e02100a134963e7b1514f7a4a39c065695d6077871cb23743e13e515e125ba44890f852b1f8f1a21859677a3b02cc73570f9b16bf2e97a31540c7af86813348b4dbd60e4a3498447f539044c4b46e689cf2607bb86c1cd2f2c964b80c4932ebe15cdfa18379fc94f5a27b596cddc21168c84ade1dae8428e23fff20543a0b28e969c25a99f38497def85b0d9120d2e9bfe0030cad5cc90ed9c8717e8ec843dcb919e307e29f7915b06c90a6fcd08387a842ef2d9dac77cf6336f1292fe8899d2bf34fcdc10c2cd0ecbb344d4686312f7f49e93e3e688b29cfa4d8bb75556d575ece55e3c67850ec72e735cd9d071f59b54228910c98bc6ca53c05aff51726d47834f4c8c287aeab163351609fbb83e110110b2a410687ee5bcf749cdbe07325b460fb52002dd22858287eb1e225b00f32819042237ca91ba4b21a1270e8dc1fc6edfb661b43f8986324d4d4372c7837494b2fd87992b34a4049b58a1ebadd9a9cb78b819e9b6f36370f9b82bfe0fa3ec09fb184a7e54aa7b359d7d5f6e847a8b35dbe6d84983857624407af305505b7be5d750e9393e7944de9cf3d67e7cd9928b6bf83bf79ad40f8cb58e934a1468932fe0c866b46270368089d0756851f7ba3618a0b459463b12426ed68f76a4e9d831fb93892bca6ea7624b4f81fd7622cf00fc1e1b7bb5573e6318a44a286754b25c70e62c14d1b3a04e3110c7d56b0e597db2e07b6cad091c97dce5b626c7ba2e35d2832cc353d63c8e728d1ec997fc2c3a18c185a19d2d8808f174b783f907cd96403dac00d30a82adb88e1280e57d6b1396b85d11fa70c5e9f1ac7f3fe143460edb40cae4d8f20f563484837d9b7a6395a564222dd7a659c90c400c3df2047f7fc2e129d51d2b2187561fa941b8542ceb9f2637c988862011bd412d7c25b9eb74e747d9c1c3c4e9729f48d31639dba93946bc0432cd767e7dd2d94f2d5506a8c893278f0db4ba0095c846433668c27e6119f8fff68db1ca6e3610ae419978844ed3fa8b9c9bd46f0234742a203923707467a522c175384e2d2324619f1c1220df41b6e3e80c92e3b57af190ce6632e6408cff0023a63cca6958a0edd01de58288609ccb32d9a34c8bba7fe44ec09a795332aea3ff806291efd356e581dc8fe0cacdfcb81e643a27c584b8ca0e696ee4a2f48c95211faa38f5fa926e848670d19dacb781d8d8c4c48644f10df1ad38d6954b677935cf9a65346c3e803babbc8b745849749a9cbd634102d9fe03605d4a7f34e2f3f6f792adb9627441f442ab7c45ffc15df26b42c141b2d44fbb4e1228bb2b48fc095b49f726bfe2bbaa99ae706c26de552f67718b09d674c4ed06fed21170bd0135f1183b0a5df43442da44dc7989547754a0f8f757db857f22bc14ae6025bc440f2201f8bf7d37797a7ba50957d550ee514aba16db210992de78bead8cd78dae8ebc1c2fa9341e4ba5370952c718e3a36293ecbd5449ce193fc7d81b9b2914e6117dfbe5bb6239e6893898dc74e6cbca7e5e37d4ed3f55446ba4ab90ece8e9687d65929d3069ced131531bcb6589209176e4bfe87a06c277c982efee847e18142ee1f55ca17c0b27c5abdb6ea928782add0bfc18d7b18b081827c7e69445edeb01b824c654c5ca6df70b3de39abcd0f3c7018a30663775052771bdbf130e4ce35873313cc2fe321430fe9420f40be63dc50b5a902bbb43505724fd4415c058fc2cd5c13a9759d2b2b6e1767e95029a922e5122af8119f735eca707307b9fb12dffeac10aa4990901a4eca79985a80f8e07d40b7487f8504da34624de5003d983abd7b937e9b46036f7e5217740a4568b6348bca1f7ef8744a477a56a6cc008ea21245e4af364f81fa2a84c16ff95b4b171e5dcfe2a2f8c5a1facb91d441a198d4fb6ac54f80190f4608dd58ae2a3dcc17510595818320a9d3764496c4854994447b3bf29411af49285af15684f11394afdc22e8107115059f860252ea147dc67bb3fadebec3ea70ce4a81892a4810dfc5f3beffa5b0d9fd8c765ffd0e817420213613a703b0896099b98434b5bca8025bc1d47c771c3fc23b179c5396c5b752c0d6f7"}, 0xec4}}, 0x0) [ 651.680037][T23271] bridge0: port 3(macvtap1) entered blocking state [ 651.722859][T23271] bridge0: port 3(macvtap1) entered disabled state 00:34:57 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) 00:34:57 executing program 2: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00', 0xffffffffffffffff) r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}}, 0x0) bind(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:34:57 executing program 1: mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:34:57 executing program 5: fadvise64(0xffffffffffffffff, 0x4, 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007243b717afd7030a7c", 0x12, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x6, 0x4000) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) 00:34:57 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) 00:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) 00:34:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={0x0}}, 0x0) 00:34:57 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 00:34:57 executing program 4: syz_mount_image$qnx4(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000000600)=""/68, 0x44}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:34:57 executing program 5: fadvise64(0xffffffffffffffff, 0x4, 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007243b717afd7030a7c", 0x12, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x6, 0x4000) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r1, 0x7, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) 00:34:57 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$pvfs2(&(0x7f0000007840)='pvfs2\x00', &(0x7f0000007880)='./file0\x00', 0x0, 0x0, &(0x7f0000007900), 0x84005, &(0x7f0000007940)) 00:34:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) 00:34:58 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000680)={'macvtap0\x00', @ifru_names}) 00:34:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0xa0) 00:34:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) 00:34:58 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000002680)) 00:34:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) 00:34:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:34:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe0, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe0}}, 0x0) 00:34:58 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r0, 0x0, 0x0) 00:34:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0xae64, 0x0) 00:34:58 executing program 1: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) 00:34:58 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10041, 0x0) 00:34:58 executing program 3: syz_mount_image$qnx4(&(0x7f0000000ac0)='qnx4\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={[], [{@fsname={'fsname', 0x3d, '+\xe0'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic'}}, {@audit='audit'}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}) [ 653.022167][T23335] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:34:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0xe8}}, 0x0) 00:34:58 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) fork() 00:34:58 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 00:34:58 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x1e}, 0x10) [ 653.278254][T23347] qnx4: no qnx4 filesystem (no root dir). 00:34:58 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}}, 0x0) 00:34:58 executing program 1: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0xfffffffffffffcec) [ 653.367250][T23347] qnx4: no qnx4 filesystem (no root dir). 00:34:59 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x200080, 0x0) 00:34:59 executing program 2: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00', 0xffffffffffffffff) 00:34:59 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000600)) 00:34:59 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf3bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x140, 0x210, 0x370, 0x0, 0x370, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {"6cca"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@dev}}}, {{@ipv6={@private1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'veth0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@local}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'xfrm0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 00:34:59 executing program 3: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x9) fork() 00:34:59 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x24900, 0x0) [ 653.888992][T23391] x_tables: duplicate underflow at hook 1 00:34:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000004200)) 00:34:59 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 00:34:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a5377ac4"}, 0x0, 0x0, @fd}) 00:34:59 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)) 00:34:59 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc) 00:34:59 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) 00:35:00 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:00 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4400, 0x0) 00:35:00 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf3bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:00 executing program 0: r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 00:35:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 00:35:00 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d45, 0x0) 00:35:00 executing program 5: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x22, 0x0, 0x4f2, &(0x7f0000000500)) 00:35:00 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000640)) 00:35:00 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x0, 0x0) 00:35:00 executing program 4: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) 00:35:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:35:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, 0x0) 00:35:01 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700)='wireguard\x00', 0xffffffffffffffff) 00:35:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 00:35:01 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf3bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0xffffff80, 0x178, 0x178, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 00:35:01 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xc0045878, 0x0) 00:35:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=""/217, 0xd9}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:35:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 00:35:01 executing program 4: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0xe042d336de78b15e) 00:35:01 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 00:35:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x106, 0x1, 0x7}, 0x40) 00:35:01 executing program 0: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 00:35:01 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x103301, 0x0) 00:35:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) 00:35:01 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 00:35:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf3bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:02 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 00:35:02 executing program 0: syz_mount_image$omfs(&(0x7f0000001040)='omfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001140), 0x0, &(0x7f0000001180)) 00:35:02 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:35:02 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00', 0xffffffffffffffff) 00:35:02 executing program 2: socketpair(0x15, 0x0, 0x0, &(0x7f0000002500)) 00:35:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) 00:35:02 executing program 2: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x101681) 00:35:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:02 executing program 5: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 00:35:02 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) 00:35:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1098, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:35:03 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000600)=""/164, 0xa4) 00:35:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x0) 00:35:03 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 00:35:03 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) 00:35:03 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x301e00, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 00:35:03 executing program 1: socketpair(0x2, 0x0, 0x20, &(0x7f0000000140)) 00:35:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000300)) 00:35:03 executing program 3: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0xffffffffffffff4c) 00:35:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000180)={0x0, 0x0}) 00:35:03 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="f6", 0x1}, {&(0x7f0000000180)="b7", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:35:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 00:35:03 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 00:35:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, 0x0, 0x0) 00:35:03 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 00:35:03 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x341000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 00:35:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe0, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x400400c0) 00:35:03 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@errors_continue='errors=continue'}]}) 00:35:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:35:04 executing program 3: syz_open_dev$dri(&(0x7f0000001040)='/dev/dri/card#\x00', 0x401, 0x32b340) [ 658.535592][T23569] REISERFS warning (device loop5): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 658.535592][T23569] [ 658.552835][T23570] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:35:04 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d03, &(0x7f00000024c0)) 00:35:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001500)={0x0, 0x3421}, 0xc) 00:35:04 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) [ 658.763648][T23569] REISERFS warning (device loop5): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 658.763648][T23569] 00:35:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:35:04 executing program 4: socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x15, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) [ 659.089897][T23595] bond0: (slave macvtap1): Error: Device is in use and cannot be enslaved 00:35:04 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:35:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYRES16], 0x58}}, 0x0) 00:35:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:35:04 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 00:35:04 executing program 5: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) [ 659.222669][T23603] bond0: (slave macvtap1): Error: Device is in use and cannot be enslaved 00:35:04 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "44010322778cd1e370e347bfd9db9af7f4048c386ad7a9da1444a75a76236dbd640d000000000000828cecfc869e6446dcae5ca8362e38ebfefbbecc2fefd969"}, 0x48}}, 0x0) 00:35:04 executing program 5: socketpair(0x0, 0x0, 0x4f2, &(0x7f0000000500)) 00:35:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700)='wireguard\x00', 0xffffffffffffffff) 00:35:05 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000180)="b7", 0x1}], 0x2}, 0x0) 00:35:05 executing program 0: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x101681) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x230000, 0x0) 00:35:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540)='batadv\x00', r0) 00:35:05 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d10, &(0x7f00000024c0)) 00:35:05 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, 0x0) 00:35:05 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000002e40)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) 00:35:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, 0x0) 00:35:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 00:35:05 executing program 4: pselect6(0x40, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)={0x62e5}, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) 00:35:05 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001140)={0x0, 0x0, 0x18}, 0x10) 00:35:05 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x40002103) 00:35:05 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 00:35:05 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)) 00:35:05 executing program 5: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:35:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x4, 0x4) 00:35:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000050601"], 0x28}}, 0x0) 00:35:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x300, 0x32, 0x0, 0x0) 00:35:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 00:35:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) 00:35:05 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:35:05 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) [ 660.286661][T23666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x1}, 0x0, 0x0, 0x0, 0x0) 00:35:06 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x4040) 00:35:06 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000200)) 00:35:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) 00:35:06 executing program 4: mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000002380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:35:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) 00:35:06 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:35:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001d40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 00:35:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000000600)=""/68, 0x44}], 0x2}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:35:06 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 00:35:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x20) 00:35:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000700), 0x4) 00:35:06 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 00:35:06 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4040) 00:35:06 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d0b, &(0x7f0000000000)) 00:35:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35e9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 00:35:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) 00:35:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4) 00:35:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0xd09, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) 00:35:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:35:06 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) 00:35:06 executing program 1: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000001c0)) 00:35:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) 00:35:07 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) 00:35:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x1}, 0x0, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000180)={0x0}) 00:35:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:35:07 executing program 1: socketpair(0x1e, 0x0, 0x2, &(0x7f00000000c0)) 00:35:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae79, &(0x7f0000000040)) 00:35:07 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000180)) 00:35:07 executing program 3: r0 = fork() perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x1}, r0, 0xb, 0xffffffffffffffff, 0x0) 00:35:07 executing program 5: bpf$BPF_PROG_TEST_RUN(0x4, 0x0, 0x0) 00:35:07 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) 00:35:07 executing program 1: syz_mount_image$btrfs(0x0, &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="068e04a37073eedb9bffc120562f6f958eafd50290f40796f1c0a35a", 0x1c}, {&(0x7f0000000140)="ed", 0x1}, {&(0x7f0000000200)="dbe5", 0x2, 0x100000001}, {&(0x7f0000000240)="8d", 0x1}], 0x0, &(0x7f0000000300)) 00:35:07 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r2], 0x58}}, 0x0) 00:35:07 executing program 4: syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002180), 0x0, &(0x7f0000002200)) 00:35:07 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, 0x0) 00:35:07 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101040, 0x0) 00:35:07 executing program 3: socket(0x25, 0x5, 0x0) [ 662.181241][T23763] loop1: detected capacity change from 0 to 264192 00:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000140)={'bridge_slave_1\x00', @ifru_names}) [ 662.224497][T23766] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:35:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f00000002c0)) [ 662.286388][T23773] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 00:35:07 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00', 0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400)='nl80211\x00', 0xffffffffffffffff) [ 662.393047][T23763] loop1: detected capacity change from 0 to 264192 00:35:08 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0xffffffffffffff14) 00:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) 00:35:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bde5a511"}, 0x0, 0x0, @fd}) 00:35:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x300) 00:35:08 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mknod$loop(&(0x7f00000001c0)='./bus/file1\x00', 0x2000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 00:35:08 executing program 5: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) 00:35:08 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) 00:35:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 00:35:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 00:35:08 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x48) 00:35:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev}}) 00:35:08 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000040)) [ 662.971301][T23808] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 00:35:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockname(r0, 0x0, 0x0) 00:35:08 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:35:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x24, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0f53d9ce4b5598dff3"}]}, 0x24}}, 0x0) 00:35:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 00:35:08 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000180)) 00:35:08 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41c200, 0x0) 00:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 00:35:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, 0x0, 0x0, 0x80800) 00:35:08 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0xec4, 0x464, 0x0, 0x0, 0x0, "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"}, 0xec4}}, 0x0) 00:35:09 executing program 3: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 00:35:09 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d0b, 0x0) 00:35:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) 00:35:09 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40100, 0x0) 00:35:09 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x488000, 0x0) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00', r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) 00:35:09 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) 00:35:09 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 00:35:09 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x0, 0x0) 00:35:09 executing program 2: bpf$BPF_PROG_TEST_RUN(0x13, 0x0, 0x0) 00:35:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x140, 0x210, 0x370, 0x0, 0x370, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@dev}}}, {{@ipv6={@private1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@local}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'xfrm0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 00:35:09 executing program 1: socketpair(0x2f, 0x0, 0x0, &(0x7f0000000280)) 00:35:09 executing program 0: bpf$BPF_PROG_TEST_RUN(0x3, 0x0, 0x0) 00:35:09 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 00:35:09 executing program 5: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:09 executing program 4: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000001040)='omfs\x00', 0x0, 0x0, 0x1, &(0x7f0000001140)=[{&(0x7f00000010c0)="c2", 0x1}], 0x0, &(0x7f0000001180)) 00:35:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 00:35:09 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000680)) 00:35:09 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0xb10a89d99a83951b) 00:35:09 executing program 0: syz_open_dev$dri(&(0x7f0000002680)='/dev/dri/card#\x00', 0xff, 0x1) 00:35:09 executing program 5: syz_open_dev$dri(&(0x7f0000002680)='/dev/dri/card#\x00', 0x0, 0x1) [ 664.183259][T23873] binder: 23871:23873 ioctl c0306201 0 returned -14 00:35:09 executing program 4: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x20001) 00:35:09 executing program 3: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) syz_mount_image$omfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001140), 0x0, 0x0) 00:35:09 executing program 2: syz_open_dev$binderN(&(0x7f0000000cc0)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) 00:35:10 executing program 0: socketpair(0x23, 0x0, 0x401, &(0x7f0000000000)) 00:35:10 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d19, 0x0) 00:35:10 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x62, 0x40000019, r1, 0x0) 00:35:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x8) 00:35:10 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:35:10 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044dfd, &(0x7f00000024c0)) 00:35:10 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x4000, 0x0) 00:35:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:10 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x2, &(0x7f00000024c0)) 00:35:10 executing program 5: mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 00:35:10 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x501, 0x0) 00:35:10 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4c000, 0x0) 00:35:10 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f00000000c0)) 00:35:10 executing program 5: syz_mount_image$btrfs(0x0, &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="06", 0x1, 0x8}, {&(0x7f0000000140)="ed9f26cb01cdd5149ab14fdd8d573ec58ba370f8baf5ba55541c06eaca32ec7e93f61302d879694e311faa660365b0c3df25b52d95af854e481278f007af95b5d56cb319eee65904c211fce8c410beac9399c09967cd307593ad0a9b92597ddbad3d352300e494bcae1c618ec95b5f5477", 0x71}, {&(0x7f0000000200)="dbe56a1b10176d", 0x7, 0x100000001}, {&(0x7f0000000240)="8d3437c28dbebc51765cbd938479e7", 0xf, 0x3}], 0x802001, &(0x7f0000000300)={[], [{@dont_measure='dont_measure'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}, {@obj_type={'obj_type', 0x3d, '&\x1f'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 00:35:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 00:35:10 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='net_dev_start_xmit\x00'}, 0x10) 00:35:10 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 00:35:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback}, 0x20) 00:35:10 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440), 0x10) [ 665.300650][T23932] binder: 23930:23932 ioctl 40046205 0 returned -22 [ 665.344744][T23934] loop5: detected capacity change from 0 to 264192 00:35:10 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80cc0, 0x0) 00:35:10 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 00:35:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) 00:35:11 executing program 3: syz_mount_image$qnx4(&(0x7f0000000ac0)='qnx4\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={[], [{@dont_appraise='dont_appraise'}]}) 00:35:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x0, 0x0, @remote}}}, 0xa0) 00:35:11 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="86", 0x1) [ 665.566372][T23934] loop5: detected capacity change from 0 to 264192 00:35:11 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x2, 0x0) 00:35:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 00:35:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4038ae7a, 0x0) 00:35:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b11fcc9c"}, 0x0, 0x0, @fd}) [ 665.732023][T23958] qnx4: no qnx4 filesystem (no root dir). [ 665.783849][T23958] qnx4: no qnx4 filesystem (no root dir). 00:35:11 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1}) 00:35:11 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe0, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe0}}, 0x0) 00:35:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 00:35:11 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5452, &(0x7f00000024c0)) 00:35:11 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000300)) 00:35:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 00:35:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000014c0)={'wg0\x00'}) 00:35:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 666.148284][T23982] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 00:35:11 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) 00:35:11 executing program 0: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000e80)=[{&(0x7f0000000e40)="604f8809", 0x4, 0xfffffffffffffffd}], 0x0, 0x0) 00:35:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) 00:35:11 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 00:35:11 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$tcp_mem(r0, 0x0, 0x0) 00:35:12 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 00:35:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}}, 0x4000011) 00:35:12 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00', 0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)) 00:35:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:35:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 00:35:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) waitid(0x1, 0x0, 0x0, 0x4, 0x0) 00:35:12 executing program 5: close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x125400) 00:35:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:35:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0xffffffffffffffba}}, 0x0) 00:35:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x17, 0x4) 00:35:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc) 00:35:12 executing program 4: syz_genetlink_get_family_id$l2tp(0xffffffffffffffff, 0xffffffffffffffff) 00:35:12 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x840, 0x0) 00:35:12 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:35:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x140) 00:35:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xd09, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 00:35:12 executing program 0: socket(0x28, 0x0, 0xffff4516) 00:35:12 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x401, 0x0) 00:35:12 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 00:35:12 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xc0189436, &(0x7f00000024c0)) 00:35:12 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400)='nl80211\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 00:35:12 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=0x1, 0xffffffffffffffff, 0x7}, 0x10) 00:35:12 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="b7", 0x1}, {&(0x7f00000001c0)="a1", 0x1}], 0x2}, 0x0) 00:35:12 executing program 2: openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x341000, 0x0) 00:35:12 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) 00:35:12 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="e4", 0x1, 0x0) 00:35:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x140, 0x210, 0x370, 0x0, 0x370, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x0, 0x0, 0x0, [0x0, 0xd2c]}}, @common=@mh={{0x28, 'mh\x00'}, {"6cca"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@dev}}}, {{@ipv6={@private1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'veth0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@local}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'xfrm0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 00:35:13 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) 00:35:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x10, 0x0, &(0x7f0000004200)) 00:35:13 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe0, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe0}}, 0x0) 00:35:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="fb"], 0x14}}, 0x0) 00:35:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x38, 0x0, &(0x7f0000000600)=[@release, @increfs, @increfs_done, @dead_binder_done, @increfs={0x40046304, 0x2}], 0x1, 0x0, &(0x7f0000000680)="f0"}) [ 667.615348][T24072] x_tables: duplicate underflow at hook 1 [ 667.663005][T24074] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:35:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000080)) 00:35:13 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xa55, 0x4) [ 667.711475][T24077] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 00:35:13 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00)='/proc/self/net/pfkey\x00', 0x0, 0x0) 00:35:13 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1e0, 0x300, 0xffffffff, 0xf0, 0x0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@private0, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@local, @port, @gre_key}}}, {{@ipv6={@loopback, @private1, [], [], 'gretap0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv6=@empty, @port, @icmp_id}}}, {{@ipv6={@local, @private0, [], [], 'vlan0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 00:35:13 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) 00:35:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:13 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 00:35:13 executing program 0: syz_mount_image$btrfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)="068e04a370", 0x5}, {&(0x7f0000000140)="ed9f26cb01cdd5149ab14fdd8d573ec58ba370f8baf5ba55541c06eaca32ec7e93f61302d879694e31", 0x29}, {&(0x7f0000000200)="db", 0x1, 0x100000001}, {&(0x7f0000000240)="8d", 0x1}], 0x0, &(0x7f0000000300)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '&\x1f'}}]}) 00:35:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000080)) 00:35:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x0, 0x0}) 00:35:13 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000080)) 00:35:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x2, 0x0) 00:35:13 executing program 4: socket(0x1, 0x0, 0xee28e549) 00:35:13 executing program 3: ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) 00:35:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) 00:35:13 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) 00:35:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000080)) 00:35:13 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000680)={'macvtap0\x00', @ifru_names}) 00:35:13 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00', 0xffffffffffffffff) 00:35:14 executing program 3: fork() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:14 executing program 0: perf_event_open(&(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:14 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x480) 00:35:14 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000080)) 00:35:14 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40049409, 0x0) 00:35:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @local}}) 00:35:14 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) 00:35:14 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="f6", 0x1}, {0x0}, {&(0x7f00000001c0)="a1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:35:14 executing program 2: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) syz_mount_image$qnx4(&(0x7f0000000ac0)='qnx4\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)) 00:35:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:14 executing program 4: bpf$BPF_PROG_TEST_RUN(0x7, 0x0, 0x0) 00:35:14 executing program 1: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x4000, 0x0) 00:35:14 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x4000, 0x0) 00:35:14 executing program 3: bpf$BPF_PROG_TEST_RUN(0xc, 0x0, 0x0) 00:35:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="f0"}) [ 669.027886][T24147] qnx4: no qnx4 filesystem (no root dir). 00:35:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 00:35:14 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) fanotify_init(0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000019, 0xffffffffffffffff, 0x0) 00:35:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)) 00:35:14 executing program 1: syz_mount_image$omfs(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$omfs(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 00:35:14 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000001c0)) 00:35:14 executing program 4: socketpair(0x22, 0x0, 0x4f2, &(0x7f0000000500)) 00:35:14 executing program 5: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 00:35:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$inet6(r0, 0x0, &(0x7f0000000040)) 00:35:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) fstat(r0, &(0x7f00000001c0)) 00:35:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100)='802.15.4 MAC\x00', r0) 00:35:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 00:35:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17", 0x1) [ 669.838200][ T37] audit: type=1800 audit(1616546115.379:33): pid=24166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="sda1" ino=14404 res=0 errno=0 00:35:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8802, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 00:35:15 executing program 1: syz_mount_image$qnx4(&(0x7f0000000040)='qnx4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[]) 00:35:15 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm_plock\x00', 0xc0140, 0x0) 00:35:15 executing program 4: socket(0x25, 0x5, 0x1) 00:35:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}}, 0x4000005) 00:35:15 executing program 5: ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 00:35:15 executing program 4: mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x33, 0xffffffffffffffff, 0x0) [ 670.062530][T24198] qnx4: no qnx4 filesystem (no root dir). 00:35:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000001c0), 0x0) 00:35:15 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000700)='SEG6\x00', r0) 00:35:15 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f75df8af"}, 0x0, 0x0, @userptr}) 00:35:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 670.172279][T24198] qnx4: no qnx4 filesystem (no root dir). 00:35:15 executing program 4: socketpair(0x1, 0x0, 0x89e, &(0x7f00000000c0)) 00:35:15 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/vcs\x00', 0x44400, 0x0) 00:35:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 00:35:15 executing program 2: pselect6(0x40, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)={0x62e5}, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x7ff]}, 0x8}) 00:35:15 executing program 3: r0 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) 00:35:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) 00:35:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 00:35:16 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:35:16 executing program 1: syz_genetlink_get_family_id$wireguard(&(0x7f0000000700)='wireguard\x00', 0xffffffffffffffff) 00:35:16 executing program 0: pselect6(0x40, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)={0x62e5}, &(0x7f0000000a40)={0x0, 0x989680}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x7ff]}, 0x8}) 00:35:16 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x10040, 0x0) 00:35:16 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) syz_mount_image$qnx4(&(0x7f0000000ac0)='qnx4\x00', &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}]}) 00:35:16 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x3800) 00:35:16 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 00:35:16 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, 0x0) 00:35:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr/current\x00') read$usbfs(r0, 0x0, 0x0) 00:35:16 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) [ 671.222974][T24249] qnx4: no qnx4 filesystem (no root dir). 00:35:16 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:16 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='children\x00') 00:35:16 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) 00:35:17 executing program 2: setresuid(0xee01, 0xee01, 0xee00) syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0) 00:35:17 executing program 1: setresuid(0xee01, 0xee01, 0xee00) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) setresuid(r0, r1, 0xffffffffffffffff) 00:35:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) 00:35:17 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x64]}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000100)=""/196, 0xc4) 00:35:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:17 executing program 3: syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') 00:35:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x5421, &(0x7f00000024c0)) 00:35:17 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x500, 0x0) 00:35:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x68, 0x1}, 0x4c}}, 0x0) 00:35:17 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 00:35:17 executing program 3: syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) 00:35:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:35:17 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00e004000004", 0x1d}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:17 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 672.050438][T24293] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, 0x0) [ 672.111840][T24296] loop2: detected capacity change from 0 to 264192 00:35:17 executing program 0: perf_event_open(&(0x7f0000000e40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:35:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, 0x0) [ 672.260115][T24302] loop1: detected capacity change from 0 to 264192 [ 672.308986][T24296] SQUASHFS error: Failed to read block 0x60: -5 00:35:17 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x0, 0x80, 0x1, 'queue1\x00'}) [ 672.408090][T24302] SQUASHFS error: Failed to read block 0x86: -5 [ 672.416763][T24296] squashfs image failed sanity check 00:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) [ 672.507807][T24302] SQUASHFS error: Unable to read metadata cache entry [84] 00:35:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 672.625326][T24302] SQUASHFS error: Unable to read inode 0x50012 00:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0xfc}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 00:35:18 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, 0x0) 00:35:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x10) 00:35:18 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') 00:35:18 executing program 3: setresuid(0xee01, 0xee01, 0xffffffffffffffff) 00:35:18 executing program 2: setresuid(0xee01, 0xee01, 0xee00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 00:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:35:19 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x4000, 0x0) 00:35:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:35:19 executing program 3: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='F--\x00', 0xffffffffffffffff) 00:35:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) 00:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x100}}, 0x0) 00:35:19 executing program 4: syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 00:35:19 executing program 1: syz_emit_ethernet(0x2a, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4", 0x42}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015be", 0xcf}, {0x0}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 00:35:19 executing program 2: r0 = msgget(0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x800) 00:35:19 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000140001"], 0x14}}, 0x0) 00:35:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 00:35:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x4}]}, 0x18}}, 0x0) 00:35:19 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:19 executing program 1: setresuid(0xee01, 0xee01, 0xee00) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 00:35:19 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef2408000000119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242b09880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28) 00:35:19 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) 00:35:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 00:35:20 executing program 4: setresuid(0xee01, 0xee01, 0xee00) request_key(&(0x7f0000009400)='encrypted\x00', &(0x7f0000009440)={'syz', 0x0}, &(0x7f0000009480)='{\\)\x00', 0xfffffffffffffffe) 00:35:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) io_setup(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x4, 0xe7, &(0x7f0000000540)=""/231, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0xe, 'cgroup\x00'}, {0x4}}]}, 0x34}}, 0x0) 00:35:20 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) lseek(r1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x1a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r0, 0x0, 0x3) 00:35:20 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef2408000000119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242b09880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28) 00:35:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000004e40)={0x13}, 0x40) 00:35:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0045878, 0x0) 00:35:20 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf87a05e1eb9927fa29af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf93e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee0241206473075eaeff2b69c2f2bf6f691c3560e0688fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c695d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed601d1e52aabb17eb1840bc8e0ed1dd8b9a7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b0f1250cc6b2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b169d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d7222947167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d29371e645f50a4e57010a"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef2408000000119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242b09880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28) [ 675.321466][T24398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:20 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0xc0901) write$bt_hci(r0, 0x0, 0x0) 00:35:21 executing program 4: setresuid(0xee01, 0xee01, 0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 675.438238][T24398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.466882][T24398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:21 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf87a05e1eb9927fa29af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf93e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee0241206473075eaeff2b69c2f2bf6f691c3560e0688fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c695d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed601d1e52aabb17eb1840bc8e0ed1dd8b9a7eeaf32a185d80250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b0f1250cc6b2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b169d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d7222947167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d29371e645f50a4e57010a"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="e460cdfbef2408000000119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242b09880bd320d98a61a90021c9bf", 0x0, 0x401}, 0x28) 00:35:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x300}}}, 0x4c}}, 0x0) [ 675.866896][T24401] netlink: 'syz-executor.5': attribute type 14 has an invalid length. [ 675.887470][T24424] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 675.931232][T24425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 675.955578][T24425] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 676.017301][T24427] netlink: 'syz-executor.5': attribute type 14 has an invalid length. 00:35:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) io_setup(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:21 executing program 3: perf_event_open(&(0x7f0000000e40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) 00:35:21 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6, 0xc0901) write$bt_hci(r0, 0x0, 0x0) 00:35:21 executing program 5: setresuid(0xee01, 0xee01, 0xee00) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:35:21 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 00:35:21 executing program 4: add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000240)={0x0, "9f4ba4f7998a9e9f5420bc5452ef70a947d9e2ec2c90762b0ea3e22ee7eff5fdf6b10923537568a0b6b84bc86a2c09a32b3144c1d790e7f3e483792d5c27bc7d"}, 0x48, 0xfffffffffffffffd) [ 676.296072][T24439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f00000005c0)=@unspec, 0xc) 00:35:21 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/185, 0xb9) socket$nl_sock_diag(0x10, 0x3, 0x4) [ 676.399104][T24439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.432712][T24439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:22 executing program 5: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 00:35:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, 0x0, 0x7000) 00:35:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) io_setup(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:22 executing program 2: mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 677.131844][T24462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.216831][T24462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 677.250547][T24462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:23 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, 0x0) 00:35:23 executing program 3: perf_event_open(&(0x7f0000000e40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:23 executing program 0: syz_open_procfs(0xffffffffffffffff, 0xfffffffffffffffe) 00:35:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) io_setup(0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:23 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) 00:35:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000045c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}, @etimer_thresh={0x8}]}, 0x15c}}, 0x0) 00:35:23 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:35:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1045}, 0x40) [ 677.847302][T24479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.929394][T24479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:35:23 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/249, &(0x7f0000000180)=0xf9) 00:35:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000045c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}, @etimer_thresh={0x8}]}, 0x15c}}, 0x0) [ 677.995407][T24479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8596) sendfile(r1, r2, 0x0, 0x7ffff000) 00:35:23 executing program 4: setresuid(0xee00, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}], 0x20}, 0x0) 00:35:24 executing program 3: perf_event_open(&(0x7f0000000e40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000045c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}, @etimer_thresh={0x8}]}, 0x15c}}, 0x0) 00:35:24 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, 0x0) 00:35:24 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, 0x0, 0x0) 00:35:24 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x6000) 00:35:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0xf52a, 0xcd6, 0xc0}, 0x40) 00:35:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000045c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}, @etimer_thresh={0x8}]}, 0x15c}}, 0x0) 00:35:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, 0x0) 00:35:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f00000000ab1a010001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) 00:35:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, 0x0) 00:35:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e22}}}, 0x4c}}, 0x0) [ 679.242938][T24519] loop5: detected capacity change from 0 to 1024 [ 679.338068][T24519] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 679.405422][T24525] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 679.434679][T24519] EXT4-fs (loop5): orphan cleanup on readonly fs [ 679.480347][T24519] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 679.554817][T24519] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 679.566113][T24519] EXT4-fs warning (device loop5): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 679.603860][T24519] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 679.620143][T24519] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:35:25 executing program 3: perf_event_open(&(0x7f0000000e40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:25 executing program 4: setresuid(0xee01, 0xee01, 0xee00) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:35:25 executing program 0: getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000003900)) 00:35:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0xbf, &(0x7f0000000080)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:26 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:26 executing program 4: getresuid(&(0x7f0000004fc0), &(0x7f0000005000), &(0x7f0000005040)) 00:35:26 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') 00:35:26 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4080, 0x0) 00:35:26 executing program 5: syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d8", 0xab}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da35", 0x5e}, {&(0x7f0000001440)}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 00:35:26 executing program 3: socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 00:35:27 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 00:35:27 executing program 5: socket(0x0, 0xe34d5d6c3fa29581, 0x0) 00:35:27 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x14, 0x1, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "194c0c31bc6d143b422f6db9755daedb306389268a5b22ef89cde0a0ed1aa9658b507d0141799067faf0e0bb9a"}]}, 0x48}}, 0x0) 00:35:27 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000180)) 00:35:27 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x213) msgctl$IPC_RMID(r1, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 00:35:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="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"}) 00:35:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x64, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 00:35:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="3c470100080000007126080008"], &(0x7f0000000100)='GPL\x00', 0x4, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:27 executing program 2: add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="a86e51c0f2a01cb98194086a12d2a3fee7f3f2312c256d50909cfc1e6720caa93cf6b249ac9d1aa777cb65814b66947fb223a2fed8411c9add7ea13bf1edc7940391d66c994ecb57a8bf36bfe1aef4a8be0f40c11fa00f1f50b39bf7219bfbc57b4f471e336b308626a4e454214df1d3e6ccd5988ec23ab3c5ebe1ab9f8ef611fd9071299ff8bca5351f8f4bd9f50bdeefbbf122f736c5c349318b0b335f5ae52d2e547dbf580656427d3d65b340275123aca7dd6b7a9a8ae6487a0b02d773a522569739009ba26a2d1e70620ca110e7b7f6d0618ef9004fa42cf1291aa0cd8b9120e6cc02e854afa0cac8b7b8277af1febdaa3851d34002ca0499e4b266614d285e12cc21c8dfc297bc216a8351513793bac4b3a675a835fb19c128f57fd4743331906f59fab72d0d89682ece48c07710289166d48b5ba4bd3a0edaa9a7a1ac5ca6765e02822aa81988eb100000000000000000000000000000053c1e87846a097ae12ca1de1a3003366e2c66659db41c7e6f2dddc0573e28aa0c7314df68e267015dd13eb99b49601e62bed4ae9daf0462ab51dc172f189e5efb055f020b46772b65fbbbcf6c5726ce003eccc99a03bae87ce2546d28bab94fa8f9f6c979a6619a1d67443bdae1c9059f2427cf29b10a55c03259b98307f78b2be3def32ecaf4928043724cf790456447111890468f4d39f677e2a58a03e80f1b7009c08ecea7ebb78f15a0955c610733d1a21bb3df3f596a28728661c95bf7cf6c0ced8e6894c4aca2d87b001d88b0a9b1a35634cb76a8bb4bb1", 0xffffffffffffff27, 0xfffffffffffffffd) 00:35:27 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x213) msgctl$IPC_RMID(r1, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 00:35:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891e, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:28 executing program 3: setresuid(0xee01, 0xee01, 0xee00) 00:35:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 00:35:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xcd6, 0xc0}, 0x40) 00:35:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) 00:35:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x213) msgctl$IPC_RMID(r1, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 00:35:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14000000, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010100)="000000000000000011", 0x9, 0x4e0}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012100)="ffff01", 0x3, 0x9000}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000000580)=ANY=[]) 00:35:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40049409, 0x0) 00:35:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1d, 0x1, 0x1b1, &(0x7f00000000c0)="e19bb5fb6c6b47db4ec19c8e4d6d38a511570156e4770b06757c76b14ab5eab3f1fc31564802233bc31a859c654f27a0024692b1da690e46361503c7ec337a0e19d181d4a1cfcbae5ae774e8ed2f0714e301d91139fb820d34da4adc7e469206b6879e8f01efbaa927d366a7e037bcee2c6ee28de1cd77938f4ea5accb74eaf30af580479b07dd6c63084c11da68cb1319c7936ae93336b93eb4cc105945733beb6aedb4e6ecf17bd7e562a58caa36477f0f1c709931b98ec2713f5184a7d6961ba5122a0298c5d104985581098c92eb3e198b0a528fc3352ced8ec0c6c982d4303b2d4fdfe576606fc36fb2d9bfed3fb75ab0214e8d733a23c94d5d23b169b601eae55a589edfc19adf49bd7d2bb780e7f301b5f22331a317872bda1c32fe87e8a07ba8c90054307f1b1a38456fdcc86f78faf362408d4eb7a5d31d0c366c170463b80f88a220bb69fa80e29e53a1dfa19b257a1fbc845fb9490b019c922b97c768e55381d532e679b9ea2c38beab2d86fb6abb2e4007137638dbb1eaea33a29bb8dc49deb2ddc5ba11d4c087362248581be3e16b470bb9805d13fe6f283d29832eb335f9b1fcf2abd6954d01af3a49cd57ba63350fcf95fecb6b9837e540a9ff4a9fecbea9a1d6d71c687cc929b0d67b11b62a8002bfd0aac3d9daf6e134dc4224dad75621d8c03a3ccf3ebf705af73cc6f61738c1c7291ffdcdefed14582a6a0db09e0f94895def956fb9fc23742d549124dbca15bced1ac854e64972463a5beb2857308a478c976f58cf62947cb7aac16eb37a262cbd4028ddd4914c2d3b0cb69a2bdd5fe944f624624352b261b9ba26a6e32b22d9f7c64db5467e8aff827b579791e66698d32056d7586ed5373ceec8bfcaca8ddba862f06a34e223729d2ab751b3bd517bcb2dfbd44101128a35e92e6ab6b3ecf814dabed8c0f301453c19d9ef84b037f665a0f446012d773d212b5c40ec317bbe30ccf6b3149393b6f1d16ce6bc52f0b9f76964724cd0f3d36c18e1d781b9353d30257dc833f1b41cbacbfc5952325e6f23d9f7d5b442c1f44ea3d58fc40a8ddb1774064d288432ac46612a7bdc042a3d9f0f82a25999245bd839867e4acfc9224bcf2fe7f360d2b98fd266bb26748fe6c08570495e73dc5d8554e6f67be7f4bf7479262f1e98e569adf2d7104d99f1879b80afdab7947f8be595bdd7e9b951990c0d448185f4bc6862a3a081ff820ae373d60f0b3271350ae7767c0d8ab5170ab05a4c30f48a6d5c20dd6a7188ca1ebd5bc37d28afa4beebe11624aab4f44b9f33700019e0776e298e99a23ef359d4a7620e5ba1771394e1e6d73e540f413596afaeabf5e393580e048a10afc2c1636137e9b622ebd33fc13cec3b2715fc59032f2f44165d3603966f25f52bb63397faf841f93d506a13fc75d6aeddc4993d17ef81ecf545dd80eb77"}) 00:35:28 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x213) msgctl$IPC_RMID(r1, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) 00:35:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 00:35:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @dev, @private2}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private0, @ipv4={[], [], @multicast2}, [], [], 'batadv0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 00:35:28 executing program 0: syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x65e2a37c26ff0036) [ 683.092885][T24616] loop5: detected capacity change from 0 to 264192 [ 683.275213][T24616] EXT4-fs error (device loop5): ext4_orphan_get:1389: comm syz-executor.5: couldn't read orphan inode 17 (err -116) [ 683.288397][T24616] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 683.300150][T24616] ext4 filesystem being mounted at /root/syzkaller-testdir097571578/syzkaller.T6D8wF/648/file0 supports timestamps until 2038 (0x7fffffff) 00:35:28 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0xe6f43, 0x0) 00:35:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8932, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:28 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) [ 683.356792][T24632] x_tables: duplicate underflow at hook 2 00:35:28 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 00:35:29 executing program 0: setresuid(0xee01, 0xee01, 0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') 00:35:29 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000002c0)={0x0, "5a3aff2ecdbd834953fc4eed1d515287bff7112ac28efaae138fdc26dc97c113cb7481ccaba2650a67214e85341832bbc2a0a7e75cf7ff9ea024c8053f18df2c"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0x0, r0) 00:35:29 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00) 00:35:29 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 00:35:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 00:35:29 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:29 executing program 3: mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0xa000, 0x0) 00:35:29 executing program 0: perf_event_open(&(0x7f0000000e40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffdfffffffffffff, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) 00:35:29 executing program 2: setresuid(0xee01, 0xee01, 0xee00) socket$inet_icmp_raw(0x2, 0x3, 0x1) 00:35:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) [ 684.019865][T24658] tmpfs: Unknown parameter './bus' 00:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x401, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', r0) 00:35:29 executing program 3: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 00:35:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8910, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:29 executing program 4: clock_adjtime(0x0, &(0x7f0000000340)={0x8001}) 00:35:29 executing program 5: mount$9p_fd(0x0, 0x0, 0x0, 0xd7ba26fd4b7f5b0d, 0x0) 00:35:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:35:30 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, 0x0, 0x0) syslog(0x2, &(0x7f00000002c0)=""/185, 0xb9) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x1810) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x1529846c8e91debd) 00:35:30 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 684.897372][T24692] loop2: detected capacity change from 0 to 264192 [ 684.940875][T24692] SQUASHFS error: lzo decompression failed, data probably corrupt [ 684.977126][T24692] SQUASHFS error: Failed to read block 0xa3: -5 [ 684.983435][T24692] SQUASHFS error: Unable to read metadata cache entry [a1] 00:35:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0xe8080, 0x0) 00:35:30 executing program 3: setresuid(0xee01, 0xee01, 0xee00) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(r0, 0xffffffffffffffff, 0x0) 00:35:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 00:35:30 executing program 1: setresuid(0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) [ 684.992793][T24692] SQUASHFS error: Unable to read inode 0x220012 [ 685.055730][T24692] loop2: detected capacity change from 0 to 264192 [ 685.076092][T24692] SQUASHFS error: lzo decompression failed, data probably corrupt [ 685.086184][T24692] SQUASHFS error: Failed to read block 0xa3: -5 [ 685.093145][T24692] SQUASHFS error: Unable to read metadata cache entry [a1] 00:35:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 685.102885][T24692] SQUASHFS error: Unable to read inode 0x220012 00:35:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 00:35:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(ghash)\x00'}, 0x58) 00:35:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:30 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xeb80, 0x0) 00:35:30 executing program 1: setresuid(0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) [ 685.407844][T24723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 685.442582][T24723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:35:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x1160, 0x12, 0x1, 0x0, 0x25dfdbfd, {0x22, 0x0, 0x7f, 0x8, {0x4e20, 0x4e20, [0xff, 0xb17e, 0x7, 0x6], [0x5, 0x6, 0x9, 0x4], 0x0, [0x5516, 0x7]}, 0x0, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x99, 0x1, "7c4cf02fcf44d5a40d645e7df3beabedec308ec6873a5b7b007000c03e6440218f0e8b5819a6acd76a21ed676eb00e30451fb03bf5955680128f7c67e5b1888fb431d5db6b380c1ffdea6f560904f8f1b06bf618f316036f4a44d57f4365ab585d7a3f5a30fb6094485188ea4480a52863dab7f8665f9877d1a55fe249703e952b649b9c9d79b404bb9f54867283002d1d7e7ea374"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "5ccc12e44215756aae498cb581efb41aeb3dca745bb1d26ef80dcb144aa6b44c1e821eaefc87fb570939da2fd261e7c01f243d1bcaf813c37b3da921292b05623a760a849880d56b223394c1d8184bedaaaeff6c303d"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "9810fa4e434ec317363ff39ff40f67ba22eceb07561c5ec333eb44f5ae452b833121"}, @INET_DIAG_REQ_BYTECODE={0xff4, 0x1, "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"}]}, 0x1160}, 0x1, 0x0, 0x0, 0x200040c8}, 0x48000) [ 685.493800][T24723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {0x0}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 685.575818][T24732] netlink: 4388 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(r0, 0x0) 00:35:31 executing program 1: setresuid(0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:31 executing program 3: syslog(0x3, &(0x7f00000002c0)=""/185, 0xb9) 00:35:31 executing program 5: r0 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 00:35:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x6b, 0x1}, 0x4c}}, 0x0) [ 685.820270][T24739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:35:31 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000340)="e3e3e099ac30562abe7505fb664d476b3e5d3027fe80b72640264e69b21767d3b4bf33264dfad3bde5c0ea51da961d4e6aab03f449add3db2b76ca2dcb1feb6a1dfb2945fe26ca882013bcfb5ccf4c2f72d7658827ad67c16505b9c56ea42991a849aaa42180ae5ab2f493e57c5f768c87694dd51ece72f0bffc71fb499dbb7471c31cca302f", 0x86, 0x600}], 0x0, &(0x7f0000000400)=ANY=[]) getdents(r0, &(0x7f0000000140)=""/126, 0x7e) getdents64(r0, 0x0, 0x0) [ 685.915496][ T3243] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.922031][ T3243] ieee802154 phy1 wpan1: encryption failed: -22 00:35:31 executing program 1: setresuid(0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:31 executing program 2: syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff8fe3, 0x0) 00:35:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:35:31 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2) 00:35:31 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1, 0x0, 0x0, {0x63}}, 0x14}}, 0x0) 00:35:31 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 00:35:31 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:31 executing program 2: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000080)='{++}\x00', 0xfffffffffffffffd) 00:35:31 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) 00:35:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd1, &(0x7f00000000c0)=""/209, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0) 00:35:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x0, 0x6}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:32 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 00:35:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) 00:35:32 executing program 2: setresuid(0x0, 0xee01, 0xee00) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 00:35:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)) 00:35:32 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x12, 0x1}, 0x14}}, 0x0) 00:35:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='schedstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x3, 0xc8, &(0x7f00000001c0)=""/200, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x78) 00:35:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) 00:35:32 executing program 2: setresuid(0xee01, 0xee01, 0xee00) add_key$fscrypt_v1(&(0x7f0000000880)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a462d3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) 00:35:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, 0x0) 00:35:32 executing program 0: syslog(0x2, &(0x7f00000002c0)=""/185, 0xb9) 00:35:32 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x9, 0x0, 0x3, 0x0, 0x1}, 0x40) 00:35:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0) 00:35:32 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) 00:35:32 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 00:35:32 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000180)=0x7) 00:35:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr/current\x00') read$usbfs(r0, &(0x7f0000000300)=""/252, 0xfc) 00:35:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xe, 0x0, 0x0, 0xb659, 0x8}, 0x40) 00:35:33 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8923, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 687.608492][T24827] loop1: detected capacity change from 0 to 264192 00:35:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0}, 0x4040009) 00:35:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:33 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x213) msgctl$IPC_RMID(r1, 0x0) [ 687.862928][T24832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.923165][T24832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:35:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 00:35:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x1080, 0x1}, 0x40) [ 687.967029][T24832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0x0, 0xcd6}, 0x40) 00:35:33 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) 00:35:33 executing program 2: socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) [ 688.280354][T24851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 688.297746][T24851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.317372][T24851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x11, 0x1}, 0x4c}}, 0x0) 00:35:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x1170, 0x12, 0x1, 0x0, 0x25dfdbfd, {0x22, 0x0, 0x7f, 0x8, {0x4e20, 0x4e20, [0xff, 0xb17e, 0x7, 0x6], [0x5, 0x6, 0x9, 0x4], 0x0, [0x5516, 0x7]}, 0x101, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "7c4cf02fcf44d5a40d645e7df3beabedec308ec6873a5b7b007000c03e6440218f0e8b5819a6acd76a21ed676eb00e30451fb03bf5955680128f7c67e5b1888fb431d5db6b380c1ffdea6f560904f8f1b06bf618f316036f4a44d57f4365ab585d7a3f5a30fb6094485188ea4480a52863dab7f8665f9877d1a55fe249703e952b649b9c9d79b404bb9f54867283002d1d7e7ea374b927"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "5ccc12e44215756aae498cb581efb41aeb3dca745bb1d26ef80dcb144aa6b44c1e821eaefc87fb570939da2fd261e7c01f243d1bcaf813c37b3da921292b05623a760a849880d56b223394c1d8184bedaaaeff6c303d"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "9810fa4e434ec317363ff39ff40f67ba22eceb07561c5ec333eb44f5ae452b833121"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1170}, 0x1, 0x0, 0x0, 0x200040c8}, 0x48000) [ 688.326833][T24832] syz-executor.3 (24832) used greatest stack depth: 22560 bytes left 00:35:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 688.374939][T24851] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. 00:35:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 688.481376][T24863] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:34 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f00000001c0)="e3e3e099ac30562abe7505fb664d476b3e5d3027fe80b72640264e69b21767d3b4bf33264dfad3bde5c0ea51da961d4e6aab03f449c24f35c2c128a3add3db2b76ca2dcb1feb6a1dfb2945fe26ca882013bcfb5ccf4c2f72d7658827ad67c16505", 0x61, 0x600}], 0x0, &(0x7f0000000080)) getdents(r0, &(0x7f0000000140)=""/126, 0x7e) [ 688.530544][T24864] netlink: 4404 bytes leftover after parsing attributes in process `syz-executor.0'. 00:35:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000340)) 00:35:34 executing program 5: add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) 00:35:34 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 688.741549][T24869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 688.844467][T24869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.862190][T24869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:34 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffffffffffffffff, 0x218800) 00:35:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x24, 0x25, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:35:34 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002700)='ns/cgroup\x00') 00:35:34 executing program 0: setresuid(0xee01, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 00:35:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 00:35:34 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000140)='./file0\x00', 0x0) 00:35:34 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x0) [ 689.408831][T24891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r2, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x78, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x48, 0x2, [@TCA_CGROUP_ACT={0x44, 0x1, [@m_ct={0x40, 0x0, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4}, {0x15, 0x6, "2e10e833a0ac16d802bc40c91648df5417"}, {0xc}, {0xc}}}]}]}}]}, 0x78}}, 0x0) 00:35:35 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 689.463895][T24891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:35:35 executing program 2: setresuid(0xee01, 0xee01, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) 00:35:35 executing program 1: r0 = msgget(0x0, 0x208) msgctl$IPC_RMID(r0, 0x0) [ 689.520465][T24891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:35 executing program 2: syslog(0x2, &(0x7f00000002c0)=""/185, 0xb9) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x1529846c8e91debd) [ 689.700701][T24905] loop5: detected capacity change from 0 to 264192 00:35:35 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 689.886506][T24905] SQUASHFS error: lzo decompression failed, data probably corrupt 00:35:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffef7) [ 689.953050][T24905] SQUASHFS error: Failed to read block 0x11c: -5 00:35:35 executing program 0: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) 00:35:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/194, &(0x7f0000000100)=0xc2) [ 690.018612][T24917] loop1: detected capacity change from 0 to 264192 [ 690.046369][T24917] unable to read id index table [ 690.047572][T24905] SQUASHFS error: Unable to read metadata cache entry [11a] [ 690.106339][T24917] loop1: detected capacity change from 0 to 264192 [ 690.142773][T24917] unable to read id index table 00:35:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 690.154265][T24905] SQUASHFS error: Unable to read inode 0x9b0012 00:35:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, 0x0) 00:35:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:35 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x0, 0x0, "0ca81c", 0x5}) [ 690.328478][T24905] loop5: detected capacity change from 0 to 264192 00:35:36 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:36 executing program 0: setresuid(0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 00:35:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:35:36 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) lseek(r0, 0x0, 0x0) [ 690.530974][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 690.587415][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:35:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) [ 690.634054][T24936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:35:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0xf52a, 0xcd6}, 0x40) [ 690.780356][T24954] loop5: detected capacity change from 0 to 264192 [ 690.860045][T24954] SQUASHFS error: lzo decompression failed, data probably corrupt 00:35:36 executing program 4: setresuid(0xee01, 0xee01, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=[@cred={{0x1c}}], 0x20}, 0x0) [ 690.907737][T24954] SQUASHFS error: Failed to read block 0x11c: -5 00:35:36 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x209, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x0) 00:35:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, 0x0) [ 690.991866][T24954] SQUASHFS error: Unable to read metadata cache entry [11a] [ 691.034265][T24954] SQUASHFS error: Unable to read inode 0x9b0012 00:35:36 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 691.329432][T24975] loop5: detected capacity change from 0 to 264192 [ 691.350681][T24975] SQUASHFS error: lzo decompression failed, data probably corrupt [ 691.359667][T24975] SQUASHFS error: Failed to read block 0x11c: -5 [ 691.366483][T24975] SQUASHFS error: Unable to read metadata cache entry [11a] [ 691.374173][T24975] SQUASHFS error: Unable to read inode 0x9b0012 00:35:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8947, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:37 executing program 4: setresuid(0xee01, 0xee01, 0xee00) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) 00:35:37 executing program 3: add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000002c0)={0x0, "5a3aff2ecdbd834953fc4eed1d515287bff7112ac28efaae138fdc26dc97c113cb7481ccaba2650a67214e85341832bbc2a0a7e75cf7ff9ea024c8053f18df2c"}, 0x48, 0xfffffffffffffffc) 00:35:37 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:37 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:37 executing program 4: setresuid(0xffffffffffffffff, 0xee01, 0xee00) [ 691.579795][T24987] loop5: detected capacity change from 0 to 264192 00:35:37 executing program 2: request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=').\x00', 0xfffffffffffffffe) [ 691.714725][T24987] SQUASHFS error: lzo decompression failed, data probably corrupt [ 691.722631][T24987] SQUASHFS error: Failed to read block 0x11c: -5 [ 691.771408][T24987] SQUASHFS error: Unable to read metadata cache entry [11a] [ 691.855072][T24987] SQUASHFS error: Unable to read inode 0x9b0012 [ 692.634461][ T9743] Bluetooth: hci0: command 0x0401 tx timeout 00:35:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 00:35:38 executing program 1: getresgid(&(0x7f0000001040), &(0x7f0000009000), &(0x7f0000009040)) 00:35:38 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:', @auto=[0x34, 0x65, 0x65, 0x0, 0x63, 0x39]}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) 00:35:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB=' '], 0x78}, 0x0) 00:35:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:38 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) [ 693.086108][T25006] batadv_slave_1: mtu less than device minimum 00:35:38 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0xffffff92) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) 00:35:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x8}, 0x40) 00:35:38 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) 00:35:38 executing program 5: perf_event_open(&(0x7f0000000e40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000007c0)='bpf_lsm_inode_invalidate_secctx\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000880)=""/157, 0x9d}], 0x1, 0x3, 0x10001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r0, 0x0) 00:35:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x5}, 0x6) 00:35:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8980, 0x0) 00:35:39 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000240)={0x0, "9f4ba4f7998a9e9f5420bc5452ef70a947d9e2ec2c90762b0ea3e22ee7eff5fdf6b10923537568a0b6b84bc86a2c09a32b3144c1d790e7f3e483792d5c27bc7d"}, 0x48, 0xfffffffffffffffd) keyctl$describe(0x6, r0, 0x0, 0x0) 00:35:39 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps\x00') 00:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x2}}, 0x4c}}, 0x0) 00:35:39 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) msgget(0x1, 0x0) 00:35:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xd1, &(0x7f00000000c0)=""/209, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 693.800791][T25035] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 00:35:39 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8916, 0x0) 00:35:39 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0) 00:35:39 executing program 2: r0 = gettid() tkill(r0, 0x0) 00:35:39 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) msgget(0x1, 0x0) 00:35:39 executing program 5: setresuid(0xee01, 0xee01, 0xee00) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setresuid(r0, r0, 0xee00) 00:35:39 executing program 0: pipe2$9p(0x0, 0x8c000) 00:35:39 executing program 4: setresuid(0xee01, 0xee01, 0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) 00:35:39 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) 00:35:39 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) msgget(0x1, 0x0) 00:35:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:40 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) 00:35:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24202", 0x63, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[]) 00:35:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003600)={0x11, 0x1, &(0x7f0000003400)=@raw=[@jmp], &(0x7f0000003440)='syzkaller\x00', 0x6, 0xe7, &(0x7f0000003480)=""/231, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:40 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) msgget(0x1, 0x0) 00:35:40 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) 00:35:40 executing program 0: setresuid(0xee01, 0xee01, 0xee00) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(r0, 0xffffffffffffffff, r1) [ 694.773886][T25081] loop2: detected capacity change from 0 to 4 00:35:40 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0}, 0x0) 00:35:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') [ 694.905692][T25081] EXT4-fs (loop2): Encoding requested by superblock is unknown 00:35:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:35:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$chown(0x10, r0, 0x0, 0x0) 00:35:40 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') 00:35:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004800)={0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000006800050000000016d001020002000000", @ANYRES32=0x0, @ANYBLOB="040004"], 0x1c}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10014, 0x0) 00:35:40 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) [ 695.287531][T25081] loop2: detected capacity change from 0 to 4 [ 695.307245][T25081] EXT4-fs (loop2): Encoding requested by superblock is unknown 00:35:41 executing program 2: setresuid(0xee01, 0xee01, 0xee00) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:35:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, 0x0) 00:35:41 executing program 4: request_key(&(0x7f0000009400)='encrypted\x00', &(0x7f0000009440)={'syz', 0x0}, &(0x7f0000009480)='{\\)\x00', 0xfffffffffffffffe) 00:35:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') 00:35:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="3c4701000800000071"], &(0x7f0000000100)='GPL\x00', 0x4, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000140)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0)='nl80211\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x87368c1dad5bf3c3}, 0x14}}, 0x0) 00:35:41 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) 00:35:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') 00:35:41 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000340)=@raw=[@func], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:41 executing program 0: request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:35:41 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000140)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0)='nl80211\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x87368c1dad5bf3c3}, 0x14}}, 0x0) 00:35:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 00:35:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:35:41 executing program 0: request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x700) 00:35:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x13, 0x1}, 0x4c}}, 0x0) 00:35:42 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000140)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0)='nl80211\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x87368c1dad5bf3c3}, 0x14}}, 0x0) 00:35:42 executing program 0: request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x7}}, 0x4c}}, 0x0) [ 696.491508][T25151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:35:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') 00:35:42 executing program 2: getresuid(&(0x7f0000004fc0), &(0x7f0000005000), 0x0) 00:35:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:42 executing program 0: request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0x0) 00:35:42 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0x0) 00:35:42 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000140)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0)='nl80211\x00', r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x87368c1dad5bf3c3}, 0x14}}, 0x0) 00:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000002"], 0x78}, 0x0) 00:35:42 executing program 2: mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', 0x0, 0xa000, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 00:35:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f00000000ab1a010001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) 00:35:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @dev, @private2, [], [], [0x0, 0x0, 0x0, 0xffff00]}}, @common=@hbh={{0x48, 'hbh\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private0, @ipv4={[], [], @multicast2}, [], [], 'batadv0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 00:35:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 00:35:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000c00001"], 0xb0}}, 0x0) 00:35:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 697.163007][T25190] loop5: detected capacity change from 0 to 1024 00:35:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:42 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc) [ 697.257928][T25199] x_tables: duplicate underflow at hook 2 [ 697.284400][T25190] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 00:35:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e22}}}, 0x4c}}, 0x0) 00:35:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 697.349971][T25190] EXT4-fs (loop5): orphan cleanup on readonly fs 00:35:42 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x0, 0x80, 0x0, 'queue1\x00'}) 00:35:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 697.478040][T25190] EXT4-fs error (device loop5): ext4_free_blocks:5283: comm syz-executor.5: Freeing blocks not in datazone - block = 48, count = 16 00:35:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x278, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@private0, @ipv4={[], [], @multicast2}, [], [], 'batadv0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 697.575415][T25190] EXT4-fs error (device loop5): ext4_free_inode:282: comm syz-executor.5: reserved or nonexistent inode 3 [ 697.588674][T25212] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.685941][T25190] EXT4-fs warning (device loop5): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 697.763895][T25190] EXT4-fs (loop5): Cannot turn on quotas: error -22 00:35:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f00000000ab1a010001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) 00:35:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 697.805315][T25190] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 698.042501][T25223] loop5: detected capacity change from 0 to 1024 [ 698.055616][T25223] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 698.069449][T25223] EXT4-fs (loop5): orphan cleanup on readonly fs [ 698.079041][T25223] EXT4-fs error (device loop5): ext4_free_blocks:5283: comm syz-executor.5: Freeing blocks not in datazone - block = 48, count = 16 [ 698.096248][T25223] EXT4-fs error (device loop5): ext4_free_inode:282: comm syz-executor.5: reserved or nonexistent inode 3 [ 698.108337][T25223] EXT4-fs warning (device loop5): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 698.122512][T25223] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 698.129242][T25223] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:35:43 executing program 4: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 00:35:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x6681, 0x0) 00:35:43 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 00:35:43 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x2, &(0x7f0000001580)=[{&(0x7f0000001600), 0x0, 0x3}, {&(0x7f0000000200)='g', 0x1, 0xfffffffffffffffe}], 0x0, &(0x7f0000001800)={[{'\x06'}, {'.,'}, {','}, {'\xc4w5\xb51\xfc,,\xae\x1e\xb5 653`\x02\x11\xff\xfc)GR\x81h\xa7\xecq\xb8:\x18\xe1_,\xcc\xa4\xa4\xceN\x10\xd3\xe0-\xd1o0\xc0j1\x1c,\x817\xf0\xb0y5x\x94\xaa\xde\x04&\x05@\x14\xfc2\xb75\xae\xb9\xad\xb2\xa2\x1f\x05\xcd\xb7\xe4\x92\xd4\x05\x1ae\x1ah\x93\xa5\x94\x16F\x19\xd4\x96\xf3\x99\r\x9b\xdbE0\x8dM\x86_\"\xcd\xb3\xef\\\xebB,J;\xf9Q\xa0B\x8e\xdf\xda\x14\x8asL\x12#[\xd3\xe0\x90\xf4\x12\xa8\x00p\x10a\xf8\xf4\xe9\xd0\t\x88\t\x0f\x01f\xe7\xb8\x88+\x84\xd1xe\x94\xfc\x85\xd7\x9e\f\xed\x82\xdb\xba\x1a\x05\xfd\xba\xb1\xae\xaf\x1a\x93S\xa9\x1c:v\x8f$\xb3\xc6\xa1\xcc\x9f7\xe5h~2&\xf2\xdd\xb9dTA \x16\xa4U\xde\x03\x1cU\xf6\xc7\x15\xcc}6\x8e\\\x93\xfbc\xfb`\xf2\xf8\xdd\xf7\x05d[\x96(\xba\xca\x89\x83\xee.w4>OAt\xac\xe1'}], [{@seclabel='seclabel'}]}) 00:35:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f00000000ab1a010001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) [ 698.359300][T25239] loop2: detected capacity change from 0 to 16383 00:35:43 executing program 0: socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) setresuid(0x0, 0x0, 0xee01) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) inotify_init1(0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0) 00:35:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 00:35:44 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000180)=0x7) 00:35:44 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) [ 698.426498][T25241] loop5: detected capacity change from 0 to 1024 [ 698.454164][T25239] nfs: Unknown parameter '' [ 698.525056][T25241] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 698.584628][T25250] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.623493][T25241] EXT4-fs (loop5): orphan cleanup on readonly fs 00:35:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0", 0x1e}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 698.693856][T25241] EXT4-fs error (device loop5): ext4_free_blocks:5283: comm syz-executor.5: Freeing blocks not in datazone - block = 48, count = 16 00:35:44 executing program 3: setresuid(0xee01, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) keyctl$chown(0x4, r0, r1, 0x0) 00:35:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, 0x0) 00:35:44 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) [ 698.831607][T25241] EXT4-fs error (device loop5): ext4_free_inode:282: comm syz-executor.5: reserved or nonexistent inode 3 00:35:44 executing program 2: setresuid(0xee01, 0xee01, 0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) [ 698.904134][T25241] EXT4-fs warning (device loop5): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 698.951185][T25241] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 698.986698][T25241] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:35:44 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') 00:35:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) shmat(0x0, &(0x7f0000092000/0x9000)=nil, 0x0) mlockall(0x0) 00:35:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000003600000019000000600100000ff68f01000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f00000000ab1a010001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f0000000000c800002000000010e10800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000002c0)=ANY=[]) [ 699.379397][T25283] loop5: detected capacity change from 0 to 1024 [ 699.404813][T25283] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 699.433329][T25283] EXT4-fs (loop5): orphan cleanup on readonly fs [ 699.441089][T25283] EXT4-fs error (device loop5): ext4_free_blocks:5283: comm syz-executor.5: Freeing blocks not in datazone - block = 48, count = 16 [ 699.475271][T25283] EXT4-fs error (device loop5): ext4_free_inode:282: comm syz-executor.5: reserved or nonexistent inode 3 00:35:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0xa6, &(0x7f0000000100)=""/166, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:45 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') 00:35:45 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1}, 0x14}, 0x300}, 0x0) 00:35:45 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x0, 0x0) 00:35:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) [ 699.621623][T25283] EXT4-fs warning (device loop5): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 00:35:45 executing program 0: syslog(0x3, &(0x7f0000000040)=""/145, 0x91) [ 699.703067][T25283] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 699.751362][T25283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:35:45 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000100)=""/196, 0xc4) 00:35:45 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000400)=@abs={0x1}, 0x6e) preadv(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0) 00:35:45 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x0) 00:35:45 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 700.616399][T25311] loop5: detected capacity change from 0 to 264192 [ 700.728862][T25311] SQUASHFS error: Unable to read inode 0x140 [ 700.935504][T25311] loop5: detected capacity change from 0 to 264192 [ 700.990362][T25311] SQUASHFS error: Unable to read inode 0x140 00:35:48 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:35:48 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@private2}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) 00:35:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) 00:35:48 executing program 0: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffffffffffffffff, 0x0) 00:35:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) 00:35:48 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00e0000200040000004001000000000000f801000000000000ac01000000000000e0010000000000007f000000000000001f0100000000000076010000000000009a010000000000001a73797a6b616c6c6572203a200020438c01200000009820002838001100009e001d0200ed0100000100911d675f40012b0100644c002a7d00032d6e001a040f000300ff277c005901006d08264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c6530b5000129750102c40b7d00294d00074d0009297d000529f5010a2da402e6177e04bc002add00065d0160de0328232cdc006d0dff410000291f000100c027ed0007dc04651f545d1a085c001100004800130100a100034d00204c00090200040066696c65304000015002b2013104d404f7050200088003032e636f6c647e590201f9069e4001ec080131d60005273100322a3100331100000b00136000a1001fdc0011000069010000000000001a001200c1007edd0020dd0040dd009edd00d6de001201bc001100007e0100000000000008805cf90100535f0100a2010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000b4010000000000000100000000000000d101", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 703.049076][T25328] loop5: detected capacity change from 0 to 264192 00:35:48 executing program 1: add_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) setresuid(0x0, 0x0, 0xffffffffffffffff) 00:35:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6}]}]}, 0xffffffffffffff36}}, 0x0) 00:35:48 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@private2}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) 00:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) [ 703.223822][T25328] SQUASHFS error: Unable to read inode 0x140 00:35:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001080)={0x10, 0x0, 0x0, 0x1105a900}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0)) 00:35:48 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) 00:35:49 executing program 1: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000400)=ANY=[]) getdents(r0, &(0x7f0000000140)=""/126, 0x7e) getdents64(r0, 0x0, 0x0) 00:35:49 executing program 3: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000080)='{++}\x00', 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 00:35:49 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x300}, 0x0) 00:35:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@private2}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) [ 703.633247][T25358] loop5: detected capacity change from 0 to 264192 00:35:49 executing program 0: setresuid(0xee01, 0xee01, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003600)={0x0, 0x1, &(0x7f0000003400)=@raw=[@jmp], &(0x7f0000003440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 703.678676][T25360] loop1: detected capacity change from 0 to 6 [ 703.748013][T25358] SQUASHFS error: Unable to read inode 0x140 00:35:49 executing program 4: setresuid(0xee01, 0x0, 0xee00) setresuid(0x0, 0x0, 0x0) 00:35:49 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00e0000200040000004001000000000000f801000000000000ac01000000000000e0010000000000007f000000000000001f0100000000000076010000000000009a010000000000001a73797a6b616c6c6572203a200020438c01200000009820002838001100009e001d0200ed0100000100911d675f40012b0100644c002a7d00032d6e001a040f000300ff277c005901006d08264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c6530b5000129750102c40b7d00294d00074d0009297d000529f5010a2da402e6177e04bc002add00065d0160de0328232cdc006d0dff410000291f000100c027ed0007dc04651f545d1a085c001100004800130100a100034d00204c00090200040066696c65304000015002b2013104d404f7050200088003032e636f6c647e590201f9069e4001ec080131d60005273100322a3100331100000b00136000a1001fdc0011000069010000000000001a001200c1007edd0020dd0040dd009edd00d6de001201bc001100007e0100000000000008805cf90100535f0100a2010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000b4010000000000000100000000000000d101", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) [ 703.860726][T25360] FAT-fs (loop1): Directory bread(block 6) failed 00:35:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001080)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) 00:35:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8903, 0x0) 00:35:49 executing program 4: setresuid(0xee01, 0x0, 0xee00) setresuid(0x0, 0x0, 0x0) 00:35:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@private2}}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000100000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) [ 704.015784][T25378] loop5: detected capacity change from 0 to 264192 00:35:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 704.062369][T25378] SQUASHFS error: Unable to read inode 0x140 00:35:49 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:'}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f00000001c0)=""/73, 0x49) 00:35:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:49 executing program 4: setresuid(0xee01, 0x0, 0xee00) setresuid(0x0, 0x0, 0x0) 00:35:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1d, 0x1, 0x0, &(0x7f00000000c0)="e19bb5fb6c6b47db4ec19c8e4d6d38a511570156e4770b06757c76b14ab5eab3f1fc31564802233bc31a859c654f27a0024692b1da690e46361503c7ec337a0e19d181d4a1cfcbae5ae774e8ed2f0714e301d91139fb820d34da4adc7e469206b6879e8f01efbaa927d366a7e037bcee2c6ee28de1cd77938f4ea5accb74eaf30af580479b07dd6c63084c11da68cb1319c7936ae93336b93eb4cc105945733beb6aedb4e6ecf17bd7e562a58caa36477f0f1c709931b98ec2713f5184a7d6961ba5122a0298c5d104985581098c92eb3e198b0a528fc3352ced8ec0c6c982d4303b2d4fdfe576606fc36fb2d9bfed3fb75ab0214e8d733a23c94d5d23b169b601eae55a589edfc19adf49bd7d2bb780e7f301b5f22331a317872bda1c32fe87e8a07ba8c90054307f1b1a38456fdcc86f78faf362408d4eb7a5d31d0c366c170463b80f88a220bb69fa80e29e53a1dfa19b257a1fbc845fb9490b019c922b97c768e55381d532e679b9ea2c38beab2d86fb6abb2e4007137638dbb1eaea33a29bb8dc49deb2ddc5ba11d4c087362248581be3e16b470bb9805d13fe6f283d29832eb335f9b1fcf2abd6954d01af3a49cd57ba63350fcf95fecb6b9837e540a9ff4a9fecbea9a1d6d71c687cc929b0d67b11b62a8002bfd0aac3d9daf6e134dc4224dad75621d8c03a3ccf3ebf705af73cc6f61738c1c7291ffdcdefed14582a6a0db09e0f94895def956fb9fc23742d549124dbca15bced1ac854e64972463a5beb2857308a478c976f58cf62947cb7aac16eb37a262cbd4028ddd4914c2d3b0cb69a2bdd5fe944f624624352b261b9ba26a6e32b22d9f7c64db5467e8aff827b579791e66698d32056d7586ed5373ceec8bfcaca8ddba862f06a34e223729d2ab751b3bd517bcb2dfbd44101128a35e92e6ab6b3ecf814dabed8c0f301453c19d9ef84b037f665a0f446012d773d212b5c40ec317bbe30ccf6b3149393b6f1d16ce6bc52f0b9f76964724cd0f3d36c18e1d781b9353d30257dc833f1b41cbacbfc5952325e6f23d9f7d5b442c1f44ea3d58fc40a8ddb1774064d288432ac46612a7bdc042a3d9f0f82a25999245bd839867e4acfc9224bcf2fe7f360d2b98fd266bb26748fe6c08570495e73dc5d8554e6f67be7f4bf7479262f1e98e569adf2d7104d99f1879b80afdab7947f8be595bdd7e9b951990c0d448185f4bc6862a3a081ff820ae373d60f0b3271350ae7767c0d8ab5170ab05a4c30f48a6d5c20dd6a7188ca1ebd5bc37d28afa4beebe11624aab4f44b9f33700019e0776e298e99a23ef359d4a7620e5ba1771394e1e6d73e540f413596afaeabf5e393580e048a10afc2c1636137e9b622ebd33fc13cec3b2715fc59032f2f44165d3603966f25f52bb63397faf841f93d506a13fc75d6aeddc4993d17ef81ecf545dd80eb77"}) 00:35:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 00:35:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xaf, &(0x7f0000000140)=""/175, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x7) 00:35:50 executing program 4: setresuid(0xee01, 0x0, 0xee00) setresuid(0x0, 0x0, 0x0) 00:35:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:35:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8971, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 00:35:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000200)={'fscrypt:', @auto=[0x34, 0x65]}, &(0x7f0000000080)={0x0, "8533166f71627268bea665e24c87885853d0d679a46ad3a38ec4bd2a2ce5c48ff7d5b420be4e9e25e9482cb5079640f88003d2c61bd61e431923da81593b5fb4"}, 0x48, 0xfffffffffffffffb) 00:35:50 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)={0x14, 0xc0, 0x1}, 0x14}}, 0x0) 00:35:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:50 executing program 0: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 00:35:50 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xe0, &(0x7f0000001580)=[{&(0x7f0000001600)}, {&(0x7f0000000200)='g', 0x1, 0xfffffffffffffffe}], 0x0, &(0x7f0000001800)={[{'\x06'}, {'.,'}, {','}, {'\xc4w5\xb51\xfc,,\xae\x1e\xb5 653`\x02\x11\xff\xfc)GR\x81h\xa7\xecq\xb8:\x18\xe1_,\xcc\xa4\xa4\xceN\x10\xd3\xe0-\xd1o0\xc0j1\x1c,\x817\xf0\xb0y5x\x94\xaa\xde\x04&\x05@\x14\xfc2\xb75\xae\xb9\xad\xb2\xa2\x1f\x05\xcd\xb7\xe4\x92\xd4\x05\x1ae\x1ah\x93\xa5\x94\x16F\x19\xd4\x96\xf3\x99\r\x9b\xdbE0\x8dM\x86_\"\xcd\xb3\xef\\\xebB,J;\xf9Q\xa0B\x8e\xdf\xda\x14\x8asL\x12#[\xd3\xe0\x90\xf4\x12\xa8\x00p\x10a\xf8\xf4\xe9\xd0\t\x88\t\x0f\x01f\xe7\xb8\x88+\x84\xd1xe\x94\xfc\x85\xd7\x9e\f\xed\x82\xdb\xba\x1a\x05\xfd\xba\xb1\xae\xaf\x1a\x93S\xa9\x1c:v\x8f$\xb3\xc6\xa1\xcc\x9f7\xe5h~2&\xf2\xdd\xb9dTA \x16\xa4U\xde\x03\x1cU\xf6\xc7\x15\xcc}6\x8e\\\x93\xfbc\xfb`\xf2\xf8\xdd\xf7\x05d[\x96(\xba\xca\x89\x83\xee.w4>OAt\xac\xe1'}], [{@seclabel='seclabel'}]}) 00:35:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0) 00:35:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x6, 0xbf, &(0x7f0000000080)=""/191, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5451, 0x0) 00:35:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00008c"], 0x100}}, 0x0) 00:35:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) 00:35:50 executing program 5: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0xd, 0x1}}, 0xa0, 0x7f, &(0x7f0000000000)="a7f570a9827a7c2248ddd3b50c93d92eb8af542b41166ff751e910ff1340e987316bdb1e49ff4ceabe1203aa3e756f5eed9536dfaddf73bce99530c3481e219380dd3a084d44fadc5b73246b1e9483c893d00fb8e29ee032d810f63c84b83e83bd605b5b98db0318d7767fe8ac4be8c6e45239b1c4fd7929b6f9acb1785889fa7b410443463df813eae3a77290e9d465c52bd526f1f973a9a0965388ba1dd564"}) personality(0x40000) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000140)=0x8) r0 = semget(0x0, 0x3, 0x48) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000001680)) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000100)=0x3) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f00000001c0)={0x1420, 0x15, 0x100, 0x70bd26, 0x25dfdbfe, {0x28, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "e7749ccb1bb0b9529c085dd558b4c6efa4c366ab368e144698ddca5d534cce6a6e4ce93427bc48bf477512e12dbe424d52543e57e1b8633286e53f0da1f5f0cc3c707ef8eedfdfdd956d6523182b8df9641a02"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "3a7a9bc11916dc974174f5e18d31cc59ccc7323c77d9dd754cb5902183516270b699d72996563fc679540eb806786cfce51369e7aa14b12812fddbe39e6277e02bbbf7f01e10fe505ead14eeb970469bea766bb3194ec408f087f3594513a10bf7290ba226de82af6a1f0550cf0468e5bd"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "2f8ea24403b59ad5a632a4544b4fcc861432b3b45a16fd84091775965c5d1e1389d01049a4e455af23c3eb2da310f94773e33018baea8507225cb5224738046a61cd821e6178900d270f0b2eee6633894a8a9e1ac2ce5ae8d8c881651dafd117cc6b3d05e922eed6155fc7fb5ddb87395e13cfb0719e29c73c12c94a57cddf462033627a47c2bc5cc7fb6418da14ae7a23a9bafe9af9b6201b4341805f1a9fe9dbf9517f16e3fcbbb40d686474947a8e78e322dcb8140d2e264d7496337bbd0b9efdf2c13f8694c1c1d1bfb4d35c157e6532712cc8b80814ceb709e05037afa0155a9fe7b9a6d3c0cf1f43"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "712f56498605345f1ffbd0835b3236a78d306a61c8be7a43387b679c40fba7c7cfd1c05e3c780d1eab37faa4862113867526a7e71dd33a26e5461bc4287b155852c454d9a6e3081f7e50d97c3002b13072a7773135fee3c1c8634cad3a09bd54105da0c1f4825be02fecbc82fc1e7abc"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "777d3b1498d7fd33210a921c86a0ef7a24d62423e6e0ca598dda480b6608acb6dfda9a21c2adf25f5eab1529c524fcedcba4d382a57c32c520d48a52048ca9695d749b9f009879f875e2fafce0c025aee0a29c8492451d523e05a7ed793d55ef93ad6979fe337d911dbb2cdfc03b21bd63548617ebdfaba70be00965679a289a794f4953caf9661446e189508175eb722c8c96517fb695c05e52260251d99ae976ebf9f62466da9af9affc9be871d934ba5f57a16311b1f124b9c5abb45ec1b45938d9a32819b58571713389156057"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "3513ed8305e0451e9aec47efff488af3005bb3b21c4f78f747359ee3a0b182af4a7e26384cf65460555bc9288d8583370c4f8332ac6f7b18199566d88ff2d171f5f611bcf11adcc16af59f9ee8c251c6f7d912cd700b61c5518eb3d83c8fbc68fbb25dc12c2e338a3eb50a14dab002710bb0bb10aa73a515d2e6924226f501bdb06991c5e120ffe603aefcc33f6998e16dcc57b151d5575f17661c2ba577b4d1cb13c4b2501ea62682f77e845fb89ef1008e26cab59a07ff615148b6bd90c9b3e5994ff0403308666471a6273af5fbc613302339427403ba65e7c910c4608f29a023e539f6a2bddb6f069af68c1f0c75bf272f56562bf2736c"}]}, 0x1420}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 00:35:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40086602, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0xc0901) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @create_conn={{0x405, 0xd}, {@fixed}}}, 0x11) 00:35:50 executing program 3: r0 = gettid() tkill(r0, 0x41) 00:35:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1d, 0x0, 0x1b1, &(0x7f00000000c0)="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"}) 00:35:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000001080)={0x10, 0x0, 0x0, 0x1105a900}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000000)=""/111, &(0x7f00000000c0)=0x6f) [ 705.698383][T25433] loop2: detected capacity change from 0 to 25424 00:35:51 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xe0, &(0x7f0000001580)=[{&(0x7f0000001600)}, {&(0x7f0000000200)='g', 0x1, 0xfffffffffffffffe}], 0x0, &(0x7f0000001800)={[{'\x06'}, {'.,'}, {','}, {'\xc4w5\xb51\xfc,,\xae\x1e\xb5 653`\x02\x11\xff\xfc)GR\x81h\xa7\xecq\xb8:\x18\xe1_,\xcc\xa4\xa4\xceN\x10\xd3\xe0-\xd1o0\xc0j1\x1c,\x817\xf0\xb0y5x\x94\xaa\xde\x04&\x05@\x14\xfc2\xb75\xae\xb9\xad\xb2\xa2\x1f\x05\xcd\xb7\xe4\x92\xd4\x05\x1ae\x1ah\x93\xa5\x94\x16F\x19\xd4\x96\xf3\x99\r\x9b\xdbE0\x8dM\x86_\"\xcd\xb3\xef\\\xebB,J;\xf9Q\xa0B\x8e\xdf\xda\x14\x8asL\x12#[\xd3\xe0\x90\xf4\x12\xa8\x00p\x10a\xf8\xf4\xe9\xd0\t\x88\t\x0f\x01f\xe7\xb8\x88+\x84\xd1xe\x94\xfc\x85\xd7\x9e\f\xed\x82\xdb\xba\x1a\x05\xfd\xba\xb1\xae\xaf\x1a\x93S\xa9\x1c:v\x8f$\xb3\xc6\xa1\xcc\x9f7\xe5h~2&\xf2\xdd\xb9dTA \x16\xa4U\xde\x03\x1cU\xf6\xc7\x15\xcc}6\x8e\\\x93\xfbc\xfb`\xf2\xf8\xdd\xf7\x05d[\x96(\xba\xca\x89\x83\xee.w4>OAt\xac\xe1'}], [{@seclabel='seclabel'}]}) 00:35:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, 0x0) 00:35:51 executing program 5: prctl$PR_CAPBSET_DROP(0x18, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x9}) 00:35:51 executing program 3: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xd) 00:35:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xa, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 00:35:51 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:35:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000650000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2, @empty, @ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100042}) [ 706.568666][T25477] loop2: detected capacity change from 0 to 25424 00:35:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x12, 0x0, &(0x7f0000000040)) 00:35:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:52 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xe0, &(0x7f0000001580)=[{&(0x7f0000001600)}, {&(0x7f0000000200)='g', 0x1, 0xfffffffffffffffe}], 0x0, &(0x7f0000001800)={[{'\x06'}, {'.,'}, {','}, {'\xc4w5\xb51\xfc,,\xae\x1e\xb5 653`\x02\x11\xff\xfc)GR\x81h\xa7\xecq\xb8:\x18\xe1_,\xcc\xa4\xa4\xceN\x10\xd3\xe0-\xd1o0\xc0j1\x1c,\x817\xf0\xb0y5x\x94\xaa\xde\x04&\x05@\x14\xfc2\xb75\xae\xb9\xad\xb2\xa2\x1f\x05\xcd\xb7\xe4\x92\xd4\x05\x1ae\x1ah\x93\xa5\x94\x16F\x19\xd4\x96\xf3\x99\r\x9b\xdbE0\x8dM\x86_\"\xcd\xb3\xef\\\xebB,J;\xf9Q\xa0B\x8e\xdf\xda\x14\x8asL\x12#[\xd3\xe0\x90\xf4\x12\xa8\x00p\x10a\xf8\xf4\xe9\xd0\t\x88\t\x0f\x01f\xe7\xb8\x88+\x84\xd1xe\x94\xfc\x85\xd7\x9e\f\xed\x82\xdb\xba\x1a\x05\xfd\xba\xb1\xae\xaf\x1a\x93S\xa9\x1c:v\x8f$\xb3\xc6\xa1\xcc\x9f7\xe5h~2&\xf2\xdd\xb9dTA \x16\xa4U\xde\x03\x1cU\xf6\xc7\x15\xcc}6\x8e\\\x93\xfbc\xfb`\xf2\xf8\xdd\xf7\x05d[\x96(\xba\xca\x89\x83\xee.w4>OAt\xac\xe1'}], [{@seclabel='seclabel'}]}) 00:35:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xfa, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x0, 0x1800}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000047"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 707.100058][T25509] loop2: detected capacity change from 0 to 264192 00:35:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:52 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xf, &(0x7f0000000280)={0xfffffec6}, 0x8) [ 707.237032][T25509] nfs: Unknown parameter '' 00:35:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:53 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xe0, &(0x7f0000001580)=[{&(0x7f0000001600)}, {&(0x7f0000000200)='g', 0x1, 0xfffffffffffffffe}], 0x0, &(0x7f0000001800)={[{'\x06'}, {'.,'}, {','}, {'\xc4w5\xb51\xfc,,\xae\x1e\xb5 653`\x02\x11\xff\xfc)GR\x81h\xa7\xecq\xb8:\x18\xe1_,\xcc\xa4\xa4\xceN\x10\xd3\xe0-\xd1o0\xc0j1\x1c,\x817\xf0\xb0y5x\x94\xaa\xde\x04&\x05@\x14\xfc2\xb75\xae\xb9\xad\xb2\xa2\x1f\x05\xcd\xb7\xe4\x92\xd4\x05\x1ae\x1ah\x93\xa5\x94\x16F\x19\xd4\x96\xf3\x99\r\x9b\xdbE0\x8dM\x86_\"\xcd\xb3\xef\\\xebB,J;\xf9Q\xa0B\x8e\xdf\xda\x14\x8asL\x12#[\xd3\xe0\x90\xf4\x12\xa8\x00p\x10a\xf8\xf4\xe9\xd0\t\x88\t\x0f\x01f\xe7\xb8\x88+\x84\xd1xe\x94\xfc\x85\xd7\x9e\f\xed\x82\xdb\xba\x1a\x05\xfd\xba\xb1\xae\xaf\x1a\x93S\xa9\x1c:v\x8f$\xb3\xc6\xa1\xcc\x9f7\xe5h~2&\xf2\xdd\xb9dTA \x16\xa4U\xde\x03\x1cU\xf6\xc7\x15\xcc}6\x8e\\\x93\xfbc\xfb`\xf2\xf8\xdd\xf7\x05d[\x96(\xba\xca\x89\x83\xee.w4>OAt\xac\xe1'}], [{@seclabel='seclabel'}]}) 00:35:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000140)={0x25, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 00:35:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1d, &(0x7f0000000180)=""/11, &(0x7f00000001c0)=0xb) 00:35:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000ffffff9c0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:53 executing program 3: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00'}) 00:35:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000009fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040037) 00:35:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x24, 0x24, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:35:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 00:35:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x0, 0x9, 0x6, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) [ 708.385139][T25531] loop2: detected capacity change from 0 to 25424 00:35:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0x0, 0x33fe0}}, 0x0) 00:35:54 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000080)='./file0\x00', r1) 00:35:54 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) 00:35:54 executing program 1: r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:54 executing program 2: prctl$PR_CAPBSET_DROP(0x8, 0xda) [ 708.808183][T25565] autofs4:pid:25565:autofs_fill_super: called with bogus options 00:35:54 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x7, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x6, 0x0, &(0x7f0000000000)) 00:35:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 00:35:54 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 00:35:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ethernet={0x0, @remote}, @hci, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bond_slave_0\x00'}) 00:35:54 executing program 1: setfsuid(0xee00) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x42, 0x0) 00:35:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f0000000040)={@private2, @empty, @ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100042}) 00:35:54 executing program 3: r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000013c0)='r\x88R[+\t\xdd\x95CNF\xec\xad\xb4,b\xa0\xa01\x1a\x1a\xb8\xfc\xcf\xc9\xc7\xbe\xbb<\xeb\xda\xea\xb1l\xb9 \r\xd3\f\xa9\xf6\x1b:\tik\x02hW\x17\x8e,K\xda\xd9\x80\x1f.\x8eD\xba*\xed\x98\xe8\xc5d\x9c\xbb\xe2Df\n.\xce\x99a\xf2\xc2X\x01\xd57E\xcc\x91\xc4*\xfe\x8d\xb7\xc2\fh\x17\xa8\x92;\x8c^,\x99\xfc\xf7\xf1\xeeTPb\xd7a\xa5\xea\x06$\xac.k\xce\x84\xfe\xe2\xe1r\x18|\x91\xd0Koq>\xdd\xc4\xbc\xc2\x86\xa8\xc5\x93\x0f\a0\x19\xd0\xbfaW\xa1\x94\xd2\x95\xae\xdd\xf5\xe2\xc0F\xd4\x84\xbb\x12p\xf4\x13\xb7\x06\aB\xee\xe7v\"}2b}\xdf\"\xc3\x1f\x15\xc4v\x95e\'\xc0x\x87\xe2\x17\x86\x9a\xa6-\xcf\xc8\xd3\"\xeb>\xe8\xec\xec\xc1\x99\xc5\x17EG\xc1 \x17bQ\xef\aP<\xe0\x97md\xc5[Z\xb8\x06\x92\xe5\a\x8a\xc6>\x9f\x97B\x8d\x06I\x800\xa2\xdd6S\b\x7f\x83\xb3\xd3\x94a\xe3\x0e\xe8:\xea#', &(0x7f0000001140)="89", 0x1) 00:35:54 executing program 0: bpf$OBJ_GET_PROG(0x6, &(0x7f0000003540)={&(0x7f0000000180)='./file1\x00', 0x4000}, 0x10) 00:35:54 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0x9, &(0x7f0000000280)={0xfffffec6}, 0x8) 00:35:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 5: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'netpci0\x00'}) 00:35:55 executing program 2: select(0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)={0x0, 0xea60}) 00:35:55 executing program 0: prctl$PR_CAPBSET_DROP(0x18, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) 00:35:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000ffffff9c0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x56) gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_NEWNSID={0x34, 0x58, 0x1, 0x0, 0x0, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xf, &(0x7f0000000280)={0xfffffec6}, 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480)='freezer.state\x00', 0x2, 0x0) 00:35:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x11, 0x0, &(0x7f0000000040)) 00:35:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0xff00}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0xfffffec6}, 0x8) [ 709.959860][T25612] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)=0xfffffff0) [ 710.047919][T25615] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:55 executing program 1: bpf$OBJ_GET_PROG(0x8, &(0x7f0000003540)={0x0, 0x4000}, 0x10) 00:35:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x3, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000050000000000000000000000650000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:55 executing program 2: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x10) 00:35:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1e, 0x0, &(0x7f0000000040)) 00:35:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0xa, &(0x7f0000000bc0)=[{&(0x7f0000000480)="c7aec54c37b49c70f8b21f8ed7a4b26f536d41d15a29cd0b61a5a255772056fc5c72dfb430fc45531194e502f071c3a5714baf917ae2d0e67d849d3f71fd781383e025b8f5364aad59fd5bea469fc2b76f2c81d025e1acbf292f6391ea62e90a091e0228797df649ecd2838d821e24a3f72deb4fbc48bc1492bb1b969561a563148921cd97db6a40d370365a27eb76f5fc1544945ab4f5", 0x97, 0x1}, {&(0x7f0000000540)="9cb0ef04a330b5cc73002981a22d00cc3a854d8408a75ae07a3ec57f30019e8a517db00467b53688896d34badfb6382d7d47fa33914820c6e2939e727c60fbce63be9e3efdd3306b6200f703ca23e479e5a042fa2131406c55a2377471", 0x5d, 0x100}, {&(0x7f00000005c0)="3f2e62f3a12aba8169466ef9aa929aaca1fc19a3b6484844dd41ba27f51d30cd00f944d0386254d8f6d7c79939fa751ffb4be4ea516418d2e017c1a48aa5fbc61a5c13bb1cfa89ba5bd824b348789fd7cfe1cf8ba2650cc620971c3d8020222e56a2099008e35b695ba5a0cf352b271c5ae1762920bcd171f81b611e03d7941f5693f552d23cf65f456d446a7d9bd7d931d59081643f49d41ea7512b761dcfc3d4d69a9200438506487938154fb2fae9f5f6fb67f4de778c40ef7c40b9", 0xbd, 0x266}, {&(0x7f0000000680)="2eb5612c42725dedfdeeb7c11fa554f9254c3110e3c54bef26c2ef218ff568157dd247eb865d5781f525ccd8182aae0c843109dff4f9fd24bbb39cce9da0f3f71dd21dfe4e27978608827126cd9bd0f33c8641cc56000c711bf99cad98bd1a05c9714e63d1271bc67ab5277d6978a3e5442a0583c5a055206c01e5a75190b4ee76b7f46f62f1ddaa7889f08c8def0d038a522386eaff802c3c48c893ee1a790abe3573045e0fda4aef39b847abe57f04b166b7187f8366276d6f6b755c2b102d9417696610b07eba6405d317929244396f72c9", 0xd3, 0x7}, {&(0x7f0000000780)="8bd3eb6caadf0b8c8dd3d2fc9cff7b82fd06fd23eba66f1152983b3ec930f132e2c97ef577fc9c30371d679075f5be376f0e0cf392927892c9ea4e100a38573dc127f77acd406f1b484655781f00e4b46c6576b8dc7329da6ef7db8b008836c298cd019acddb0d516c8f2c7902a47f9b2edb931dd0f595a7239aae528e4cbc900cdf5a877b87", 0x86, 0x1}, {&(0x7f0000000840)="5491e1db304b0b3a7b0098d40c010f25eef7e51827746c42c7cabd10a5c6c0c18661d95787dec602c5ca76215d50efc19be9a6ece42eb7a98f6cd1c11d307c992cce39616b4a3662bee7fff09bf97b40a74be97e88800d3a57fa892e50527af88623b85455c6c043e30dacd80df1b5ab45d4c0198f348d1cfe9548967c97e2c24aa20355167551787000a3a8cb54f31eca55", 0x92, 0x2}, {&(0x7f0000000900)="0215b121ce6766e68ad2a90be93ac6e8f5b79155203f24944c512cc2e048eaf1d8e6d63467e9e8e3692dce428b37c3a15e176c73bc7347e2d5ba4eff65ba3ee2bca31384468d86e97e2dbdffc1df12591cfdcdad48", 0x55, 0x3e3e}, {&(0x7f0000000980)="abf6d4660d0b408c3a73512b85ae80a1d35c7be74d127ab81781036b26b420b74d47845a6a59911a13c3bd30522379c7f9d49c059fc3e57c39fea8f428d2bd2098e8756f84e875c91e5bccb97ffeabe616ad9d181d3dedb5256be6fa29653c2c2f3563c2c21542ba5d7266e70024f37e82000cf3f0a89b6588085fa6e67bafba9a011b3affce6023cec54ca67f4190a751b8ce817c170ffe926a974431ef5b37a673a706db2f3d0e040e6537748ee430bbba2e31a4348fd356f5480536fa675b005e1da1059ff9899a1f69bf5425825964a2353f56dabc0a6af400baae3617cf2eecea3e6f5972c365d2c04b235161adf40e3b4fc310be771c60f63bf438db", 0xff}, {&(0x7f0000000a80)="cf3a5bf1e0997e6a57689275e02277184498cafc9b48a652eef0bc1ba3d05f6d135f6c84e67a2402274a91bc3f5fe56ae2c7ddac90bfcb1fff86186564c97ea168641868d93c12f9c853c7bb8323c2123432592a3b2640fb85d6501a3664a2af927f96019b310563e03cc5034265d1e70339a0759adb5442ebbe3c93a5d3b4b22efc3edf903e6ce9407931bc5f6b29c16a4acabba97a5d28d1fd7812d6fffd1644de37f4d6e17b93ae4337970ea1821bd689f78396e644afe6dfbae90b80", 0xbe, 0x8}, {&(0x7f0000000b40)="0fc67add7507d86c0e57b1e4cd49b3af9e4c712318a1fa1fcc2218255e0dc00b760b27a71772d6b83f328e23c7e1f061cf2ca2a663c2a52f09b629f6484ac56be076ba21d1651ba83b7462", 0x4b, 0xffffffff}], 0x482, &(0x7f0000000cc0)={[{@data_journal='data=journal'}, {@journal_async_commit='journal_async_commit'}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nouid32='nouid32'}, {@acl='acl'}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7c}}, {@barrier_val={'barrier', 0x3d, 0xef}}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_appraise='dont_appraise'}]}) clone(0x30a200, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000300)="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") 00:35:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x6, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="9edaac354150a4b6d743a27a724a242db49716ae7e5b29878b67d7d762f4b1c9aacdfef43e0562b778604d60b900b17d41f4125238d45e065bd08d02cda42290cfe9ca85ac4a71da4ed6b1cdab1997db0ecfad01b93f5620b99620"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x400c044) 00:35:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000540)="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", 0x1000}], 0x0, 0x0) 00:35:56 executing program 2: prctl$PR_CAPBSET_DROP(0x17, 0x2500) 00:35:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 0: setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 00:35:56 executing program 4: waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0) [ 710.785927][T25648] loop3: detected capacity change from 0 to 8 00:35:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0) [ 710.897627][T25648] loop3: detected capacity change from 0 to 8 00:35:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff00000000010000001827000048c357ac6f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ethernet={0x6, @remote}, @hci={0x1f, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bond_slave_0\x00', 0x3, 0xdf52, 0xf9be}) 00:35:56 executing program 1: r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='autofs\x00', &(0x7f00000000c0)=')(\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9c}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x22, 0x0, &(0x7f0000000000)=0xfffffff0) [ 711.178575][T25673] autofs4:pid:25673:autofs_fill_super: called with bogus options 00:35:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000ffffff9c0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ethernet={0x0, @remote}, @hci, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bond_slave_0\x00'}) [ 711.227160][T25679] autofs4:pid:25679:autofs_fill_super: called with bogus options 00:35:56 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 00:35:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2, @empty, @private0={0xfc, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100042}) 00:35:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:56 executing program 4: prctl$PR_CAPBSET_DROP(0x1c, 0x2500) 00:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x5031, 0xffffffffffffffff, 0x0) 00:35:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xc, 0x0, &(0x7f0000000040)) 00:35:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x7}, 0x40) 00:35:57 executing program 3: bpf$OBJ_GET_PROG(0x12, &(0x7f0000003540)={0x0, 0x4000}, 0x10) 00:35:57 executing program 4: select(0x40, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe, 0x0) 00:35:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0xa5, 0x0, 0x6, 0x0, 0x1}, 0x40) 00:35:57 executing program 0: bpf$OBJ_GET_PROG(0x14, &(0x7f0000003540)={0x0, 0x4000}, 0x10) 00:35:57 executing program 4: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 00:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85100000f9ffffff07e9080002f0ff00d4a10600f0ffffffd3545000fc"], &(0x7f0000000000)='GPL\x00', 0x4, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:57 executing program 3: bpf$OBJ_GET_PROG(0x9, &(0x7f0000003540)={0x0, 0x11}, 0x10) 00:35:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:57 executing program 0: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:57 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000660001"], 0x2c}}, 0x0) 00:35:57 executing program 1: socketpair(0xa, 0x3, 0x87, &(0x7f0000000140)) 00:35:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:57 executing program 3: setfsuid(0xee00) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x2, 0x0) 00:35:57 executing program 4: socketpair(0xa, 0x2, 0x88, &(0x7f0000000140)) [ 712.175924][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000000)=0xfffffff0) [ 712.218451][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x6, 0x25, &(0x7f00000000c0)={0x67}, 0x8) 00:35:57 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 00:35:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000040)) 00:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 712.514959][T25748] TCP: TCP_TX_DELAY enabled 00:35:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x8}, 0xc, &(0x7f0000000100)={0x0, 0x24}}, 0x0) 00:35:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:58 executing program 1: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:58 executing program 5: shmget$private(0x0, 0x4000, 0x7297a492fd8d1d19, &(0x7f0000ffb000/0x4000)=nil) 00:35:58 executing program 4: r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='autofs\x00', &(0x7f00000000c0)=')(\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=')(\x00', &(0x7f0000000100)='/@{\'-\x00', 0x0) 00:35:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x7}, 0x0) 00:35:58 executing program 2: bpf$OBJ_GET_PROG(0x9, &(0x7f0000003540)={&(0x7f0000000180)='./file1\x00'}, 0x10) 00:35:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_NEWNSID={0x14, 0x58, 0x1}, 0x14}}, 0x0) 00:35:58 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10}, 0x25}}, 0x0) 00:35:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:58 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) 00:35:58 executing program 2: r0 = socket(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x6, 0x0, 0x20000290) 00:35:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 00:35:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x11, 0x0, &(0x7f0000000000)=0xfffffff0) 00:35:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 00:35:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 00:35:59 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4046132, 0xffffffffffffffff, 0x8000000) 00:35:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:35:59 executing program 0: bpf$OBJ_GET_PROG(0x6, &(0x7f0000003540)={&(0x7f0000000180)='./file1\x00'}, 0x10) 00:35:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 00:35:59 executing program 5: bpf$OBJ_GET_PROG(0x2, &(0x7f0000003540)={&(0x7f0000000180)='./file1\x00'}, 0x10) 00:35:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010002) 00:35:59 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "d485ecf8c8"}, 0x10) 00:35:59 executing program 3: r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f00000000c0)='--./.\xb8i]({\x00', &(0x7f0000000100), 0x0) 00:35:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x11d}, 0x1c}}, 0x0) 00:35:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:59 executing program 3: socketpair(0xa, 0x3, 0x3a, &(0x7f0000000140)) 00:35:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 00:35:59 executing program 2: bpf$OBJ_GET_PROG(0x9, &(0x7f0000003540)={0x0, 0x4000}, 0x10) 00:35:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x18, 0x0, &(0x7f0000000040)) 00:35:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:00 executing program 1: r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:00 executing program 2: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 00:36:00 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0x2, &(0x7f0000000040)={0x4d}, 0x63) 00:36:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x11d, 0x0, 0x0, {}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "4c193202"}]}, 0x24}}, 0x0) 00:36:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000003f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 3: r0 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x20000046, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="9edaac354150a4b6d743a27a724a242db49716ae7e5b29878b67d7d762f4b1c9aacdfef43e0562b778604d60b900b17d41f4125238d45e065bd08d02cda42290cfe9ca85ac4a71da4ed6b1cdab1997db0ecfad01b93f5620b99620"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x400c044) 00:36:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x7, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x4e682, 0x0) 00:36:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x56) gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_NEWNSID={0x54, 0x58, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xf, &(0x7f0000000280), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) 00:36:00 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 00:36:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x22, 0x0, &(0x7f0000000040)) 00:36:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000000040)) [ 715.230467][T25865] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 00:36:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 715.271105][T25868] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 00:36:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000610000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) 00:36:01 executing program 0: socketpair(0xa, 0x2, 0x3a, &(0x7f0000000140)) 00:36:01 executing program 2: r0 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='-+\\*\x00', &(0x7f00000001c0)="e5", 0x1) 00:36:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0xf}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x11d, 0x0, 0x0, {}, [@RTA_METRICS={0x5, 0x8, 0x0, 0x1, 'L'}]}, 0x24}}, 0x0) 00:36:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)) 00:36:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 00:36:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 00:36:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newroute={0x20, 0x18, 0x11d, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 00:36:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x0, 0x9, 0x6, 0xaa, 0x1}, 0x40) 00:36:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:01 executing program 5: pipe2(&(0x7f0000002300), 0x0) 00:36:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000040)) 00:36:01 executing program 4: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 00:36:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x0, 0x9, 0x6, 0x0, 0x1}, 0x40) 00:36:01 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000003540)={&(0x7f0000000240)='./file0/file0\x00'}, 0x10) 00:36:01 executing program 3: bpf$OBJ_GET_PROG(0x11, &(0x7f0000003540)={&(0x7f0000000180)='./file1\x00'}, 0x10) 00:36:01 executing program 5: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 00:36:01 executing program 4: r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 00:36:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) 00:36:01 executing program 2: r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:02 executing program 3: r0 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='aH6ir\xd2ut\xe3&\xf64\x92\xaaL,\xf5\xbb\xc9:\xc3x\xa6\xfa\x8f\x1f\x88\x83\xd3\xc4\xaa\r\x96B\x10\xb1\xfa\xd5\xcd\x87\xbf\'A\x8aO\x01\xbe!\xdb\x04\xf9\xa8\x15sa\x1f\x99\xd1\b\xbd`\xb4\xf9u=\x1c\xfe]=UN\xf2G\x19\x82C4\xd1\xb6\xa8\x1bG4[\x94:\xdemf\xf9bNY\xdf\x01)*\xbf\xda\xa3\x88\xc3\xbe\xa6\x9be\xc8n1E\xb3\xb5\x05\xc4\xa9\xf7\x0f\xe5\xf22\x84\x83o\x04\xad\xc7\x01\x1f\xfeb\x96\xb0\xe7\xffx91.+\xcf\xe9|u=Oj]\xb8\x1c>\xaf\xf6E\x19\xec\x97\x84\xae\x83\xb2=\x83\x9bC#J\xf9\xf9=\xb5_\x89\xc6\xa8\xe9\xc3\"Kf\x9a\xa4\xac\xd1\x17\xae\xfa\x8a\xd6\xd5\xfd{>\xffK\x11ju\x9d.\xab\xcf\x88\x89`\x85\x8c\xd4\xa5C\xc3\xee\xd6\x1f\xb7(\xec\xcf\xca\xc8\xfe>\x1d\xa8\xe2sv\x10\x9a\xe4|Q\xa4\xb3\x04\xa6-\n\xd8\xb3\x18\\2\x99', &(0x7f00000000c0)=')\x83\xee', 0x0) 00:36:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 5: r0 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000ffffff9f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x10000000) 00:36:02 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) 00:36:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:02 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0x2, &(0x7f0000000280)={0xfffffec6}, 0x8) 00:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 1: unlinkat(0xffffffffffffff9c, 0x0, 0x851b44c8cf7aa40a) 00:36:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf4240, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 5: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) prctl$PR_CAPBSET_DROP(0x18, 0x0) 00:36:02 executing program 4: setfsuid(0xee00) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) 00:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 1: delete_module(&(0x7f00000002c0)='\x97d\xaf?\xbc_\r9fc\vy\xdb\xba\xdeK\xf5\xcf6seg\xddf\x866\xa0\x0e\x021pu\x113}\xf4\xb2\xf4\xe1jxx~%\xad\xb8z\x15M:\x1f\xbdKw\x99/\x95\xb70\xe9k\xacs\xa3\x11\x98\xdc\xdf=\x7fLG\x1e^g\xb0\xbe\v\x88$\xcfk=\xab\x8c\xc7\xec\x10\xbd\xe0 \xb5\xf4\xf5\xcd\xbd\xe5J\x8a\xbdB\xd7\xdfi\a\xd3 \xcd\xfaV\xc8\xc4`\x91\xeb\x8c-\x8c\xf5U?\x8f\r\x16q\x89}(\xdc\x05\xd1\x05\xcd0\xe3^\xb9\xbf\xd0\xba\xdd!\xd8I~X2\xc8E>\xc0.\xb4\xdb^\x1c\xfd\xdf$\xa49\xdc\x149\xd2\xd4X\'\xa4\x1b\xf5\x19\x18\x9d\x99\x16\x98\xe6:\xce7\x82\x1f\x00\x9cT\\\xde\xdf\x05\xf3\xb4i[A\xbf\xc4v\xc5\xf8\xccH\x02\x96Zu\xba\x16$\x8c\xb7o\xa6\xeb\xf6E7$)\xec', 0x0) 00:36:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x25, 0x0, &(0x7f0000000040)) 00:36:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x6100, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) 00:36:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 3: bpf$OBJ_GET_PROG(0x6, &(0x7f0000003540)={0x0, 0x0, 0x2}, 0x10) 00:36:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 4: socketpair(0xa, 0x3, 0x3, &(0x7f0000004180)) 00:36:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 00:36:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) 00:36:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1e, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:03 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5460, 0x0) 00:36:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000000)=0xfffffffffffffd80) 00:36:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f05b9409b52ffff65580200be04020c060560060b02430008000000000000c8388927a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f50df58ba86c902000f1d012e02000280160012000a000000000000000000008d3abada0e34eff5631889110000080000000eceb6b362bb944cf2e70100aba418", 0x90, 0x0, 0x0, 0x0) 00:36:03 executing program 1: socketpair(0xa, 0x2, 0x0, &(0x7f0000000140)) 00:36:03 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, 0xffffffffffffffff, 0x0) 00:36:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x1d, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000800000000000000000000000051000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 718.180342][T26005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:36:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x17, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000040)) 00:36:03 executing program 2: r0 = socket(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000290) 00:36:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000440)='GPL\x00', 0x3, 0xff, &(0x7f0000000480)=""/255, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff00000000010000001827000048c357ac6f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast2}, @ethernet={0x6, @remote}, @hci={0x1f, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='bond_slave_0\x00', 0x3, 0xdf52, 0xf9be}) 00:36:04 executing program 4: socketpair(0x2, 0x1, 0x0, &(0x7f0000000140)) 00:36:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0xa}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x25, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:04 executing program 2: r0 = fsopen(&(0x7f0000000000)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff010000001412"], 0x30}}, 0x0) 00:36:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x74}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010002) 00:36:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) [ 718.857403][T26036] new mount options do not match the existing superblock, will be ignored 00:36:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x25, 0x0, &(0x7f0000000000)=0xfffffff0) [ 718.931107][T26039] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 718.962349][T26041] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:36:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000040)) 00:36:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000000040)) 00:36:04 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x1061) 00:36:04 executing program 5: bpf$OBJ_GET_PROG(0x9, &(0x7f0000003540)={0x0, 0x11}, 0x70) 00:36:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "08870eeec4b2416717f116defc004a20e24a96f15a6d5cc14d07f7e4aa1c140b344822cf9416857773caf29ecace94ff8ca90b016c61cfce37471297fbefc4bc", "6cdd2095e00e19e2724499340622dac82527af057a0627dd936663c7d1a78dfc7992a9c9581218ce726c68a55d3aa96588da45550ae8c55247191197aec018ae", "2626417853adc51700485fcd3c7ed9a133005ce0031d72f7d479b65200dfe44d"}) 00:36:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x25, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:04 executing program 2: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)=':!%/\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x2, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:04 executing program 1: r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 00:36:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000003c0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x25, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:05 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 00:36:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="9000000018001f68b9409b52ffff65580200be04020c060560060b02430008000000000000c8388927a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f50df58ba86c902000f1d012e02000280160012000a000000000000000000008d3abada0e34eff5631889110000080000000eceb6b362bb944cf2e70100aba418", 0x90, 0x0, 0x0, 0x0) 00:36:05 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x40305828, 0x0) 00:36:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 0: r0 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 719.807980][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:36:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x18, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) 00:36:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 00:36:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newroute={0x2c, 0x18, 0x11d, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "4c193202"}]}, 0x2c}}, 0x0) 00:36:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:05 executing program 4: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r1, 0x0) 00:36:05 executing program 5: r0 = fsopen(&(0x7f0000000040)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000080)='\'@\xb4,-\x00', 0x0) 00:36:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000000f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0xd83f37f7db059809}, 0x24}}, 0x0) 00:36:06 executing program 5: r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f0000000040)='--./.\xf0\x87]({\x00\x95\x9eB\xc5\x87\xc9\x98y\x17N\x7f\xcf\f\xeb\x1a\x82-4H6%\xc7:1\xb8.\x00\xca\xdf\x8f|5\x7f\xc785v\b\x00\x00J\xbaW\x19E\xc8\xa2:\x89\xc3\xa1T\xaa\x8a\xd2\xa0\xaa\xb6C\xbe+\xb2P\x00'/88, &(0x7f00000000c0)="17", 0x1) 00:36:06 executing program 4: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:36:06 executing program 1: waitid(0x0, 0x0, 0x0, 0xf2c095a10470791b, 0x0) 00:36:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)=0xfffffff0) 00:36:06 executing program 0: r0 = fsopen(&(0x7f0000000080)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x4, &(0x7f00000000c0)='--./.\xb8i]({\x00', &(0x7f0000000100), 0x0) 00:36:06 executing program 5: init_module(&(0x7f0000000040)='(\x96$*|#(n%[\x00', 0xfffd0, &(0x7f0000000540)='\x97d\xaf?\xbc_\r9fc\vy\xdb\xba\xdeK\xf5\xcf6seg\xdd1pu\x113}\xf4\xb3\r\xe1jxx~%\xad\xb8z\x15M:\x1f\xbdKw\x99/\x95\xb70\xe9k\xacs\xa3\x11\x98\xdc\xdf=\x7fLG\x1e^g\xb0\xbe\v\x88$\xcfk=\xab\x8c\xc7\xec\x10\xbd\xe0 \xb5\xf4\xf5\xcd\xbd\xe5J\x8a\xbdB\xd7\xdfi\a\xd3 \xcd\xfaV\xc8\xc4`\x91\xeb\x8c-\x8c\xf5U?\x8f\r\x16O\x89}(\xdc\x05\xd1\x05\xcd0\xe3^\xb9\xbf\xd0\xba\xdd!\xd8I~X2\xc8E>\xc0.\xb4\xdb^\x1c\xfd\xdf$\xd4X\'\xa4\x1b\xf5\x19\x18\x9d\x99\x16\x98\xe6:\xce7\x82\x1f\x00\x9cT\\\xde\xdf\x05\xf3\xb4i[A\xbf\xc4\xdb\xc5\xf8\xd4\x00\x02\x96Zu\xba\x16$\x8c\xb7o\xa6\xeb\xf6E7$)\xecG\xe1!`\x10\x02$\xf6&\xd7\x04\x12\x87f*\x9el\xcc~\x8c?pXi\xa5=\x97\xa3\x1cX\xc2t\x06\x90\x16E+<\xdas%\x9d\xe5h%0\xd8\x90\tE\x01\xe7g\xe9\x84\xce\xdew\v\xcfK\xb90\x05,\xaeU\xb6\xdd\bR\xdf\x98~\xdd\xf9\xfc\xa4[\x9b|\x19w\xd5=&Vu\x0f\xbd\x13g]\x91\xa9u\x1b\x8eJ\xb5\xc32\x80p\x03\xab|\xbc\xb0\xf9\xdah\xed\xb4\x14\xb93\xc0\x17\xac+M\x9d_F\x05r|dA\x00\x00\x00\x00\x00\x00\xc9\x0fr\xce\'\xcb\xadU\x00\v\xc1\xc2\x13\x94\xeb%w\xeae\xc4\t\x88\xeb1\xfe\x8e\xe6\x87V\x98RbQ\x97\xd7\x9e\n\x8d\x1aZ\xc5\x06N\xda~\xd2\xf9\xf4\x1b\xfdfa\xe6\x17\xeboU\xb2\x1f%\x0e\x18\xf0\xaa\x96x') 00:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:06 executing program 1: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x2) 00:36:06 executing program 3: socketpair(0x25, 0x0, 0x0, &(0x7f0000000700)) 00:36:06 executing program 2: perf_event_open$cgroup(&(0x7f00000004c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:36:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) [ 720.962925][T26139] Module has invalid ELF structures 00:36:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 721.003012][T26139] Module has invalid ELF structures 00:36:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x440, 0x1}, 0x40) 00:36:06 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) pipe2$9p(&(0x7f0000000480), 0x4000) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000004c0)={0xb, 0x77, 0x1, 0x7}, 0xb) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x0) 00:36:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40, 0x0, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 00:36:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x1, &(0x7f0000000300)=@raw=[@func], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001500)={&(0x7f0000001400), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 00:36:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x5a}) 00:36:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 00:36:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:36:07 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:36:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 00:36:07 executing program 0: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x5a}) 00:36:07 executing program 4: socketpair(0x26, 0x2, 0x77, &(0x7f0000013740)) [ 721.688114][T26177] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0xa, 0x0, 0x0, 0x0, 'syz1\x00'}) 00:36:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x5a}) 00:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:36:07 executing program 2: socketpair(0x10, 0x3, 0x8, &(0x7f00000001c0)) 00:36:07 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) 00:36:07 executing program 5: getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) 00:36:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x6, &(0x7f0000000840)=@raw=[@call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, @btf_id, @map], &(0x7f0000000880)='GPL\x00', 0x2, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 722.241531][T26195] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:07 executing program 0: socketpair(0x0, 0x0, 0x77, &(0x7f0000013740)) 00:36:07 executing program 4: pipe2$9p(&(0x7f0000000480), 0x0) 00:36:07 executing program 5: fork() accept$netrom(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2eff, &(0x7f0000000080)={0x0, 0x86eb, 0x4}) 00:36:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4}, 0xc) 00:36:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x5a}) 00:36:08 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@bcast) [ 722.545175][T26212] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4}, 0xc) 00:36:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x6) 00:36:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @private}}}, 0xa0) 00:36:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 00:36:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x4c}}, 0x0) socket(0x10, 0x3, 0x0) set_mempolicy(0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, 0x0, &(0x7f00000002c0)={'syz', 0x1}, 0xfffffffffffffff9) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x100) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:36:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in, @in={0x2, 0x0, @broadcast}}}, 0x118) 00:36:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000300)=@raw=[@func, @map_val, @map_val], &(0x7f0000000340)='GPL\x00', 0xa9, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 723.182014][T26235] xt_TCPMSS: Only works on TCP SYN packets 00:36:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 00:36:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 00:36:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x6100, &(0x7f0000000040)=@framed={{}, [@exit]}, &(0x7f0000000380)='GPL\x00', 0x4, 0xf9, &(0x7f00000003c0)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:08 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000140)) 00:36:08 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000140)) 00:36:09 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:36:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a00)={'vcan0\x00'}) 00:36:09 executing program 2: pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f00000004c0)={0xb}, 0xb) 00:36:09 executing program 4: socketpair(0x0, 0x8000d, 0x0, &(0x7f0000000140)) 00:36:09 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000013180)) 00:36:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x54, 0x1}, 0x40) 00:36:09 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000006340)) 00:36:09 executing program 1: syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) geteuid() 00:36:09 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:36:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 00:36:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 00:36:09 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x640, 0x40, 0x0, 0x3d8, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x700]}) 00:36:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe}, 0x40) 00:36:09 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f0000001a40)) 00:36:09 executing program 2: accept$netrom(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000001a40)) 00:36:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, r0) 00:36:09 executing program 1: socketpair(0x26, 0x2, 0x0, &(0x7f0000013740)) 00:36:09 executing program 1: rt_sigsuspend(&(0x7f00000000c0), 0x8) 00:36:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x102) 00:36:10 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003200)={0x0, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2, @dev={[], 0x1a}}, @generic={0x0, "34338a9ef41ce262881b961dbdfd"}, @phonet}) [ 724.459832][T26297] can: request_module (can-proto-0) failed. [ 724.463363][T26295] can: request_module (can-proto-0) failed. 00:36:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) [ 724.513418][T26303] can: request_module (can-proto-0) failed. [ 724.526004][T26295] can: request_module (can-proto-0) failed. [ 724.859127][T26317] tipc: Enabling of bearer rejected, already enabled [ 724.902873][T26318] tipc: Enabling of bearer rejected, already enabled 00:36:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0x6a4e391b, 0x40012500, 0x0, 0xffffffffffffff49) pkey_mprotect(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4, 0xffffffffffffffff) 00:36:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getpeername(r0, 0x0, 0x0) 00:36:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, r1, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00'], 0x29}) 00:36:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:10 executing program 0: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x81, &(0x7f0000006340)) [ 725.108104][T26327] tipc: Enabling of bearer rejected, already enabled 00:36:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffff9, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x44}}, 0x0) [ 725.416579][T26339] tipc: Enabling of bearer rejected, already enabled 00:36:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) 00:36:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x20}}, 0x0) 00:36:11 executing program 4: select(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)) 00:36:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) [ 725.671569][T26351] tipc: Enabling of bearer rejected, already enabled [ 725.719287][T26355] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}]}]}, 0x74}}, 0x0) 00:36:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 00:36:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000300)=@raw=[@func, @map_val], &(0x7f0000000340)='GPL\x00', 0xa9, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8, 0x10, 0x0}, 0x78) 00:36:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000a40)=@xdp, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 726.108973][T26365] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 726.168797][T26371] tipc: Started in network mode 00:36:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 726.198142][T26371] tipc: Node identity 563848ce3068, cluster identity 4711 [ 726.223248][T26371] tipc: Enabled bearer , priority 10 00:36:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) clock_getres(0x0, &(0x7f00000052c0)) 00:36:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) [ 726.249811][T26372] tipc: Enabling of bearer rejected, already enabled 00:36:11 executing program 1: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 00:36:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}]}]}, 0x74}}, 0x0) [ 726.383456][T26380] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:12 executing program 0: ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_dccp(0xa, 0x6, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000004c80), 0x800) 00:36:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) [ 726.556932][T26387] tipc: Enabling of bearer rejected, already enabled 00:36:12 executing program 5: rt_sigaction(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 00:36:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x2, &(0x7f0000000840)=@raw=[@call, @jmp], &(0x7f0000000880)='GPL\x00', 0x2, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 726.733059][T26395] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:12 executing program 4: pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 00:36:12 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:12 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000040)) 00:36:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xde) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 00:36:12 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:12 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) 00:36:12 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'geneve1\x00'}) 00:36:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:12 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:12 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x54, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 00:36:12 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x900c0) [ 727.236393][ T9736] tipc: Node number set to 1716537550 00:36:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:12 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x40) 00:36:12 executing program 4: socketpair(0x15, 0x0, 0x0, &(0x7f0000000080)) 00:36:13 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:13 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:13 executing program 1: socketpair(0x2, 0x6, 0x0, &(0x7f0000008bc0)) 00:36:13 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:13 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x802, 0x0) 00:36:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1, &(0x7f0000000840)=@raw=[@call], &(0x7f0000000880)='GPL\x00', 0x0, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:13 executing program 1: socketpair(0x2, 0x6, 0x0, &(0x7f0000008bc0)) 00:36:13 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:13 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 00:36:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000300)=@raw=[@map_val, @map_val], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:13 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) 00:36:13 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000480)=ANY=[]}) 00:36:13 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000300)=@raw=[@func, @map_val, @map_val], &(0x7f0000000340)='GPL\x00', 0xa9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 00:36:13 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:13 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:14 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=@known='user.incfs.metadata\x00', 0x0, 0x0) 00:36:14 executing program 1: accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:36:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) 00:36:14 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:14 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0xfffffff9, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9a7e1dd96ed54dec564c2f04fdf99907"}) 00:36:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00'], 0x29}) 00:36:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:14 executing program 0: mq_open(&(0x7f0000000000)='..[}$):\xa0\x00', 0x0, 0x0, 0x0) 00:36:14 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:14 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 00:36:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0xfffffff9, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9a7e1dd96ed54dec564c2f04fdf99907"}) 00:36:14 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 00:36:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:36:14 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f0000006340)) 00:36:14 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:14 executing program 0: socketpair(0x10, 0x3, 0x1, &(0x7f0000000000)) 00:36:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 00:36:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002680)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002440)={0x14}, 0x14}}, 0x0) 00:36:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:36:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 00:36:15 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 00:36:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 00:36:15 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:36:15 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:36:15 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$rose(r0, 0x0, 0x0) 00:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 00:36:15 executing program 0: clock_getres(0x0, &(0x7f00000052c0)) 00:36:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x300}, 0x0) 00:36:15 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 00:36:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 00:36:15 executing program 4: setfsuid(0xee01) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0) 00:36:15 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:15 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x40) 00:36:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:15 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f00000087c0)) 00:36:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 00:36:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 00:36:15 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000013340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f00000133c0)) 00:36:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 00:36:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2) 00:36:16 executing program 1: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 00:36:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 00:36:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 00:36:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 00:36:16 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:36:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 00:36:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001180)="1c", &(0x7f0000001200)='6'}, 0x48) 00:36:16 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x200800, 0x0) 00:36:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 00:36:16 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x16bc0, 0x0) 00:36:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000980)={0x8, 0x8, [0x0, 0x0]}) 00:36:16 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x18, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 00:36:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 00:36:16 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 00:36:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 00:36:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x31}) 00:36:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 00:36:17 executing program 1: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x2) ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000040)=0x401) socket$can_raw(0x1d, 0x3, 0x1) 00:36:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 'syz1\x00'}) 00:36:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 00:36:17 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000013740)) 00:36:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:36:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 00:36:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}}, 0x6001) 00:36:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x300}, 0x0) [ 731.949542][T26654] binder: 26644:26654 ioctl c0306201 200008c0 returned -14 00:36:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 731.994047][T26654] binder: 26644:26654 ioctl c0306201 200008c0 returned -14 00:36:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 00:36:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x427f0100, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000002940)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002840)=""/113, 0x71}], 0x5}}], 0x50d, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 00:36:17 executing program 5: read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111}}, 0x20) 00:36:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:36:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:17 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:36:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:18 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440100001200090625bd7000fbdbdf251d8109034e214e2040000000ffffffff040000000600000000000000030000003f0000009e9e4203", @ANYRES32=0x0, @ANYBLOB="df01000004000000ff0300000400000069"], 0x144}}, 0x0) 00:36:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['[\',+&*[\x00'], 0x8}) 00:36:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x128}}, 0x0) 00:36:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x427f0100, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000002940)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002840)=""/113, 0x71}], 0x5}}], 0x50d, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 00:36:18 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8a02, 0x0) [ 732.757204][T26686] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 00:36:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:36:18 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) 00:36:18 executing program 1: getcwd(&(0x7f0000000000)=""/253, 0xfd) 00:36:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x5}}}}]}]}, 0x7c}}, 0x0) 00:36:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 00:36:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x8, 'syz1\x00'}}) 00:36:18 executing program 0: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000013340)) 00:36:18 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 00:36:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x427f0100, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000002940)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002840)=""/113, 0x71}], 0x5}}], 0x50d, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 00:36:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:36:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 00:36:19 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000001740)) 00:36:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f00000012c0)=@framed={{}, [@ldst, @alu, @alu, @map_val]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 00:36:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:36:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9a7e1dd96ed54dec564c2f04fdf99907"}) 00:36:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x427f0100, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000002940)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002840)=""/113, 0x71}], 0x5}}], 0x50d, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 00:36:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:36:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00'], 0x29}) 00:36:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x52}) 00:36:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x700}, 0x0) 00:36:19 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:36:19 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) [ 734.192527][T26749] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x38}}, 0x0) 00:36:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:36:19 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) 00:36:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, &(0x7f0000000840)=@raw=[@jmp, @btf_id], &(0x7f0000000880)='GPL\x00', 0x2, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "9a7e1dd96ed54dec564c2f04fdf99907"}) 00:36:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 734.533562][T26763] tipc: Enabling of bearer rejected, already enabled 00:36:20 executing program 3: socketpair(0x5d9b0cee79ab1843, 0x0, 0x0, &(0x7f0000000e80)) 00:36:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:36:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14}, 0x14}, 0x300}, 0x0) 00:36:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x30}}, 0x0) 00:36:20 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x100000000) 00:36:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x102) 00:36:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) [ 734.876439][T26779] tipc: Enabling of bearer rejected, already enabled 00:36:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x1, &(0x7f0000000300)=@raw=[@func], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:20 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000009e80)) 00:36:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:36:20 executing program 1: io_uring_setup(0x452d, &(0x7f0000000000)={0x0, 0x0, 0x4}) 00:36:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1, &(0x7f0000000840)=@raw=[@jmp], &(0x7f0000000880)='GPL\x00', 0x2, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:21 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 00:36:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14}, 0x33fe0}}, 0x0) 00:36:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:36:21 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 00:36:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000013340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000013380), &(0x7f00000133c0)=0x4) 00:36:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 00:36:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:36:21 executing program 4: io_uring_setup(0x2eff, &(0x7f0000000080)) 00:36:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:21 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 00:36:21 executing program 2: socketpair(0x18, 0x0, 0x8, &(0x7f0000000180)) 00:36:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1003e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 00:36:22 executing program 3: io_uring_setup(0x2eff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1ea}) 00:36:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1, &(0x7f0000000840)=@raw=[@call], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:36:22 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x80, 0x0) 00:36:22 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x6800, 0x0, 'syz1\x00'}}) 00:36:22 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) socketpair(0x11, 0x3, 0x4, &(0x7f0000000000)) 00:36:22 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000180)) 00:36:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}}) 00:36:22 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000280), 0x4) 00:36:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}}, 0x0) 00:36:22 executing program 0: clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_getres(0x0, &(0x7f00000000c0)) 00:36:22 executing program 2: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:36:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 00:36:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:22 executing program 3: socketpair(0x29, 0x2, 0x40, &(0x7f0000000000)) 00:36:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) [ 737.350133][T26878] xt_TCPMSS: Only works on TCP SYN packets 00:36:22 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}], 0x1) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}], 0x1) [ 737.391551][T26880] xt_TCPMSS: Only works on TCP SYN packets 00:36:23 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x141243, 0x0) 00:36:23 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 00:36:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:36:23 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x5, &(0x7f0000000300)=@raw=[@func, @map_val, @map_val], &(0x7f0000000340)='GPL\x00', 0xa9, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x8, 0x10, 0x0}, 0x78) 00:36:23 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000013340)) 00:36:23 executing program 3: socketpair(0x1d, 0x0, 0x1, &(0x7f0000000000)) 00:36:23 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x101) 00:36:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 737.839674][T26907] process syz-executor.1 (pid 26907) is using the deprecated raw device [ 737.839674][T26907] support will be removed in Linux 5.14. [ 737.940737][T26907] process syz-executor.1 (pid 26907) is using the deprecated raw device [ 737.940737][T26907] support will be removed in Linux 5.14. 00:36:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x28, 0x0, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0}) 00:36:23 executing program 0: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x82) write$qrtrtun(r0, &(0x7f0000000000)="0121213998aaf00000e1ffffff00065219568600000000000000ff7ffeffffff", 0x20) 00:36:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x2, &(0x7f0000000840)=@raw=[@btf_id], &(0x7f0000000880)='GPL\x00', 0x2, 0xf3, &(0x7f00000008c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:23 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:36:23 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 738.288825][T26922] binder: 26920:26922 unknown command 0 [ 738.306594][T26922] binder: 26920:26922 ioctl c0306201 200008c0 returned -22 [ 738.403253][T26931] process syz-executor.1 (pid 26931) is using the deprecated raw device [ 738.403253][T26931] support will be removed in Linux 5.14. 00:36:24 executing program 3: socketpair(0x22, 0x0, 0x49, &(0x7f0000000600)) 00:36:24 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 00:36:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 00:36:24 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000000400)) 00:36:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:24 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:24 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 00:36:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 00:36:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}]}]}, 0x7c}}, 0x0) 00:36:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 738.827073][T26950] process syz-executor.1 (pid 26950) is using the deprecated raw device [ 738.827073][T26950] support will be removed in Linux 5.14. 00:36:24 executing program 3: write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:24 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) [ 739.057200][T26961] tipc: Started in network mode 00:36:24 executing program 0: socketpair(0x28, 0x0, 0x5, &(0x7f0000000400)) [ 739.083729][T26961] tipc: Node identity 7ad9c813a6dc, cluster identity 4711 00:36:24 executing program 2: syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 739.137337][T26961] tipc: Enabled bearer , priority 10 00:36:24 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) [ 739.180413][T26967] process syz-executor.1 (pid 26967) is using the deprecated raw device [ 739.180413][T26967] support will be removed in Linux 5.14. 00:36:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x3, &(0x7f0000000800)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) [ 739.227874][T26969] tipc: Enabling of bearer rejected, already enabled 00:36:24 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x2, &(0x7f0000000200)=@raw=[@map_val], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:24 executing program 1: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) 00:36:24 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) 00:36:25 executing program 0: fork() io_uring_setup(0x2eff, &(0x7f0000000080)={0x0, 0x0, 0x4}) 00:36:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x2, &(0x7f0000000300)=@raw=[@map_val], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 739.581528][T26986] process syz-executor.1 (pid 26986) is using the deprecated raw device [ 739.581528][T26986] support will be removed in Linux 5.14. 00:36:25 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x7}}) 00:36:25 executing program 2: getresgid(&(0x7f00000002c0), 0x0, 0x0) 00:36:25 executing program 1: syz_open_dev$char_raw(0x0, 0x1, 0x0) 00:36:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2759b3611cb6dfe8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@authinfo={0x10, 0x84, 0x8, {0x8}}, @authinfo={0x10, 0x84, 0x8, {0x3f}}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}, @prinfo={0x14}, @dstaddrv4={0x10}, @authinfo={0x10}], 0x64}, 0x2008c) 00:36:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0xbcb}, 0x40) 00:36:25 executing program 2: fork() io_uring_setup(0x0, 0x0) 00:36:25 executing program 1: syz_open_dev$char_raw(0x0, 0x1, 0x0) 00:36:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)="1c", 0x0}, 0x48) [ 740.156904][ T4867] tipc: Node number set to 3691366419 00:36:25 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000013740)) 00:36:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0xa, 0x0, 0x0, 0x0, 'syz1\x00'}) 00:36:25 executing program 1: syz_open_dev$char_raw(0x0, 0x1, 0x0) 00:36:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 00:36:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 00:36:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00', '[\',+&*[\x00', '/sys/kernel/debug/binder/transaction_log\x00'], 0x5a, [], [0x5]}) 00:36:26 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40)='TIPCv2\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ec0)={0x14, r0, 0x4238e4bc950157e5}, 0x14}}, 0x0) 00:36:26 executing program 0: socketpair(0x7a, 0x0, 0x0, &(0x7f0000000080)) 00:36:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x60}, 0x0) 00:36:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) [ 740.665327][T27040] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 00:36:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001500)={&(0x7f0000001340), 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x132, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x10c}}, 0x0) 00:36:26 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x701242) 00:36:26 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x2, 0x0) 00:36:26 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)) 00:36:26 executing program 1: socketpair(0x21, 0x0, 0x0, &(0x7f00000001c0)) 00:36:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 00:36:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:26 executing program 2: io_uring_setup(0x0, &(0x7f0000000000)) 00:36:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f00000012c0)=@framed, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 00:36:26 executing program 1: pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair(0x1d, 0x3, 0x3, &(0x7f0000001a40)) 00:36:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 00:36:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:36:27 executing program 3: write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 741.636121][T27076] can: request_module (can-proto-3) failed. 00:36:27 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000580)=@raw=[@call], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 741.704471][T27084] can: request_module (can-proto-3) failed. 00:36:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 00:36:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 00:36:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x4, &(0x7f00000012c0)=@framed={{}, [@ldst]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:27 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001200)='6'}, 0x48) 00:36:27 executing program 4: socketpair(0x2, 0x0, 0x10000, &(0x7f0000000180)) 00:36:27 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) 00:36:27 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0x3, r1, 0x0, 0x0, 0x0) 00:36:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14}, 0xc0}}, 0x0) 00:36:27 executing program 5: socketpair(0x28, 0x0, 0x1ff, &(0x7f0000000040)) 00:36:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}) 00:36:27 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 00:36:27 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x1f]}) 00:36:27 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002600)={'batadv0\x00'}) 00:36:28 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000440)) 00:36:28 executing program 2: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000013340)) 00:36:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x400, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000040)=['/sys/kernel/debug/binder/transaction_log\x00'], 0x29}) 00:36:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x8, &(0x7f00000012c0)=@framed={{}, [@ldst, @alu, @alu, @map_val]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8, 0x10, 0x0}, 0x78) 00:36:28 executing program 3: io_uring_setup(0x452d, &(0x7f0000000000)) 00:36:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:36:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7}, 0x10) [ 742.718010][T27130] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:36:28 executing program 2: socketpair(0x1e, 0x0, 0x7fc, &(0x7f0000000080)) 00:36:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val], &(0x7f0000000340)='GPL\x00', 0xa9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:28 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000008d00)='TIPCv2\x00', 0xffffffffffffffff) 00:36:28 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) 00:36:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 00:36:28 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, &(0x7f0000006100)) 00:36:28 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x10}, 0x10}}, 0x0) 00:36:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000) 00:36:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 00:36:28 executing program 3: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f00000004c0)={0xb}, 0xb) 00:36:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000013340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) [ 743.392356][T27157] binder: 27151:27157 ioctl c0306201 0 returned -14 00:36:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 743.461898][T27157] binder: 27151:27157 ioctl c0306201 0 returned -14 00:36:29 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) 00:36:29 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 00:36:29 executing program 3: rt_sigaction(0x0, &(0x7f0000000180)={&(0x7f0000000000)="450ff2eef3416f45c6f86840cdb264663e660f66e843818bdc000000f58f74cdf3f2f244da3f660f3a1406fe430f73f100f3470f1edd", 0x0, &(0x7f0000000040)="46e600f7c60e000000650f517b004689e60f740cbb0fa9c4c18c59675036dcfa66f30f1a8809000000c4210d684d5a"}, &(0x7f0000000200)={&(0x7f00000000c0)="c4a2b8f3d356dde6c4a161e8ebc463c579f7997161f85b33660f4689d5d03b0f0fc9b6c4617853fd", 0x0, &(0x7f0000000100)="c4028d9b7a8c64f23640dbc8660f19a5040000003e420f380a06f243bbf347adc422b10b0d22a93ea28f28f8a2a609000000096467450f01d50f8e00800000"}, 0x0, 0x0) 00:36:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 00:36:29 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0xf4000, 0x0) 00:36:29 executing program 0: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) 00:36:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={0x0}}, 0x0) 00:36:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x7e, 0x0, 0x0, 0x9, 0x7d, 0x0, 0x8, 0x412, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3af7}, 0x0, 0xb, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d5}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x11, &(0x7f00000012c0)=""/17, 0x41100, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8, 0x10, &(0x7f0000001440)={0x0, 0x0, 0x6}, 0x10, 0x2847f}, 0x78) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(0x0, 0x0, 0x9, r0, 0x10) 00:36:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) 00:36:29 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006100)) 00:36:29 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 00:36:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 00:36:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x3, 'syz1\x00'}}) 00:36:29 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 00:36:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}]}]}, 0x7c}}, 0x0) 00:36:29 executing program 0: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)) ioctl$CHAR_RAW_PBSZGET(0xffffffffffffffff, 0x127b, 0x0) pipe2$9p(&(0x7f0000000480), 0x0) 00:36:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) [ 744.618502][T27205] tipc: Enabling of bearer rejected, already enabled 00:36:30 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) [ 744.674675][T27208] tipc: Enabling of bearer rejected, already enabled 00:36:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"35d2c663bab84c05c08fc8aa25a75215"}}}}, 0xa0) 00:36:30 executing program 4: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) 00:36:30 executing program 0: ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) 00:36:30 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 00:36:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14}, 0xfffffdef}}, 0x0) 00:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:36:30 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@null) 00:36:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 00:36:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "82ae5a", "3ad7d10882a8e834797e214b503ed6444f7008c93a89bfd7676df738f9c0b31ff7d79fc44d38f5085b6cbcfeb48cadc96dba5b14e5ca29bdbc9751b6d3d077239fb07386082df80c589485d35727dd842e507e18597421fd59e7a81bd382bbde851f249068be6dcdd56651cdd375aa1e906cbd1c363aa45628538ab5c0bdeaaa8e1d3db748fd5226e3269d507b1e1391df76f32d5d69759b2f4bd433c61ff810eff4c9804627978507451e6abe8cc35c2255b44f1049bff48327b452d736216d909aa62863017db4906733ed42043d0c637050ce5269067c173139d2cc3e6581e6e962214d5babc9c812c8984db579db39669a5b06af2dfe782babfb7aea3c4e"}}, 0x110) 00:36:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) 00:36:30 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) 00:36:30 executing program 5: socketpair(0x8, 0x0, 0x0, &(0x7f0000002200)) 00:36:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f00000012c0)=@framed, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440), 0x10}, 0x78) 00:36:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', r0) 00:36:31 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 00:36:31 executing program 2: r0 = fork() pidfd_open(r0, 0x0) 00:36:31 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:36:31 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000240)={0x18}, 0x18) 00:36:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x128}}, 0x0) 00:36:31 executing program 0: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)) socketpair(0x25, 0x0, 0x0, &(0x7f0000006340)) 00:36:31 executing program 4: fork() r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x452d, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}) io_uring_setup(0x2eff, &(0x7f0000000080)={0x0, 0x0, 0x4}) 00:36:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000200)) 00:36:31 executing program 2: r0 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$CHAR_RAW_RESETZONE(r0, 0x40101283, 0x0) 00:36:31 executing program 0: rt_sigsuspend(&(0x7f00000000c0)={[0xffffffff80000001]}, 0x8) 00:36:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4) 00:36:31 executing program 1: setfsuid(0xee01) 00:36:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) 00:36:31 executing program 4: creat(&(0x7f0000000340)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000380)=@v3, 0x18, 0x0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:36:31 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0}, 0x48) 00:36:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x7, &(0x7f00000012c0)=@framed={{}, [@ldst, @alu, @map_val]}, &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:31 executing program 1: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:36:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, 0x0}, 0x78) 00:36:32 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "861c19358b1aef90c2381e583c5ed1713730b13147835a7b64a89058c41008a56386364d52dbe4b6cc9acfc1f190390c7e263d0cb25500893fb37add53b8dd71"}, 0x48, 0xfffffffffffffffd) keyctl$update(0x2, r0, 0x0, 0x0) 00:36:32 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', 0xffffffffffffffff) 00:36:32 executing program 2: r0 = io_uring_setup(0x4280, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:36:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 00:36:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$netrom(r0, 0x0, 0x0) 00:36:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000140)=""/165, 0xa5) 00:36:32 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x82, 0x0) 00:36:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 00:36:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x9) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 00:36:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2000, &(0x7f0000000340)=@raw=[@exit], &(0x7f0000000380)='GPL\x00', 0x4, 0xf9, &(0x7f00000003c0)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 747.167820][T27311] ptrace attach of "/root/syz-executor.2"[17220] was attempted by "/root/syz-executor.2"[27311] 00:36:32 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000001600)='nl80211\x00', 0xffffffffffffffff) 00:36:32 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x80045301, 0x0) 00:36:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x68140, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xcc602, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000640)=0x6) 00:36:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002940)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)='\f', 0x1, 0x0, 0x0, 0x0) [ 747.355319][ T3243] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.361721][ T3243] ieee802154 phy1 wpan1: encryption failed: -22 00:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, 0x0) 00:36:33 executing program 2: r0 = socket(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 00:36:33 executing program 4: r0 = syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000180)="453dcd28001000000300000000000000436f6d7072657373656420524f4d46535a43b273000000000700000008000000436f6d70726573736564000000000000c0415cf968000053c0040000ed815cf901000053c30d000066", 0x59}, {0x0, 0x0, 0xbff}], 0x0, &(0x7f0000010200)) getdents64(r0, 0x0, 0x0) 00:36:33 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[{&(0x7f0000000100)='T', 0x1}, {&(0x7f00000004c0)="8454dd9a74fb112039eaa19be69e20f7bc9c6fbc77b17a2676117e731629cf42989bafd1a19871ac4a57ffaa23008fdadb9272ae4fb22d809f6c12854da8e29a2a09bd26777d301d", 0x48, 0xffffffffffffffb9}], 0x0, 0x0) 00:36:33 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xcc602, 0x0) 00:36:33 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000740)) 00:36:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x68140, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xcc602, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000640)=0x6) [ 747.926658][T27346] loop5: detected capacity change from 0 to 16383 00:36:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000b40)={&(0x7f0000000980), 0xc, &(0x7f0000000b00)={&(0x7f0000000080)={0x2a, 0x2, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}]}, 0x38}}, 0x0) 00:36:33 executing program 1: openat$dsp(0xffffffffffffff9c, 0x0, 0x400000, 0x0) [ 748.058418][T27346] loop5: detected capacity change from 0 to 16383 00:36:33 executing program 4: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:36:33 executing program 5: socket(0x23, 0x0, 0x4) [ 748.116792][T27359] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. 00:36:34 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r1, 0x0, 0x0, 0x0) 00:36:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x4, 0x0, 0x6) 00:36:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xcc602, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000640)) 00:36:34 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) pkey_mprotect(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x4, 0xffffffffffffffff) 00:36:34 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x0, 0x101400) syz_genetlink_get_family_id$batadv(&(0x7f0000001300)='batadv\x00', 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000001640)='/dev/bsg\x00', 0x10440, 0x0) 00:36:34 executing program 5: ioperm(0x0, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) 00:36:34 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) 00:36:34 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="36f869e097022d4a0caae844395de01e8bf6a1e6f5ece3b9a52b61db10549b5220af5ce6f51e29c7874c5c50ee0c9c4e64021cd867de27b09ca58a37024bf38006a9e0689fcd6eab233a3678e08b115818e2a70bb2fc", 0x56) exit(0x6) exit(0x8) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/116) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xffffffffffffffe1, 0x3a1101) ioctl$EVIOCGBITKEY(r0, 0x80404521, 0x0) exit(0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) exit(0x0) exit(0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001500)={0x1, &(0x7f00000014c0)=[{0x8, 0x3f, 0x7, 0x2}]}) 00:36:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 00:36:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) 00:36:34 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x202, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"ef517628d7c7d42e17eae880"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x118) 00:36:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) 00:36:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 00:36:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x101}) 00:36:34 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xf80}]) 00:36:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xde) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:36:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) 00:36:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) [ 749.360481][T27414] loop2: detected capacity change from 0 to 15 00:36:35 executing program 3: futex(&(0x7f0000000040), 0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 749.447354][T27414] Dev loop2: unable to read RDB block 15 [ 749.502424][T27414] loop2: unable to read partition table [ 749.550150][T27414] loop2: partition table beyond EOD, truncated [ 749.593885][T27414] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 749.700547][T27414] loop2: detected capacity change from 0 to 15 [ 749.788698][T27414] Dev loop2: unable to read RDB block 15 [ 749.804290][T27414] loop2: unable to read partition table [ 749.810346][T27414] loop2: partition table beyond EOD, truncated 00:36:35 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 00:36:35 executing program 0: r0 = fork() process_vm_readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000080)=""/145, 0x91}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000019cc0)=[{&(0x7f0000000c00)=""/102400, 0x19000}, {0x0}], 0x2, 0x0) 00:36:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{}]}) 00:36:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001780)={&(0x7f0000001640), 0xc, &(0x7f0000001740)={0x0, 0x6c}}, 0x0) 00:36:35 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) [ 749.889080][T27414] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 00:36:35 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xf80}]) [ 750.052054][ T4851] Dev loop2: unable to read RDB block 15 [ 750.089108][ T4851] loop2: unable to read partition table 00:36:35 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xcb82c3b17c8e1ed8, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 750.121945][ T4851] loop2: partition table beyond EOD, truncated 00:36:35 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400) 00:36:35 executing program 3: futex(&(0x7f0000000000), 0x86, 0x0, &(0x7f0000000080), 0x0, 0x0) 00:36:35 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0), 0x0) 00:36:35 executing program 4: futex(&(0x7f0000000000)=0x1, 0x86, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 750.359486][T27450] loop2: detected capacity change from 0 to 15 [ 750.476183][T27450] Dev loop2: unable to read RDB block 15 [ 750.482386][T27450] loop2: unable to read partition table [ 750.557450][T27450] loop2: partition table beyond EOD, truncated [ 750.589162][T27450] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 00:36:36 executing program 0: rt_sigaction(0x2d, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 00:36:36 executing program 3: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 00:36:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 00:36:36 executing program 4: futex(&(0x7f0000000000)=0x1, 0x86, 0x0, &(0x7f0000000080), 0x0, 0x0) 00:36:36 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xf80}]) 00:36:36 executing program 3: pipe2(0x0, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/52) 00:36:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000540)={0x0, 0x0}) [ 751.144990][T27479] loop2: detected capacity change from 0 to 15 [ 751.230250][T27479] Dev loop2: unable to read RDB block 15 [ 751.250146][T27479] loop2: unable to read partition table 00:36:36 executing program 5: add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000040)='r', 0x1, 0xfffffffffffffffb) 00:36:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)={{0x3c}, [@NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) 00:36:36 executing program 3: syz_read_part_table(0x0, 0x3, &(0x7f00000002c0)=[{}, {0x0, 0x0, 0xfffffff7}, {&(0x7f00000001c0)="7875787a0009d26cd0e0ee2ef2160720b1e9ae6adebe23ed3733499fb4da6aa70bd02ff850acdf91762766ceed2d18aa332ca1cd2ac37f04187d584b14dcd53657a586361d7a4777c57b087e17100e4799c238263a0600b9d0dd7bc21e3bf62d113990857af51bd9f307eca6696f37c730ffee6794605ced11a1622bff018d3ee6b5e7ed2d740309fd9c72aadf5e28ac5c38218e2af6ab1c843eaba89370ea6ef5a803cf5f6c2e0c720e9fc4fc6daffb6a995937cefdf8a5e35f0ae44636fccaac3e0f01ea64db5a9dfa9642d2815ba4fc999142ccb3343919300e7eef37e20494ce38cf70e674a496327e48bb0fa2905f21cf7da0", 0xf5, 0xf80}]) [ 751.285610][T27479] loop2: partition table beyond EOD, truncated [ 751.292351][T27479] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 00:36:36 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xf80}]) [ 751.482421][T27492] loop2: detected capacity change from 0 to 15 00:36:37 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) signalfd(r0, &(0x7f0000000080), 0x8) [ 751.546929][T27492] Dev loop2: unable to read RDB block 15 [ 751.566742][T27495] loop3: detected capacity change from 0 to 264192 [ 751.574381][T27492] loop2: unable to read partition table [ 751.608206][T27492] loop2: partition table beyond EOD, truncated [ 751.627993][T27492] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 00:36:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x201}, 0x14}}, 0x0) [ 751.715810][T27495] loop3: detected capacity change from 0 to 264192 00:36:37 executing program 5: io_submit(0x0, 0x1, &(0x7f0000000700)=[0x0]) io_setup(0xc39, &(0x7f00000009c0)) 00:36:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 00:36:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8510}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:36:37 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x100}, 0x0) 00:36:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 00:36:37 executing program 0: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='fscrypt:', 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/178, 0xb2) r1 = add_key(0xfffffffffffffffd, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="657903d1ab55fdc8a43c0a2aa4f1e02d3eff931062c2f4f4c139c2a93eae1c23dbc6802351a040a15b190280f69329509d7f716caca97c375523db4a8b785c7f2e91cea605b0cd1108e8b62eb74b26d08a2713029c73ca8d6563b6a65bc387cf59dcedbf54aba1e91679449d8e0c1660ade373e7c699bb50a57fa3c9245e06b2f536ac42c845", 0x86, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400)={r1, 0x96, 0xf2}, &(0x7f0000000440)={'enc=', 'oaep', ' hash=', {'cmac(aes)\x00'}}, &(0x7f00000004c0)="aa1b8dc19790581961a85e683bb7638ae09f1d0f4683073a294985088730052abc9247e86027fb9c27fa4473ccf98c5b8bd905013964cf3af236441c7cc0582ba607fa6c8241e148c832a85204169af0f5c7a915afb535a8b59f841bd3a4cc6b4fa5e8ceb85a2ec27aa1cfe59a89d8fa59ca82b5c4968694b7cec20d55b65d409fba3b2bca4eac1f6c69519abaa2b95dc1dcb7b837a9", &(0x7f0000000580)=""/242) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @auto=[0x62, 0x33, 0x36, 0x0, 0x62, 0x62, 0x66, 0x38, 0x38, 0x31, 0x36, 0x64, 0x66, 0x31, 0x62, 0x61]}, &(0x7f0000000140)={0x0, "edf0441709a281a3466ebecb367c10901fa5d6f3d3e4f8360318f482f56a67436e741327f76246227e98c102f8ad6debdbd55795d48bd4d6f6b7a9d0e494fc75", 0x34}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, r2, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000700)='id_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="a462ff49a3ecfa01fe8bbd0e2320dcdd3efbcae79a3060f50f6ddf48ea9db3d436e190482a8fa99509088bda247d4104c734672e7ac40569324292286e7770db", 0x40, 0xffffffffffffffff) request_key(&(0x7f0000001b00)='dns_resolver\x00', &(0x7f0000001b40)={'syz', 0x1}, &(0x7f0000001b80)='fscrypt:', r1) 00:36:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000001c0)="a9", 0x1}], 0x2}}], 0x1, 0x0) 00:36:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x15, 0x4) 00:36:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x19, 0x4) 00:36:37 executing program 5: futex(0x0, 0x86, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x8c, 0x0, 0x0, &(0x7f0000000180), 0x0) 00:36:37 executing program 4: clock_gettime(0x0, &(0x7f0000000200)={0x0}) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x3}, &(0x7f00000001c0)={0x7}, &(0x7f0000000240)={r0}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1]}, 0x8}) 00:36:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 00:36:38 executing program 2: r0 = socket$inet6(0xa, 0x2000000080803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) 00:36:38 executing program 1: socketpair(0xa, 0x1, 0x0, &(0x7f0000000140)) 00:36:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x7, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 00:36:38 executing program 4: alarm(0x9) 00:36:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f00000003c0)={0x2, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@tclass={{0x14}}], 0xf}}], 0x1, 0x0) 00:36:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:38 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/230) 00:36:38 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400)='nl802154\x00', 0xffffffffffffffff) 00:36:38 executing program 5: futex(&(0x7f0000000000), 0x86, 0x0, 0x0, 0x0, 0x0) 00:36:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:36:38 executing program 4: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='fscrypt:', 0xfffffffffffffffc) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/178, 0xb2) r1 = add_key(0xfffffffffffffffd, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="657903d1ab55fdc8a43c0a2aa4f1e02d3eff931062c2f4f4c139c2a93eae1c23dbc6802351a040a15b190280f69329509d7f716caca97c375523db4a8b785c7f2e91cea605b0cd1108e8b62eb74b26d08a2713029c73ca8d6563b6a65bc387cf59dcedbf54aba1e91679449d8e0c1660ade373e7c699bb50a57fa3c9245e06b2f536ac42c845", 0x86, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400)={r1, 0x96, 0xf2}, &(0x7f0000000440)={'enc=', 'oaep', ' hash=', {'cmac(aes)\x00'}}, &(0x7f00000004c0)="aa1b8dc19790581961a85e683bb7638ae09f1d0f4683073a294985088730052abc9247e86027fb9c27fa4473ccf98c5b8bd905013964cf3af236441c7cc0582ba607fa6c8241e148c832a85204169af0f5c7a915afb535a8b59f841bd3a4cc6b4fa5e8ceb85a2ec27aa1cfe59a89d8fa59ca82b5c4968694b7cec20d55b65d409fba3b2bca4eac1f6c69519abaa2b95dc1dcb7b837a9", &(0x7f0000000580)=""/242) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x38, 0x31, 0x36, 0x64, 0x66, 0x31, 0x62, 0x61]}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000700)='id_resolver\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="a462ff49a3ecfa01fe8bbd0e2320dcdd3efbcae79a3060f50f6ddf48ea9db3d436e190482a8fa99509088bda247d4104c734672e7ac40569324292286e7770db", 0x40, 0xffffffffffffffff) request_key(&(0x7f0000001b00)='dns_resolver\x00', &(0x7f0000001b40)={'syz', 0x1}, &(0x7f0000001b80)='fscrypt:', r1) [ 752.954726][ T36] Bluetooth: hci2: command 0x0405 tx timeout 00:36:38 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="340200001500010028bd7000fedbdf2511"], 0x234}}, 0x0) 00:36:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}}, 0x0) 00:36:38 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x100, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:36:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:36:38 executing program 4: socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:36:38 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/uts\x00') [ 753.474920][T27581] xt_CT: No such helper "snmp_trap" [ 753.591088][T27578] xt_CT: No such helper "snmp_trap" [ 753.604809][T27588] xt_CT: No such helper "snmp_trap" 00:36:39 executing program 3: socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x100, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) fsetxattr$security_evm(r1, 0x0, &(0x7f0000000840)=@v1={0x2, "fd29b3103a"}, 0x6, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000011c0)=ANY=[@ANYRES32=0x0]}) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:36:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="027c79b55a358dcf9a3f8e459826694d", 0x10) 00:36:39 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 00:36:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) fsetxattr$security_evm(r1, 0x0, 0x0, 0x0, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 00:36:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) [ 753.961054][T27592] xt_CT: No such helper "snmp_trap" [ 754.106244][T27608] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.164490][T27608] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.171831][T27608] bridge0: port 2(bridge_slave_1) entered forwarding state 00:36:39 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={0x0, 0x0, 0x10}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 00:36:39 executing program 0: poll(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 754.325465][T27618] xt_CT: No such helper "snmp_trap" 00:36:39 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 754.422063][T27614] xt_CT: No such helper "snmp_trap" 00:36:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) [ 754.572194][T27618] xt_CT: No such helper "snmp_trap" [ 754.586341][T27628] xt_CT: No such helper "snmp_trap" [ 754.682418][T27631] xt_CT: No such helper "snmp_trap" 00:36:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 754.810025][T27648] bridge0: port 2(bridge_slave_1) entered disabled state 00:36:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 00:36:40 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="6873717307000000911d675f080000c71e80049d7f000000000001000c", 0x1d}], 0x0, &(0x7f0000000040)) [ 754.889065][T27648] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.896398][T27648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.997744][T27623] xt_CT: No such helper "snmp_trap" 00:36:40 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) 00:36:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 00:36:40 executing program 0: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe7c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 00:36:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 00:36:40 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x100, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={0x0, 0x0, 0x10}, 0x10) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000840)=@v1={0x2, "fd29b3103aa281db2a40"}, 0xb, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:36:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 755.381197][T27669] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.419760][T27669] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.426991][T27669] bridge0: port 2(bridge_slave_1) entered forwarding state 00:36:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 00:36:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) [ 755.957149][T27708] bridge0: port 2(bridge_slave_1) entered disabled state 00:36:41 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) [ 756.002803][T27708] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.010334][T27708] bridge0: port 2(bridge_slave_1) entered forwarding state 00:36:41 executing program 1: socket$netlink(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x100, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={0x0, 0x0, 0x10}, 0x10) fsetxattr$security_evm(r2, 0x0, &(0x7f0000000840)=@v1={0x2, "fd29b3103aa281db2a40"}, 0xb, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:36:41 executing program 0: socket$netlink(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x100, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={0x0, 0x0, 0x10}, 0x10) fsetxattr$security_evm(r2, 0x0, &(0x7f0000000840)=@v1={0x2, "fd29b3103aa281db2a40"}, 0xb, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:36:41 executing program 4: poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:36:42 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffff9, 0x693d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x24, 0x0, 0x0, 0x2}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000240) 00:36:42 executing program 2: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 00:36:42 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) 00:36:42 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:36:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003200)) 00:36:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="24ebe4c0b5ebc41efb9f675c1d09bbc328346bd2c912cbaa3b", 0x19, 0x81}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)="1c", 0x1, 0x1000}, {&(0x7f0000000400)="b94b943c969a384ad41ad1583c86bcd350ab5c86086247fba1", 0x19, 0x3}, {&(0x7f0000000380)="c8a41fa82bb7e65b0df44802ac50b3502b03aebeeeff5666fe9de739c9ebcea252d8d84d95fbe89f0005b590", 0x2c}, {&(0x7f0000000480)="54623e7988cfe46149af322ecd526bf8412e36dfe030971c68d58520b4c06f368cc29f63c0bb4580f2570f898549fcc534907f7fb2ed68f189b683a9d4489c8dada70d17ff4e4646cf66e15add57ee0334f64a97ecab8f298aa4a14e2b1b2332661dcbc8cfa4c456a14b1144a8c75e6ad73b55109dad48ff779da3528dcc5b86203764594edebfe6694af4a86e8b134245ae57a0a9", 0x95, 0x9}], 0x820000, &(0x7f0000000640)={[], [{@obj_type={'obj_type'}}]}) 00:36:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 00:36:42 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) 00:36:42 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000000300)="e72d6606c9f4e5e76c1dc0d3f5150591bf83601e3f6cecfbfc6eafeb8e70d103f0533feb776abe572a", 0x29, 0xfd8}, {&(0x7f0000000600)="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", 0xa01}], 0x0, 0x0) 00:36:42 executing program 4: mount$9p_fd(0x0, &(0x7f0000000940)='./file0/file1\x00', 0x0, 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 00:36:42 executing program 1: fsopen(&(0x7f0000001c00)='aufs\x00', 0x0) 00:36:42 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xc693) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@empty}, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) [ 757.447540][T27779] loop2: detected capacity change from 0 to 15 [ 757.584897][T27779] loop2: detected capacity change from 0 to 15 00:36:43 executing program 5: io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) 00:36:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:36:43 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000140)={0x0, 0x0, 0x9}) 00:36:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 00:36:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x17, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 00:36:43 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:36:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1000, 0x1}, 0xe) 00:36:43 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 00:36:43 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x5000a11) 00:36:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{0x0, 0x0, 0x3}, {0x0}], 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}]}) 00:36:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 00:36:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'gre0\x00', 0x0}) 00:36:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[], [{@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) [ 758.499332][T27827] FAT-fs (loop2): Unrecognized mount option "obj_type=" or missing value [ 758.678808][T27827] FAT-fs (loop2): Unrecognized mount option "obj_type=" or missing value 00:36:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001e40)=[{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0xd1) 00:36:44 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)) 00:36:44 executing program 1: clock_gettime(0x4, &(0x7f0000000440)) 00:36:44 executing program 3: io_setup(0x81, &(0x7f0000000180)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:36:44 executing program 4: socket(0x1e, 0x0, 0x2) 00:36:44 executing program 2: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffd}) 00:36:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}], 0x1, 0x0) 00:36:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 00:36:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000001000)) 00:36:45 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:45 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10000, 0x0) 00:36:45 executing program 5: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff2000/0x4000)=nil) sigaltstack(&(0x7f0000ff8000/0x4000)=nil, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00'}, 0x2c) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 00:36:45 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4083, 0x4) 00:36:45 executing program 0: keyctl$search(0xa, 0x0, &(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0) 00:36:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1120, 0x4) 00:36:45 executing program 1: pipe2(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 00:36:45 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) 00:36:45 executing program 5: pipe2(&(0x7f0000000740), 0x0) 00:36:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 00:36:45 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}}, 0x0) 00:36:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 00:36:45 executing program 1: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 00:36:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x25, 0x4) 00:36:45 executing program 4: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 00:36:45 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xa3, 0xb0, 0x9e, 0x8, 0xc2e, 0x720, 0xe326, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x28, 0xc2, 0x48, 0x0, [], [{}]}}]}}]}}, 0x0) 00:36:45 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 00:36:46 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00', 0xffffffffffffffff) 00:36:46 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f0000000100)={0x0, r0+60000000}, 0x0) 00:36:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x886, 0xffffffffffffffff, 0x7ff}, 0x40) 00:36:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {0x0, 0x0, 0x1000}, {&(0x7f0000000400), 0x0, 0x3}], 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:36:46 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x204000, &(0x7f00000009c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}]}}) 00:36:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 00:36:46 executing program 1: keyctl$reject(0x13, 0x0, 0x0, 0x80000000, 0x0) 00:36:46 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffd}, 0x8) [ 760.764323][ T9744] usb 6-1: new high-speed USB device number 4 using dummy_hcd 00:36:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) 00:36:46 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x6faa81, 0x0) [ 761.014172][ T9744] usb 6-1: Using ep0 maxpacket: 8 [ 761.135583][ T9744] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 761.315108][ T9744] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=e3.26 [ 761.337783][ T9744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.367627][ T9744] usb 6-1: Product: syz [ 761.383263][ T9744] usb 6-1: Manufacturer: syz [ 761.395513][ T9744] usb 6-1: SerialNumber: syz [ 761.408829][ T9744] usb 6-1: config 0 descriptor?? [ 761.456040][ T9744] metro_usb 6-1:0.0: required endpoints missing [ 761.661048][ T36] usb 6-1: USB disconnect, device number 4 [ 762.434207][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 762.694273][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 762.815033][ T36] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 762.985107][ T36] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=e3.26 [ 762.995276][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.005767][ T36] usb 6-1: Product: syz [ 763.010433][ T36] usb 6-1: Manufacturer: syz [ 763.025965][ T36] usb 6-1: SerialNumber: syz [ 763.055213][ T36] usb 6-1: config 0 descriptor?? [ 763.096025][ T36] metro_usb 6-1:0.0: required endpoints missing 00:36:48 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}, {&(0x7f0000000600)="93b4b116d47d85b0aa103d", 0xb}], 0x0, 0x0) 00:36:48 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x63, 0x67, 0x66, 0x62, 0x30, 0x37, 0x33, 0x66, 0x62, 0x37, 0x39, 0x65, 0x34, 0x62]}, &(0x7f0000000080)={0x0, "9535d5c834a69c4387a640508a61b91849e2bc4a453644ab891f6ea23938ddc24498b35a4c5d70aadd30d1babc5c1590bba552143957d7650f7550f430a693cd"}, 0x48, 0xfffffffffffffffe) 00:36:48 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000940)='/dev/input/mouse#\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 00:36:48 executing program 4: syz_mount_image$fuse(&(0x7f0000000940)='fuse\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:36:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xaeab}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 763.296079][ T4867] usb 6-1: USB disconnect, device number 5 00:36:48 executing program 3: syz_open_dev$loop(&(0x7f0000004b00)='/dev/loop#\x00', 0x0, 0x454681) 00:36:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x21) 00:36:49 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000080)="20ca3b1ee18a", 0x6, 0x5}], 0x0, 0x0) [ 763.537432][T27998] fuse: Bad value for 'fd' 00:36:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) [ 763.607657][T27998] fuse: Bad value for 'fd' 00:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 00:36:49 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2, 0x0) 00:36:49 executing program 4: add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000240)={0x0, "ba5b398bd18b70cc0ec69bc856b7045c5620e856c967296c3937810b003ebec5dd33a42e3513eb0b66f665eef44d6c62755d1178a7fc6df9e5e521c6fdefcc4c"}, 0x48, 0xfffffffffffffffd) 00:36:49 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) 00:36:49 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8001, 0x0) 00:36:49 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3, 0x0, 0x0, 0x2}}, 0x2e) 00:36:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:36:50 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:36:50 executing program 2: socket(0x0, 0x8000b, 0x0) 00:36:50 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="24ebe4c0b5ebc41efb9f675c1d09bbc328", 0x11, 0x81}, {&(0x7f00000001c0)="ee076e7ae2958d895cadc264470f5193ea5d2e761bbe8a8a2c1c8fe5ef6866f5bc7cce541c0ac599d44fcb31b16057ef3ce73b64c310fa51312e40ec270f491a5868fcac757c1a5252a2ced050a3ce941acf1e222abf046392", 0x59}, {&(0x7f00000002c0)="1c3c08d359597aa5f175059dfce2b5dc980821d3d3e8e105d72c6162547073ba5271e4f77ddc396b6e01e28b4b34046827348ac4aac43a306f8844df69c53b6abdf0981770b5c17529b9cbbcc3fb78ba4fe3d6df3d936c32515ed000f856af63ac88329552d4047021f0b1e10dd10d6adc7f835cf42117c0065b17db65c4b58a7cf1d3b4", 0x84, 0x1000}, {&(0x7f0000000400)="b94b943c969a384ad41ad1583c86bcd350ab5c86086247fba108ca403180e6497c10c75498e363d0c06099fca0e75746ab5e9099174c99517bd13efcaa78472f6c26b03ad1c304df26f38616ff25fa4513de53e40ecb0a35", 0x58, 0x3}, {&(0x7f0000000380)="c8a41fa82bb7e65b0df44802ac50b3502b03aebeeeff", 0x16, 0x1ff}, {0x0}], 0x820000, &(0x7f0000000640)={[], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:36:50 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}, {&(0x7f00000001c0)="ee", 0x1}, {&(0x7f0000000400)="b9", 0x1}, {&(0x7f0000000380)="c8", 0x1}], 0x0, 0x0) 00:36:50 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2, 0x0) 00:36:50 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:36:50 executing program 1: syz_open_dev$mouse(&(0x7f0000000940)='/dev/input/mouse#\x00', 0x0, 0x40200) 00:36:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00'}) 00:36:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 00:36:50 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}, {&(0x7f00000002c0)="1c", 0x1, 0x1000}, {&(0x7f0000000400)="b9", 0x1}], 0x0, 0x0) 00:36:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}]}) 00:36:50 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}]}}) 00:36:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 00:36:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x17, 0x1}, 0x40) 00:36:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', r0) 00:36:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001e40)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:36:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e) [ 765.566436][T28076] fuse: Bad value for 'fd' 00:36:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 765.596077][T28076] fuse: Bad value for 'fd' 00:36:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 00:36:51 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3}}, 0x2e) 00:36:51 executing program 2: request_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 00:36:51 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) 00:36:51 executing program 0: io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 00:36:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 00:36:51 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r0, 0x1, &(0x7f0000000b40)=[0x0]) 00:36:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xa3, 0xb0, 0x9e, 0x8, 0xc2e, 0x720, 0xe326, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x43, 0x93, 0x5, 0x0, [], [{}, {}, {}]}}]}}]}}, 0x0) 00:36:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001380)={0x3}, 0x4) 00:36:51 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 00:36:51 executing program 4: gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) mlockall(0x5) 00:36:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012005, 0x0) 00:36:51 executing program 0: syz_open_dev$mouse(0xfffffffffffffffe, 0x0, 0x0) 00:36:52 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0xc9e1d0c3ae8ac7fe) [ 766.524316][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd 00:36:52 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 00:36:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), 0x4) [ 766.784267][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 766.914543][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 766.944890][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 766.975693][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 00:36:52 executing program 5: io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x8}) 00:36:52 executing program 0: add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 00:36:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', r0) [ 767.175285][ T8] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=e3.26 [ 767.191499][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.244591][ T8] usb 2-1: Product: syz [ 767.248843][ T8] usb 2-1: Manufacturer: syz [ 767.253459][ T8] usb 2-1: SerialNumber: syz [ 767.320872][ T8] usb 2-1: config 0 descriptor?? [ 767.395778][ T8] metro_usb 2-1:0.0: required endpoints missing [ 767.601970][ T4867] usb 2-1: USB disconnect, device number 10 [ 768.414466][ T4867] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 768.674299][ T4867] usb 2-1: Using ep0 maxpacket: 8 [ 768.805394][ T4867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 768.829587][ T4867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 768.842424][ T4867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 769.035278][ T4867] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=e3.26 [ 769.045014][ T4867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.053163][ T4867] usb 2-1: Product: syz [ 769.060268][ T4867] usb 2-1: Manufacturer: syz [ 769.065834][ T4867] usb 2-1: SerialNumber: syz [ 769.082606][ T4867] usb 2-1: config 0 descriptor?? [ 769.126025][ T4867] metro_usb 2-1:0.0: required endpoints missing 00:36:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) 00:36:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) 00:36:54 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 00:36:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:36:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:36:54 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) [ 769.170120][ T8] usb 2-1: USB disconnect, device number 11 00:36:54 executing program 0: io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r0, 0x3, &(0x7f0000000b40)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) 00:36:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:36:54 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000070000001000000007000004"], &(0x7f0000000440)=""/4093, 0x9b, 0xffd, 0x1}, 0x20) 00:36:54 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 00:36:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 00:36:55 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) 00:36:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000007c0)='SMC_PNETID\x00', 0xffffffffffffffff) 00:36:55 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 00:36:55 executing program 1: renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) 00:36:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:36:56 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) 00:36:56 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) poll(&(0x7f0000000080)=[{}, {}, {}], 0x3, 0x50a7965) 00:36:56 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, 0x0) 00:36:56 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r0, 0x0, 0x0) 00:36:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00j'], 0x34}}, 0x0) 00:36:56 executing program 3: request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffe) 00:36:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {0x0}, {&(0x7f0000000380)="c8a41fa82bb7e65b0df44802ac50b3502b03aebeeeff5666fe9de739c9ebcea252d8d84d95fbe89f0005b590", 0x2c}], 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:36:56 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 00:36:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x10}}], 0x10}, 0x0) [ 771.060643][T28255] FAT-fs (loop5): Unrecognized mount option "obj_type=" or missing value 00:36:56 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/59, 0x3b}], 0x1, &(0x7f0000000740)=""/97, 0x61}}], 0x2, 0x6002, 0x0) 00:36:56 executing program 2: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000) 00:36:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}, 0x0) [ 771.198916][T28255] FAT-fs (loop5): Unrecognized mount option "obj_type=" or missing value 00:36:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 00:36:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) 00:36:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, 0x0) 00:36:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000500)) 00:36:57 executing program 1: openat$vhost_vsock(0xffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 00:36:57 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 00:36:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 00:36:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 00:36:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5}]}) 00:36:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}}, 0x4010) 00:36:57 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000740)='batadv\x00', 0xffffffffffffffff) 00:36:57 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000004780)) 00:36:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000007f80)={'icmp\x00'}, &(0x7f0000007fc0)=0x1e) 00:36:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1414, 0x1}, 0x40) 00:36:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x2}, {}, {0x9}]}) 00:36:57 executing program 4: renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4) 00:36:57 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0)='ethtool\x00', 0xffffffffffffffff) 00:36:57 executing program 4: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={[0x78]}, 0x8}) 00:36:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:36:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) 00:36:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 00:36:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x1c}, 0x1c}}, 0x0) 00:36:57 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x842da7e615d7732e, 0xa3, 0xb0, 0x9e, 0x8, 0xc2e, 0x720, 0xe326, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x1, 0x28, 0xc2, 0x48, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6}, 0x33, &(0x7f00000000c0)={0x5, 0xf, 0x33, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8}, @generic={0x3, 0x10, 0xb}, @ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "bc35f14e3cda5773089d4c2d5d1ddc1e"}, @ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 00:36:58 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0xffffffffffffffff) 00:36:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18}, 0x0) 00:36:58 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 00:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 00:36:58 executing program 5: syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x7, 0x250300) 00:36:58 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x20}, {0x2}, {}]}) 00:36:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='])[}\x00', &(0x7f0000000180)="d0", 0x1) 00:36:58 executing program 5: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x84001) 00:36:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) [ 772.874308][ T9743] usb 4-1: new high-speed USB device number 10 using dummy_hcd 00:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 00:36:58 executing program 4: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) [ 773.124195][ T9743] usb 4-1: Using ep0 maxpacket: 8 [ 773.325217][ T9743] usb 4-1: config 64 has an invalid interface number: 239 but max is 0 [ 773.340109][ T9743] usb 4-1: config 64 has no interface number 0 [ 773.350407][ T9743] usb 4-1: config 64 interface 239 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 773.609317][ T9743] usb 4-1: string descriptor 0 read error: -22 [ 773.619493][ T9743] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=e3.26 [ 773.638508][ T9743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.696027][ T9743] metro_usb 4-1:64.239: required endpoints missing [ 773.901938][ T9743] usb 4-1: USB disconnect, device number 10 00:36:59 executing program 3: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='&', 0x1, 0xfffffffffffffffe) 00:36:59 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 00:36:59 executing program 1: r0 = gettid() r1 = fork() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8000}) 00:36:59 executing program 0: lstat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:36:59 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$nbd(r0, 0x0, 0x0) 00:36:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 00:37:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={0x0}}, 0x0) 00:37:00 executing program 0: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:37:00 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$incfs(r0, &(0x7f00000005c0)='.pending_reads\x00', 0x0, 0x0) 00:37:00 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 00:37:00 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') 00:37:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1414, 0x1, 0x8000}, 0x40) 00:37:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) 00:37:00 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) 00:37:00 executing program 1: waitid(0x0, 0x0, &(0x7f0000000000), 0x2, 0x0) 00:37:00 executing program 2: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 00:37:00 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 00:37:00 executing program 3: select(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000140)) 00:37:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)) 00:37:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:37:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)="ca93fa9e8dbd342b8449fdce96c7fd4a", 0x10) 00:37:00 executing program 0: select(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)) 00:37:00 executing program 1: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffff8b}, {0x0}, {&(0x7f00000193c0)=""/102389, 0xa759}], 0x10000000000000e1, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 00:37:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000009b80)) 00:37:01 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) 00:37:01 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) [ 775.448113][T28428] ptrace attach of "/root/syz-executor.1"[28426] was attempted by "/root/syz-executor.1"[28428] 00:37:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) 00:37:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000400), 0x0, 0x3}], 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:37:01 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 00:37:01 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 00:37:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) 00:37:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4001) 00:37:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000064c0)={0x77359400}) [ 775.764304][T28442] FAT-fs (loop3): Unrecognized mount option "obj_type=" or missing value 00:37:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000440)=""/4093, 0x9b, 0xffd, 0x1}, 0x20) 00:37:01 executing program 4: io_setup(0x81, &(0x7f0000000180)) io_setup(0x1, &(0x7f0000000300)) io_setup(0x7, &(0x7f0000000200)) [ 775.880132][T28442] FAT-fs (loop3): Unrecognized mount option "obj_type=" or missing value 00:37:01 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000002c0)="1c", 0x1, 0x1000}, {&(0x7f0000000400)="b9", 0x1}], 0x0, 0x0) 00:37:01 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[{&(0x7f00000001c0)="ee", 0x1}], 0x0, 0x0) 00:37:01 executing program 1: waitid(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 00:37:01 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 00:37:01 executing program 0: request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000280)='keyring\x00', 0x0) [ 776.189728][T28469] loop2: detected capacity change from 0 to 16 00:37:01 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') 00:37:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0xffffffffffffffff, 0x0) 00:37:01 executing program 4: syz_open_dev$vcsu(&(0x7f0000001bc0)='/dev/vcsu#\x00', 0x1, 0x20001) [ 776.304404][T28469] loop2: detected capacity change from 0 to 16 00:37:01 executing program 1: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 00:37:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 00:37:02 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/mnt\x00') 00:37:02 executing program 5: io_setup(0x81, &(0x7f0000000180)=0x0) io_getevents(r0, 0x2000010000000f, 0x0, 0x0, 0x0) 00:37:02 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) 00:37:02 executing program 0: timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) 00:37:02 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f0000000100), 0x0) 00:37:02 executing program 2: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80400) 00:37:02 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:37:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5451, 0x0) 00:37:02 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000300)) 00:37:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={0x0}}, 0x0) 00:37:02 executing program 4: ioprio_set$uid(0x3, 0xee01, 0x0) 00:37:02 executing program 2: io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:37:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 00:37:02 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) 00:37:02 executing program 1: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="8d", 0x1, 0xfffffffffffffff8) 00:37:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x808}, 0x40) 00:37:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x2, &(0x7f0000000fc0)=[{}, {0x1ff}]}) 00:37:02 executing program 2: statx(0xffffffffffffffff, 0x0, 0xc5516a6026164ae7, 0x0, 0x0) 00:37:03 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 00:37:03 executing program 0: syz_open_dev$mouse(&(0x7f0000000980)='/dev/input/mouse#\x00', 0x0, 0x10d1c1) 00:37:03 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1241, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}}) 00:37:03 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/mnt\x00') 00:37:03 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 00:37:03 executing program 3: io_setup(0xfffffe00, &(0x7f0000000000)) 00:37:03 executing program 2: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000900)=""/88, 0x58) 00:37:03 executing program 1: syz_mount_image$fuse(&(0x7f0000001640)='fuse\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}}) 00:37:03 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}, 0x0) 00:37:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x54, &(0x7f0000000140)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x114) 00:37:03 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)=""/88, 0x58) 00:37:03 executing program 3: linkat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:37:03 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00', 0xffffffffffffffff) [ 777.950729][T28561] fuse: Bad value for 'fd' 00:37:03 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0}) [ 777.977742][T28561] fuse: Bad value for 'fd' 00:37:03 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x161200, 0x0) 00:37:03 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}, {&(0x7f0000000600)="93b4b116d47d85b0aa103d59b3a40fb7a18f2f204cf3cc88aefceabe3578fc0faa4e1b5799698e0fe87b2203d4297cf2fe0b6cfdf14942bb06f533bd85e0e3ecb5ff95c437b09b98e8b96c37aa434b18bf05b6785def4183b4e562f03fe5563d6cb017b4046133b329d3a71757de179edd5c90c99bef797380e52b6575413a7f860f8284382eecc8c1d5c9516e9c6d05434677cc98d88e321db7c137310dc5af6e6285a2262abd806a892a8e91cf3429831f41f9e7c8ffb42abac4d33d47bda55eb199c87772e23c90a83ba0f43da1f7cb8e54e2a51f4ec62b29e3197e30db", 0xdf}], 0x0, 0x0) 00:37:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) gettid() mlockall(0x5) 00:37:03 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8200, 0x0) 00:37:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000980)=@abs={0x1}, 0x6e) 00:37:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 00:37:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000004080)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004040)={0x0}}, 0x0) 00:37:03 executing program 1: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}}) 00:37:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:37:04 executing program 2: socket(0x1, 0x0, 0xfdd6) 00:37:04 executing program 0: syz_open_dev$loop(&(0x7f0000001380)='/dev/loop#\x00', 0x0, 0x402) 00:37:04 executing program 4: request_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffe) [ 778.696975][T28594] fuse: Bad value for 'fd' [ 778.728828][T28594] fuse: Bad value for 'fd' 00:37:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) 00:37:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) 00:37:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) 00:37:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}]}) 00:37:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00'}) 00:37:04 executing program 3: syz_open_dev$vcsu(&(0x7f0000001bc0)='/dev/vcsu#\x00', 0x0, 0x20001) 00:37:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001e40)=[{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001a80)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}], 0x1, 0x0) [ 779.053117][T28612] ptrace attach of "/root/syz-executor.2"[28609] was attempted by "/root/syz-executor.2"[28612] 00:37:04 executing program 2: io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={[0x78]}, 0x8}) 00:37:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@rights={{0x10}}], 0x10}], 0x1, 0xd1) 00:37:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) 00:37:04 executing program 3: syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0xb8, 0x84001) 00:37:04 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:37:04 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000300)="e72d6606c9f4e5e76c1dc0d3f5150591bf83601e3f6cecfbfc6eafeb8e70d103f0533feb776abe572a", 0x29, 0xfd8}], 0x0, 0x0) 00:37:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3ff, @any, 0x0, 0x1}, 0xe) 00:37:05 executing program 1: request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 00:37:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000001358a3"], 0x78}}, 0x0) 00:37:05 executing program 2: syz_mount_image$fuse(&(0x7f0000000400)='fuse\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 00:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "2c11e6507b5ea2440051ca0d1a9aaee8"}]}, 0x48}}, 0x0) 00:37:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe) 00:37:05 executing program 0: ioprio_set$uid(0x3, 0x0, 0x4004) [ 780.179266][T28649] fuse: Bad value for 'fd' 00:37:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @xdp, @l2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 780.217821][T28649] fuse: Bad value for 'fd' 00:37:05 executing program 4: select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x8}, &(0x7f0000000140)) 00:37:05 executing program 3: syz_mount_image$fuse(&(0x7f0000000540)='fuse\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}]}}) 00:37:05 executing program 2: lstat(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}}) 00:37:05 executing program 5: r0 = epoll_create(0x776) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x100000001]}, 0x8) 00:37:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x1883, 0x0) [ 780.469340][T28659] fuse: Bad value for 'fd' [ 780.491063][T28659] fuse: Bad value for 'fd' 00:37:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x8}]}) 00:37:06 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) add_key$user(&(0x7f0000000100)='user\x00', 0x0, 0x0, 0x0, r0) 00:37:06 executing program 4: mount$9p_fd(0x0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x0) 00:37:06 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001600)=[{&(0x7f0000000080)=' ', 0x1}, {&(0x7f0000000600)="93b4b116d47d85b0aa103d59b3a40fb7a18f2f204cf3cc88aefceabe3578fc0faa4e1b5799698e0fe87b2203d4297cf2fe0b6cfdf14942bb06f533bd85e0e3ecb5ff95c437b09b98e8b96c37aa434b18bf05b6785def4183b4e562f03fe5563d6cb017b4046133b329d3a71757de179edd5c90", 0x73}], 0x0, 0x0) [ 780.652468][T28665] fuse: Bad value for 'fd' 00:37:06 executing program 1: syz_open_dev$mouse(&(0x7f0000000980)='/dev/input/mouse#\x00', 0x0, 0x0) 00:37:06 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) 00:37:06 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x0, 0x6}) 00:37:06 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x2, &(0x7f0000000fc0)=[{}, {}]}) 00:37:06 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/cpuinfo\x00', 0x0, 0x0) 00:37:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f00000001c0)) 00:37:06 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) 00:37:06 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000240)={0x0, "ba5b398bd18b70cc0ec69bc856b7045c5620e856c967296c3937810b003ebec5dd33a42e3513eb0b66f665eef44d6c62755d1178a7fc6df9e5e521c6fdefcc4c"}, 0x48, 0xfffffffffffffffd) 00:37:06 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) sendmsg$unix(r0, 0x0, 0x0) 00:37:06 executing program 5: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x24100) 00:37:06 executing program 4: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)) pipe2(&(0x7f00000000c0), 0x80800) 00:37:06 executing program 0: r0 = inotify_init() ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 00:37:06 executing program 1: io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x81, &(0x7f0000000180)) 00:37:07 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:37:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'tunl0\x00', 0x0}) 00:37:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) 00:37:07 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, 0x0, 0x0) 00:37:07 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x2000, 0x3, 0x4e0, 0x278, 0x268, 0x300, 0x278, 0x268, 0x470, 0x460, 0x460, 0x470, 0x460, 0x3, 0x0, {[{{@uncond=[0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'hsr0\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) 00:37:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001b7d75"], 0x44}}, 0x0) 00:37:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x78}}, 0x0) 00:37:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00800007000000070000000347"]}) 00:37:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:07 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040), 0x10) 00:37:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 781.954070][T28722] xt_ct_set_helper: 16 callbacks suppressed [ 781.954096][T28722] xt_CT: No such helper "snmp_trap" 00:37:07 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) 00:37:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x8}]}) [ 782.227649][T28735] xt_CT: No such helper "snmp_trap" 00:37:07 executing program 5: syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x400000) 00:37:07 executing program 0: socketpair$unix(0x1, 0x283ed0cd5005f81e, 0x0, 0x0) 00:37:07 executing program 3: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}, 0x2c, {[], [{@subj_role={'subj_role'}}]}}) 00:37:07 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000009f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/59, 0x3b}], 0x1}}], 0x2, 0x0, 0x0) 00:37:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) 00:37:08 executing program 2: syz_mount_image$fuse(&(0x7f0000000400)='fuse\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) [ 782.563014][T28749] fuse: Bad value for 'fd' 00:37:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x2}, {0x0, 0x0, 0x0, 0x4}, {0x9}]}) [ 782.587728][T28749] fuse: Bad value for 'fd' 00:37:08 executing program 0: mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 00:37:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{0x0, 0x0, 0x81}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:37:08 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000300)="e72d6606c9f4e5e76c1dc0d3f5150591bf83601e3f6cecfbfc6eafeb8e70d103f0533feb776abe57", 0x28, 0xfd8}], 0x0, 0x0) 00:37:08 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)="24ebe4c0b5ebc41efb9f675c1d09bbc328", 0x11, 0x81}, {&(0x7f00000001c0)="ee", 0x1}, {&(0x7f00000002c0)="1c3c", 0x2, 0x1000}, {&(0x7f0000000400)="b9", 0x1}, {0x0}], 0x820000, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 782.701428][T28755] fuse: Bad value for 'fd' [ 782.738444][T28755] fuse: Bad value for 'fd' 00:37:08 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f0000000100)={r0}, 0x0) 00:37:08 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x490401, 0x0) 00:37:08 executing program 5: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) [ 782.857937][T28764] loop1: detected capacity change from 0 to 15 [ 782.882699][T28763] loop3: detected capacity change from 0 to 16 00:37:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}, 0x0) [ 782.939190][T28763] FAT-fs (loop3): Unrecognized mount option "obj_type=" or missing value [ 782.946297][T28764] loop1: detected capacity change from 0 to 15 00:37:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) [ 783.025512][T28763] loop3: detected capacity change from 0 to 16 [ 783.041576][T28763] FAT-fs (loop3): Unrecognized mount option "obj_type=" or missing value 00:37:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000280)=';', 0x1, 0x0, 0x0, 0x0) 00:37:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f00000003c0)={[{@shortname_mixed='shortname=mixed'}]}) 00:37:08 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2, 0x0) 00:37:08 executing program 2: fspick(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 00:37:08 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) 00:37:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000001bc0)={&(0x7f00000008c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) 00:37:08 executing program 1: r0 = gettid() waitid(0x2, r0, &(0x7f0000000000), 0x2, 0x0) 00:37:09 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) 00:37:09 executing program 5: gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) gettid() mlockall(0x5) 00:37:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:37:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 00:37:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 00:37:09 executing program 4: getresuid(&(0x7f0000000480), 0x0, 0x0) 00:37:09 executing program 0: getresgid(&(0x7f0000000580), 0x0, 0x0) fork() getresgid(&(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)) 00:37:09 executing program 3: syz_mount_image$fuse(&(0x7f0000000540)='fuse\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 00:37:09 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) 00:37:09 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 00:37:09 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000002c80)={0x0, 0x0, 0x18}, 0x10) [ 784.050899][T28824] fuse: Bad value for 'fd' [ 784.087641][T28824] fuse: Bad value for 'fd' 00:37:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1, 0x81}, {0x0}, {&(0x7f00000002c0)="1c", 0x1, 0x1000}], 0x0, &(0x7f0000000640)={[], [{@obj_type={'obj_type'}}]}) 00:37:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000400)) 00:37:09 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x1ffb80, 0x0) 00:37:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @rand_addr, {[@timestamp_prespec={0x44, 0x4}]}}}}}) 00:37:09 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1c822d83c244c22411b0dce425a9efdba7171135d2f6316c7bd331e41dfcb5b3a08647a5ef7335923a8071b06039cc64761955f734e705bdcd0dd84956baedd7"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) 00:37:09 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000300)) timer_gettime(0x0, &(0x7f0000000340)) [ 784.416312][T28839] loop5: detected capacity change from 0 to 16 00:37:10 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x38}, 0x0) 00:37:10 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x800}) 00:37:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000240)=[{r0, 0xd}, {}], 0x2, 0x0) [ 784.574644][T28839] loop5: detected capacity change from 0 to 16 00:37:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 00:37:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 00:37:10 executing program 5: poll(0x0, 0x0, 0xfffffeff) 00:37:10 executing program 4: openat$incfs(0xffffffffffffffff, 0x0, 0x620000, 0x0) 00:37:10 executing program 3: syz_mount_image$fuse(&(0x7f0000000940)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 00:37:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xc, 0x0, &(0x7f0000000400)) 00:37:10 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 00:37:10 executing program 4: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:37:10 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:'}, &(0x7f0000000080)={0x0, "9535d5c834a69c4387a640508a61b91849e2bc4a453644ab891f6ea23938ddc24498b35a4c5d70aadd30d1babc5c1590bba552143957d7650f7550f430a693cd"}, 0x48, 0xfffffffffffffffe) 00:37:10 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000004400)='/dev/fuse\x00', 0x2, 0x0) 00:37:10 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000004600)='ns/cgroup\x00') 00:37:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000000fc0)=[{0x1ff}]}) 00:37:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 00:37:11 executing program 3: socketpair(0x10, 0x0, 0x3, &(0x7f0000000480)) 00:37:11 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00', r0) 00:37:11 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/snd/timer\x00', 0x840) 00:37:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 00:37:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:37:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000004080)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004040)={&(0x7f0000002a00)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:37:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) 00:37:11 executing program 4: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x8}, 0x0) 00:37:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 00:37:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{}]}) 00:37:11 executing program 5: syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x0, 0xe2203) 00:37:11 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)=[{0x0}], 0x0, 0x0) 00:37:11 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)="24ebe4c0b5ebc41efb9f675c1d09bbc328346bd2c912cbaa3b490862d1054a5770", 0x21, 0x81}, {&(0x7f00000001c0)="ee076e7ae2958d895cadc264470f5193ea5d2e761bbe8a8a2c1c8fe5ef6866f5bc7cce541c0ac599d44fcb31b16057ef3ce73b64c310fa51312e40ec270f491a5868fcac757c1a5252a2ced050a3ce941acf1e222abf046392d5bb019433e172c587746b95af04b1a7172057f8f3fd32443987e5e98810e1146e211b8782be50427f41ce30ac22b83a33a9dd562d0ebd7abf382a9a7f05f7b40594314c0eb9808a48e2ddced7670cd29950fd5ce4adfe7752c12aa00f543626a1898b3bdda427c9f5d87a86c9b4", 0xc7}, {&(0x7f00000002c0)="1c", 0x1, 0x1000}, {0x0}, {0x0, 0x0, 0x9}], 0x820000, &(0x7f0000000640)={[{@fat=@debug='debug'}], [{@obj_type={'obj_type'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 00:37:11 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}, {&(0x7f00000001c0)="ee", 0x1}, {&(0x7f0000000400)="b9", 0x1}], 0x0, 0x0) 00:37:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 00:37:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000000fc0)=[{}]}) 00:37:11 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x80000, 0x0, &(0x7f0000004780)) 00:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "2c11e6507b5ea2440051ca0d1a9aaee8"}]}, 0x48}}, 0x0) [ 786.385176][T28922] loop3: detected capacity change from 0 to 16 00:37:12 executing program 0: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffd) 00:37:12 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000001540)='.log\x00', 0x0, 0x0) [ 786.494429][T28922] loop3: detected capacity change from 0 to 16 00:37:12 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) 00:37:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 00:37:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}}) 00:37:12 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 00:37:12 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vsock\x00', 0x80040, 0x0) 00:37:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 00:37:12 executing program 3: fspick(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:12 executing program 2: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x6}) 00:37:12 executing program 1: syz_mount_image$fuse(&(0x7f0000000400)='fuse\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000000540)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 00:37:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 00:37:12 executing program 0: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x41) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f00000008c0)=""/29, &(0x7f0000000900)=0x1d) socket$packet(0x11, 0x3, 0x300) 00:37:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:12 executing program 3: openat$incfs(0xffffffffffffffff, 0x0, 0x40, 0x0) 00:37:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) [ 787.142010][T28966] fuse: Bad value for 'fd' [ 787.165862][T28966] fuse: Bad value for 'fd' 00:37:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000440)=""/4093, 0x9b, 0xffd, 0x1}, 0x20) 00:37:12 executing program 1: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:37:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000640)) 00:37:12 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 00:37:12 executing program 3: fspick(0xffffffffffffffff, 0x0, 0x0) 00:37:13 executing program 4: select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:37:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xd, 0x0, &(0x7f0000000400)) [ 787.491556][T28983] FAT-fs (loop5): bogus number of reserved sectors [ 787.551028][T28983] FAT-fs (loop5): Can't find a valid FAT filesystem 00:37:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000004f40)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:37:13 executing program 0: getresuid(&(0x7f0000000480), &(0x7f00000004c0), 0x0) 00:37:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1000}, 0xe) 00:37:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000780)=@abs, 0x6e) 00:37:13 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 00:37:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4095) 00:37:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00'}) [ 788.202622][T28983] FAT-fs (loop5): bogus number of reserved sectors [ 788.231752][T28983] FAT-fs (loop5): Can't find a valid FAT filesystem 00:37:13 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)='$', 0x1}, {&(0x7f00000001c0)="ee076e7ae2958d895cadc264470f5193ea5d2e761bbe8a8a2c1c8fe5ef6866f5bc7cce541c0ac599d44fcb31b16057ef3ce73b64c310fa51312e40ec270f491a5868fcac757c1a5252a2ced050a3ce941acf1e222abf046392d5bb019433e172c587746b95af04b1a7172057f8f3fd32443987e5e98810e1146e211b8782be50427f41ce30ac22b8", 0x88}, {&(0x7f00000002c0)="1c3c08", 0x3, 0x1000}, {0x0}, {0x0, 0x0, 0x9}], 0x820000, &(0x7f0000000640)={[], [{@obj_type={'obj_type'}}]}) 00:37:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:13 executing program 2: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 00:37:14 executing program 4: r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 00:37:14 executing program 1: pipe2(&(0x7f0000000740), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840)='TIPCv2\x00', 0xffffffffffffffff) [ 788.673239][T29023] loop5: detected capacity change from 0 to 16 00:37:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000004f40)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:37:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x716}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f00000003c0)) 00:37:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x4044096) 00:37:14 executing program 4: socketpair(0x26, 0x5, 0x800, &(0x7f0000000940)) 00:37:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 00:37:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) 00:37:14 executing program 0: pipe(&(0x7f00000005c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 00:37:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00', r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:37:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_stats}) 00:37:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14}, 0x40) 00:37:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000004f40)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={&(0x7f0000001d80)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000006d80)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 00:37:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, 0x0, 0x0) 00:37:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00', r0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x4040894) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20000005) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 00:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002140)='SEG6\x00', 0xffffffffffffffff) 00:37:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 00:37:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x0) 00:37:16 executing program 0: bpf$BPF_PROG_TEST_RUN(0x22, 0x0, 0x0) 00:37:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000700)={0x0, @l2tp={0x2, 0x0, @empty}, @l2, @l2tp={0x2, 0x0, @private=0xa010101}}) 00:37:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x716}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x0) 00:37:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000004f40)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:37:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x228, 0x228, 0x340, 0x228, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@mcast2, @private0, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 00:37:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}, 0x4008800) 00:37:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x228, 0x228, 0x340, 0x228, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@mcast2, @private0, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}, {0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 00:37:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x4c00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:17 executing program 1: bpf$BPF_PROG_TEST_RUN(0x12, 0x0, 0x0) [ 791.858112][T29101] x_tables: duplicate underflow at hook 1 00:37:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x101, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 00:37:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 00:37:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x20000720, 0x228, 0x228, 0x340, 0x228, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@mcast2, @private0, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 00:37:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x103, 0x1}, 0x40) 00:37:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000100)='Z', 0x1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000140)='\r', 0x1}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 00:37:17 executing program 2: pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r0, 0x0, 0x0) 00:37:18 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003600)={0x0}, 0x10) 00:37:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000680)=""/172, 0xac}], 0x2}, 0x0) 00:37:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x101, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 00:37:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:37:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}, 0x4008800) 00:37:18 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x0) 00:37:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001400)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:18 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 00:37:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001980)=[{&(0x7f0000000080)=@abs={0x1}, 0x6e, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="92", 0x1}, {&(0x7f0000000100)="a3", 0x1}], 0x3, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}], 0x1, 0x0) 00:37:18 executing program 5: socket$inet(0x2, 0x0, 0xcee3) 00:37:18 executing program 1: bpf$BPF_PROG_TEST_RUN(0x3, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0xa0) 00:37:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 00:37:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 00:37:19 executing program 4: bpf$BPF_PROG_TEST_RUN(0xe, 0x0, 0x0) 00:37:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000004c0)={@ipv4={[], [], @dev}}, 0x14) 00:37:19 executing program 2: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000080)) 00:37:19 executing program 1: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)) 00:37:19 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000000), 0xc) 00:37:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000000c0), 0x4) 00:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={&(0x7f0000001d80)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xa9}]}}}], 0x18}, 0x0) 00:37:19 executing program 5: bpf$BPF_PROG_TEST_RUN(0x14, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0x48) 00:37:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) 00:37:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x228, 0x228, 0x340, 0x228, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@eui64={{0x28, 'eui64\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@mcast2, @private0, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 00:37:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) 00:37:19 executing program 3: bpf$BPF_PROG_TEST_RUN(0x23, 0x0, 0x0) 00:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={&(0x7f0000001d80)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 00:37:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:37:19 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:37:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x228, 0x228, 0x340, 0x228, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@mcast2, @private0, [], [], 'caif0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@loopback}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:37:19 executing program 0: bpf$BPF_PROG_TEST_RUN(0x6, 0x0, 0x0) 00:37:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x40) 00:37:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0) 00:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={0x0, 0x0, 0x0}, 0x0) connect(r0, &(0x7f0000000080)=@nl=@unspec, 0x80) 00:37:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:37:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={&(0x7f0000001d80)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x0) 00:37:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:37:20 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000a40)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 00:37:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, 0x0, 0x600) 00:37:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x38}}) 00:37:20 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00', r0) 00:37:20 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 00:37:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x5ff}, 0x40) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:37:20 executing program 1: bpf$BPF_PROG_TEST_RUN(0xd, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0x48) 00:37:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0x1}, 0x40) 00:37:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f00000001c0)=@raw=[@func], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000180)=@raw=[@btf_id], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x2) 00:37:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:37:20 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:37:20 executing program 4: bpf$BPF_PROG_TEST_RUN(0x13, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0x48) 00:37:20 executing program 0: bpf$BPF_PROG_TEST_RUN(0x2, 0x0, 0x0) 00:37:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 00:37:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x2, &(0x7f0000001240)=' ') 00:37:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:21 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000), 0x8) pipe(&(0x7f0000000ac0)) 00:37:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)="27c6acf12226c5f516baf8507049bd902530dc2daa898db934e51a3fe12a9b266879e44a97551c9c8f977bfb76e87b86d7", 0x31}, {&(0x7f0000000100)="5acfd3b3c8569baad77d8cac1f875e059833", 0x12}, {&(0x7f0000000280)="17f124b5e4eeaea1b0d2b9e14c2a7def345e4f1e3df99821d81ee508fd87917060a277957a74da5cb495a75934730e53387811b3016b16155b857bbd071b885fa1a22e94d8bbeae1aeb417d5dfdc27ed922da6142f60cbbca960ae92a22aa1821fca89e8777c1961e172b26c4e69849d32d8e803fe28300f2dcb8716460c37fc5248654a40dcbc82894c3a6ae25cb71ba9772a63343140bbbed13f8739cee901061c0d480d09286ad1da59841926d2af0ca4a6c68f48ecb9c5d65c", 0xbb}, {&(0x7f0000000340)="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", 0xf03}], 0x4}}], 0x1, 0x0) 00:37:21 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000400) 00:37:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:21 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$inet(0x2, 0xa, 0xcee3) 00:37:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@map]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:37:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:37:21 executing program 2: bpf$BPF_PROG_TEST_RUN(0x6, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0x48) 00:37:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) [ 796.070338][T29272] IPVS: ftp: loaded support on port[0] = 21 00:37:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0xeb1c, 0x3f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 00:37:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000006e00)={&(0x7f0000000000)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0xf}, 0x0) 00:37:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00'}, 0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 00:37:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0xeb1c, 0x3f}, 0x40) 00:37:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x101, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 796.430340][T29307] IPVS: ftp: loaded support on port[0] = 21 00:37:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x38}}, 0x0) 00:37:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0x400000, 0x3f}, 0x40) 00:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) 00:37:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x0) 00:37:25 executing program 2: pipe(&(0x7f0000000a40)={0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00', r0) 00:37:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 00:37:25 executing program 4: bpf$BPF_PROG_TEST_RUN(0x22, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0), 0x0}, 0x48) 00:37:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01090000000b0000000005"], 0x24}}, 0x0) 00:37:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4c4, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:37:25 executing program 3: socketpair(0x2e, 0x80000, 0x0, &(0x7f0000000000)) 00:37:25 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xaa, &(0x7f0000000ac0)=@generic={0x8, 0x0, 0xa2, "082924ea", "b013bf94d653f80382b29063f266c43cedfc91d235c2c7144b5bb046d4892bb0e90cea869b75a66283ddb05be0213fcafe75463367f0e8859c6992899c2ee1f622e01940c27b74b21bc2b4179ca407053ef895a6c7c71c9fc6735629de4049077959a6e718bede9f0f21529f9313e1f182932a1fcd513baa9d854eb062ce2ac0f547a91e62e20a31471acf0ce72e6bd3a31a6297972a28cfabac625428642d36063f"}) 00:37:25 executing program 4: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x80000) [ 799.832426][T29376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:25 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) [ 799.911412][T29379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 800.244081][ T9743] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 800.354289][ T9744] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 800.604373][ T9744] usb 3-1: Using ep0 maxpacket: 16 [ 800.725096][ T9744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.751384][ T9744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.776479][ T9744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 800.795006][ T9743] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 800.807948][ T9744] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 800.819259][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.838723][ T9743] usb 1-1: Product: syz [ 800.845704][ T9744] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 800.864142][ T9743] usb 1-1: Manufacturer: syz [ 800.873593][ T9744] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 800.884244][ T9743] usb 1-1: SerialNumber: syz [ 800.947347][ T9743] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 801.074542][ T9744] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.083758][ T9744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.094910][ T9744] usb 3-1: Product: syz [ 801.099374][ T9744] usb 3-1: Manufacturer: syz [ 801.105205][ T9744] usb 3-1: SerialNumber: syz [ 801.145544][ T9744] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 801.361159][ T9744] usb 3-1: USB disconnect, device number 28 00:37:27 executing program 5: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0xe4e000000000000, 0x80000) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000140)="91f2bddc0ced590efef7cb1851de5bcb14ad8a84cd4271fe41ddffb262d4b6d50e6ced1bd786a7edb14ecb2931c6b30430b0c3a4acb809c3e777178af4b2d3560e5550a0a3ed9212eedadd328eeb06b4eac56f9488dd75d942b8c448968f90ab2cb36744f83040c6c4cc4846edfba9d6822d232427ca51851b6bee8dfefdec657eee88") r0 = syz_open_dev$hidraw(&(0x7f0000000240)='/dev/hidraw#\x00', 0x6, 0x1) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000280)={0xb16, "acc251aac140fb3d896cc4acd9e20f4d514a1d147954ed49fd803d6fc926b43b1778730963d9d54b76d60902f90188e6c02b1ec511c77e6f7ef05344db010ec67865321f3a0272d577db04842d8bbcbd21a1735265f1ed62d28bac94c8589fd58d4c3c935ea4c5ebf78718c9c318624adf8913ee8f7666b3b9109beed06e5c9d365d0ff70d98e0b35b623691cbcbe2a32e7dfa549aed162c5c60cee33c21d2defbcefdec238db1606d4c568c3616736cb9e0aaa3cb2edf0e630012175a7d668f13195a59ff87f788e3aec4e1d7593fa1adef609241f45afde51109aa8531f16e3f5d3b98b1c22e74fa2fc3bb5df81d39f81d4ae8575b2d968febc871782d3c8b8956a110218642115e0db3471fb93c6ffb6e4f0398bc0f684a7337e0c5ac854810577a66b488038a8bb2114f7d4361fc890be85529ec92c395024bb93c5beb63ceeabb368405bbccdfda47217421d297de7caf7fe1181ea7a14fd01fc4673ca9e35df69e0c7286d29e706e6ac7d11bec307127629b0d90de12aea7c4409f900f20010a996b8eff5a50d0ead7268e3ca6d0864f1b9f8125236ecd2b26986bc6c06452100db595ccda73bd155729c50aaa632942ab6ee01443522a2963799024716384f9fb8127faf4bbee84e05acb7ba86d13ccbc2db65c06f4d0c99b687e46f1f078189258f4f98bada8b6b5638ef4d8e556e72f4b84193dc94ad066a8f00a0c13d550d9d45d0f175cfe80504fee077e444e9e37a0b1316fc5c652ab775f80013c43b43cfe429391966e985faa1631a0b3ffe47964a1ed8178144eaab335682991313278e15fe54cc201f57719bcd04194680dc90ce5209c5bbbe1896a8a997f592f2671bfdd55a81365fbaa02d3b58df3017170f2fabc8353dcdf38907b0c3264a47b8b3b715807b51cb1a1c5c986513b3fc61b61eafd7e4aa314c5d93554b50b03a5891e12579cff725159b25429e762d8a476fea3f89f662052ddb0c99b97f69fbda04f34cc0cca6bf4ec7bdbdb04fa77738872e8dab30457dd544fb768b2067c0ada550e6ab8692b6194674b22746feacdb27f6e2155eb7c8bf3d6356df0a6e2420bbdfde4878a20d6077c1b5cc4edbd791b08b46c73176f16daceb67e1a989fa79ebf973a151d89a82904b7002df09dd5f531593f78a39f191d909b8571feee97963b9315e7b13ccfaca2d16e6046dc1a89d30ff675388a736ea556485a9835792e504ff67fa90f020043a7f994eda932bf2ece46a01c4b46c156871bc6e56d6826f8f5844736652c5d7bf277963e4dfaa578ce34ed0901d6edfdb02c543cf6754b201db7dd5892c589e7abcc3232bb8287a13cb9f8ebcf9116c1eefe0c445976b1e88476960fd58a19afcbb5cb081e0258aedf12deba722f358b0cebfb050411df1772422a84ef2e04e38c5e39395598aa5b7a31d8859451fa002d0c87c67ff783484c49951300d3b5b9e1e0d119e88eb1ebd24037b1b3835097a18cc048e6b9fa4302a828619c5070a64a5eeb2e655bd4541c9e2fe6e72410a74ba8f0a6082f2dea2be4ed2059557cab85746ac7e61ee31a55d0df3282a3789caddd813696b5eee7e3275273b9dbc25cacd58ca8366d19e081bebc45fbba7a5fc4a835d8a1e63101c160dd0fb4abf0d78828cfc5cae6ccc7e677fd5c840fe092e41b08c771c5db045e1af6efff79efa9cdf2c1bd49c0813141b913983a1c3013812b2661592c4165f7e5cd5ee77993e9767bf10db6c968aba408ca72ee0d1b95bcfe1a7084a93dc906e7c8fa6b13f4fe115e263acc2072c915f08dce99b5083a38426a3cdfdeb6bdb316304ad6ee034f29146e5f6bf6f62740ebafb566de837f5479d771d689dde5b7de0aa2a69fff2c72a58738bc6f2ce31db6ad7f3ef19f270efc6468393fb0e2bed4075a487c8b5bcac018db74bbaf9c0b80cf69ac4c2cb218751a4d0af1dce0ffdc5aff08891f93f972ca3fafb2bda253563fc18a94a978dac76d2b50d42cb01a97db45ed25bf3260f299d2ae97178a4139037d29d13c8b5cf927be5d60225fddce28392c30b2b1004562e4e1fb99ebfad35381636d1e45f1278af6367810d028c062229b3b5fd70d1619d094195a10ac980119a4a8cf1b053c615f76ddc15e2fec3e2f9f4b890d0c523c676a29210bfef4f0c9d05911a52b669a1db017409080f3492094239cb3066a7525be667ff376ab0200dcecb0f14d3658c8d51cdf7b9dd7fa84407f8d4f352082f5732f37bcf896997dd2db2b0b186daa8c499b879e26473b9dae43d52c864836b900e39b2b14975a9bab427cb868518698d3f804fbe6a094d03d62050e93e98f03dbbbdcae20368e0d835920c120babbb1f9aaf5c04b7cb8db11fa3af3d6c5f5d3872529494f497dc269fdcd0bdb5198a201db81436e2f5a5dd2a57dc100c7c10ddc407b782fbc00aadca4cd608e827cf99ad0e27c124d470c5d25caca1b7ed0c0644f58928fe4065edd169a247f42eebbb6c51a1c7089a7b5c495805844d4022b4542a4a8d62d49c33e7fde6e29151aae2d462d8026f5e4f042c002de97ec23e4dd32488249938b843cc4371edf2dccce5200cc76d8440aea7970d6266d3f440f913ec78483684ae9925c15494d4f90069fb1f93ea4c0910591c7da3d693ea776acbc649c8fb416d452b67d0d6ef0841597b6a04e4245e2308aae92a6ccd7b0f28ec91f45e69556faaec1e15a876a5b668db8a1948d2bd934ad82859266a8f37721268e1376f9fcf7cdb12249f03a2e2e133808e81e56a4c53ef55997cbf32c0d5eb1788dc33e9907a9ff5896371a14cbffb9207a5489bc0834fc38c7d259c22cac577336d3510ed1a1079ea49289a92095900073296a29f3849d48fb1619159c52ce505c557406d0860021dd516c935f8b68a18276ff6775f3f030deb48cfafca9c63128537a77475e6006f40622e3595cee037143acb527bf9c9c4434f8fe61e7ac11780ed95daf93498cdc63ce9ebaec539df770c297e9351c69219c8ab7fb2fc1bdf833958a625ea26c06a3045c588eed4ce48fd9d4aaf8ef6a8478e416437b16a917fa4445bf1d3aa0e0dc259f860e6e45bd1de11a977a3c10177a095fce95c475992a26a8ac10d88d9d0011353d12a8c5b55bb196aa3aa3dea89126f42e12af631c8078f24f08bbaec1e9528b000563ac5e2d580ed66aaf0deb80c61def87dc6741b1e3973f6254bd59818d0abbd7a217beb28b2d20ccdbfa756a875c3145bfda4fbda72d93f151a8234caebb1778d411bf8bb0d1d97604c221a41279709f06e0d03e76aa431ac150bf61318594cc8b4343759a86d46c282b2172d7e347a9b5819255490b923e59c01c8623b3b52702c98202b68e214413a1d0b165fae3fc91fb7324b985d668138b9337b638e4415c41e3ed1785cc22618104f2c7e83a8ad77096771b5d116f2f0d49b244b26844488d825b052fbf2ff4610e1f213530c4d6f2c92567cbadf38f865e660b0ffe7f8f03195abb2c3973eb15f7dca888e1f9764554697186e861b8b04c99163b8be5b3fea66262a97cfe9a627a989a441ac924a893f48452bc984c0a9555db2daba82870f46c8b1844c2e7e7240274042be266b58eb7ae83fbd2ee25ebaf98b6706a4ea7f8a5616c6c884be9741778bc1ac8f161d5fd25b87bd8ce9afa3bb9de7929c081355afb7fde4052882318235d32ec3fc21795846c28dc0bcdbdaa1cf778d8a928abfc7e3c8f2f8655d6359cbf0683775f1ff60887152265f1f33c44c4854b9e1371728b2f78c799f23f1f31b2e1aa7284945e655ee42d29568726d62044298d48b3422d431cad0b734142b0a59a1555c19b5bb8b5c208bbd1c4ddbddb228362cd638bbc5100ca5db122e81d063ec03c8736aee41d8bdce0f1b9fb390017cf465bd52e3e1c7fd7cb3c2830af59b7a28fcaf9eaa721c7b79f7a3ea0382053880fe1c6750e1bccf8a863859eb5a9c26f1dc19b1b1537291d5085e73637b116d4a71b10404d59bd9eb097b612a4c7c91fcd6a2770"}) r1 = syz_open_dev$hidraw(&(0x7f0000000e00)='/dev/hidraw#\x00', 0x7, 0x30041) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000e40)={0xd66, "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"}) syz_open_dev$hidraw(&(0x7f0000001cc0)='/dev/hidraw#\x00', 0x9, 0x4000) syz_usb_connect$cdc_ecm(0x3, 0x5f, &(0x7f0000001d40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x90, 0x5c, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xcc, {{0x9, 0x24, 0x6, 0x0, 0x0, "8b997e48"}, {0x5, 0x24, 0x0, 0x9722}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x20, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x270, 0x7, 0x6, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0xf3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x79, &(0x7f0000001e40)=@string={0x79, 0x3, "d3fde6b1d692f8d4b2be283270baa4fbf9f633b70d55c45cb82763f97c4084f0dea4d184934f47c5ff4d9cdef14808ab333afb84dc70d896d07b36dcd9507b717e38c87260164c1e35d6dcd790dbe6bd7564b8916ef40ab8733f5ecd3ce91c92a01b629b82cff73217117952cf264c6331b4c397e543e7"}}, {0x9a, &(0x7f0000001ec0)=@string={0x9a, 0x3, "8b411fc2d806eb07a1da9456f25d207561233a83324f72221c9d50d65b80a39b131e551f7a25cb2ae19c59a67177a94267f6369f6a85c19ba029b9258db8a4d2e0f6cbc2c1e5f96e1a35b87499cf6dd2f63813669ded004420dd867b86b9e736e16b90749bc95e0c903d63e076379f05d1a4599c26a4ef97d1ee46174b9c8b84226163ac738f882c6cad44c6384bc6ec0e894e779f0c8183"}}, {0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x810}}, {0xee, &(0x7f0000002000)=@string={0xee, 0x3, "a58c3097cc61334c996020509b6cb5672a20790f6373f7b8403d6bd43dba6e32fbc75d9855166b65be7ab387046a451f1abe9ed6da803af98e88016c9dbca2743a0a1282d34fffd03ca30d55ebe28b223451371bcad2e4d71d004b5b3945b0fd25497b5f264cecee3ab160120afd0f17b242f1c4a00518782c3b5a703bf1bcb6e8dd49577381c75554d309f6b26b252930c380d12204bff5a68ba22cd31260e761ea40b898eff18256b0ff4b7c742b260362edf1cb999bb50801fb1aa6a92eb99e4328c648298e383f0f6002b91812d802bf9b90761938377679958badf59153c16cd673c7ade268599f38e6"}}, {0xbc, &(0x7f0000002100)=@string={0xbc, 0x3, "92acc4a751edb4e4b540a9a40a2eaf7fd029ed24bfb0de9719da037ea9ef3f3d847c41419346a77390065966b07e4015abca68493989505bbeeb4e8897cd6567cfc543492ba8643a7138dbba7525e91a13b5d18de7d6fe5646b064661afc266418aee306669f47953cf0aa34dc2b93ce678b33a0a643bd6dee7c813813962c6ea38243d18662390d6f873ce99ad9f6d527a7aa550efa22309f7ab93d77dbd94988f8acf2f551bf886be582498192728c627744680848a6d1e69a"}}]}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000002280)) read$hidraw(0xffffffffffffffff, &(0x7f0000002640)=""/233, 0xe9) write$hidraw(0xffffffffffffffff, &(0x7f0000002740)="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", 0x1000) 00:37:27 executing program 4: syz_open_dev$hidraw(&(0x7f0000000240)='/dev/hidraw#\x00', 0x6, 0x1) 00:37:27 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:37:27 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 801.614328][ T9743] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 00:37:27 executing program 4: syz_open_dev$hidraw(&(0x7f0000000e00)='/dev/hidraw#\x00', 0x0, 0x30041) [ 801.894443][ T9736] usb 4-1: new high-speed USB device number 11 using dummy_hcd 00:37:27 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000001ec0)=@string={0x2}}]}) [ 801.974161][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 802.164430][ T9736] usb 4-1: Using ep0 maxpacket: 16 [ 802.267503][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 802.325283][ T9736] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 802.426553][ T8] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023 [ 802.455828][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 00:37:28 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0}) [ 802.656230][ T9736] usb 4-1: string descriptor 0 read error: -22 [ 802.662578][ T9736] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.684980][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.699142][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.710357][T29382] udc-core: couldn't find an available UDC or it's busy [ 802.714088][ T9736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.735100][T29382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 802.736699][ T8] usb 6-1: Product: à  [ 802.792089][ T8] usb 6-1: Manufacturer: 䆋숟ۘ߫嚔已甠â¡èŒºä¼²â‰²é´œí™è›é®£á¸“ὕ╺⫋鳡ꙙç±äŠ©ï™§é¼¶è•ªé¯â¦ â–¹ë¢íŠ¤ï› ì‹‹î—滹㔚璸쾙퉭㣶易î¶ä€ç®†ë¦†ã›§æ¯¡ç’즛౞ã¶î£ã¶ÖŸê“‘é±™ê¦éŸ¯î»‘á†é±‹è’‹æ„¢ê±£è½³â²ˆêµ¬ì™„䬸褎çŽà²ŸèŽ [ 802.818716][ T9736] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 802.896977][ T8] usb 6-1: SerialNumber: 貥霰懌䰳悙倠沛枵‪ཹç£ë£·ãµ€í‘«ë¨½ã‰®ìŸ»é¡á™•æ•«çª¾èž³æ¨„ὅ븚횞胚鷺袎æ°ë²ç’¢à¨ºèˆ’俓탿ꌼå”⊋儴ᬷ틊ퟤ孋䔹ﶰ䤥彻䰦넺በﴊáœäŠ²ì“±Ö ç ˜ã¬¬çšï„»ëš¼å‰è…³å—‡í”殲⤥쌰톀Т讦Ⲣዓî î©¡ë¡€î¾˜è‹±ë–䯿瑼☫戃駋떛Ĉ᫻ꦦ뤮䎞온⥈㢎༿ɠᢹ뼂邛᥶㜸祶讕厑æ³ç–귇棢齙 [ 802.996675][T29421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 803.050708][ T9736] usb 4-1: USB disconnect, device number 11 00:37:28 executing program 2: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x28, &(0x7f0000000000)={[{0x23, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c574499876ed2e267f"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000a00)=@ready={0x0, 0x0, 0x8, "74205984", {0x1, 0x0, 0x3f, 0x9, 0x4}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xaa, &(0x7f0000000ac0)=@generic={0x8, 0x0, 0xa2, "082924ea", "b013bf94d653f80382b29063f266c43cedfc91d235c2c7144b5bb046d4892bb0e90cea869b75a66283ddb05be0213fcafe75463367f0e8859c6992899c2ee1f622e01940c27b74b21bc2b4179ca407053ef895a6c7c71c9fc6735629de4049077959a6e718bede9f0f21529f9313e1f182932a1fcd513baa9d854eb062ce2ac0f547a91e62e20a31471acf0ce72e6bd3a31a6297972a28cfabac625428642d36063f"}) [ 803.338308][ T8] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 803.339914][T29461] udc-core: couldn't find an available UDC or it's busy [ 803.354425][ T9743] usb 1-1: Service connection timeout for: 256 00:37:28 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001d40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x8}}}}]}}]}}, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 803.390160][ T9743] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 803.412363][T29461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 803.413746][ T8] usb 6-1: USB disconnect, device number 6 00:37:29 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xaa, &(0x7f0000000ac0)=@generic={0x8, 0x0, 0xa2, "082924ea", "b013bf94d653f80382b29063f266c43cedfc91d235c2c7144b5bb046d4892bb0e90cea869b75a66283ddb05be0213fcafe75463367f0e8859c6992899c2ee1f622e01940c27b74b21bc2b4179ca407053ef895a6c7c71c9fc6735629de4049077959a6e718bede9f0f21529f9313e1f182932a1fcd513baa9d854eb062ce2ac0f547a91e62e20a31471acf0ce72e6bd3a31a6297972a28cfabac625428642d36063f"}) [ 803.854239][ T9495] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 803.955656][ T4854] usb 1-1: USB disconnect, device number 13 [ 803.968808][ T9743] ath9k_htc: Failed to initialize the device [ 803.990989][ T4854] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)={0x14, 0x14, 0xe31bb37af9b97fbd, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 00:37:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) [ 804.124154][ T9495] usb 4-1: Using ep0 maxpacket: 16 [ 804.204425][ T36] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 804.245007][ T9495] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 804.264278][ T4896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 804.304315][ T9744] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 804.354083][ T4854] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 804.444085][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 804.504795][ T4896] usb 6-1: Using ep0 maxpacket: 16 [ 804.584622][ T9495] usb 4-1: string descriptor 0 read error: -71 [ 804.592218][ T9495] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.605900][ T36] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 804.612128][ T9495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.613539][ T36] usb 2-1: can't read configurations, error -71 [ 804.624227][ T4896] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023 [ 804.664064][ T4896] usb 6-1: config 1 interface 0 has no altsetting 0 [ 804.675573][ T9495] usb 4-1: can't set config #1, error -71 [ 804.697646][ T9495] usb 4-1: USB disconnect, device number 12 00:37:30 executing program 5: socket$inet(0x2, 0xa, 0x4) 00:37:30 executing program 4: getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 00:37:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x0) 00:37:30 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xde) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) [ 804.835061][ T9744] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 804.860616][ T9744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:37:30 executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, 0xfffffffffffffffe, 0x0) 00:37:30 executing program 5: set_mempolicy(0x8002, &(0x7f0000000000)=0x100000003, 0x3195) [ 804.884431][ T4896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.894996][ T4854] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 804.921025][ T4896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.929516][ T4854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.941330][ T9744] usb 3-1: Product: syz [ 804.957850][ T9744] usb 3-1: Manufacturer: syz [ 804.967173][ T4854] usb 1-1: Product: syz [ 804.980531][ T9744] usb 3-1: SerialNumber: syz [ 804.989013][ T4854] usb 1-1: Manufacturer: syz [ 804.994640][ T4896] usb 6-1: can't set config #1, error -71 [ 805.009469][ T4854] usb 1-1: SerialNumber: syz [ 805.018027][ T4896] usb 6-1: USB disconnect, device number 7 00:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 805.065418][ T9744] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 805.088576][ T4854] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 805.704318][ T9743] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 805.714612][ T9744] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 806.739789][T29453] udc-core: couldn't find an available UDC or it's busy [ 806.746901][T29453] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 806.778121][T29472] udc-core: couldn't find an available UDC or it's busy [ 806.791044][T29472] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 806.816350][ T36] usb 1-1: USB disconnect, device number 14 [ 807.168430][ T8] usb 3-1: USB disconnect, device number 29 [ 807.354306][ T9743] usb 3-1: Service connection timeout for: 256 [ 807.360929][ T9743] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 807.380076][ T9743] ath9k_htc: Failed to initialize the device [ 807.389304][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 807.434091][ T9744] usb 1-1: Service connection timeout for: 256 [ 807.441254][ T9744] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 807.451027][ T9744] ath9k_htc: Failed to initialize the device [ 807.458118][ T36] usb 1-1: ath9k_htc: USB layer deinitialized [ 807.687205][T29548] udc-core: couldn't find an available UDC or it's busy [ 807.694600][T29548] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:37:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000010105000000000000000000020000002c00028006000340fcffffff13000180080001007f2cef2ac3"], 0x40}}, 0x0) 00:37:33 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$sock(r0, &(0x7f00000041c0)={&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) 00:37:33 executing program 4: syslog(0x3, &(0x7f0000000280)=""/217, 0xd9) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xc, 0xffffffffffffffff) 00:37:33 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 00:37:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xde) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000040)="ad10d0828eaeeac60837a53b5b8396f3c3657c43ae20b5dcc3d4a971ff6f5938e45fe50bb0319e5a2b1eb3d209b59bbe214fe19b8e758fb978622c0c597f5b359e083473befa5ed15db0507f244cc1aaa612bde4c86b74d9f9cc13c5735861bb67a45ac2dba7e10587ce4ea4f03fe676b2ffbfa730cb3901dd68b0bb3d15f8d600db1d1e003a88e5363d7bdb48c3757bf8f08f44f3fe446e959f3a9d8c2f681890cf5abd4d2a31d7", 0xa8) 00:37:33 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xaa, &(0x7f0000000ac0)=@generic={0x8, 0x0, 0xa2, "082924ea", "b013bf94d653f80382b29063f266c43cedfc91d235c2c7144b5bb046d4892bb0e90cea869b75a66283ddb05be0213fcafe75463367f0e8859c6992899c2ee1f622e01940c27b74b21bc2b4179ca407053ef895a6c7c71c9fc6735629de4049077959a6e718bede9f0f21529f9313e1f182932a1fcd513baa9d854eb062ce2ac0f547a91e62e20a31471acf0ce72e6bd3a31a6297972a28cfabac625428642d36063f"}) [ 807.974141][ T9495] usb 3-1: new high-speed USB device number 30 using dummy_hcd 00:37:33 executing program 5: set_mempolicy(0x0, &(0x7f0000000040), 0x8000) 00:37:33 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xde) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev, @remote, @empty, 0x0, 0x40}) [ 808.133203][T29565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:33 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) [ 808.190400][T29565] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.243789][T29565] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'ip6tnl0\x00', {0x2, 0x0, @dev}}) 00:37:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x11afb880416c9bc9}, 0xc) 00:37:34 executing program 5: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) [ 808.453987][ T36] usb 1-1: new high-speed USB device number 15 using dummy_hcd 00:37:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) 00:37:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) 00:37:34 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = dup(r0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) 00:37:34 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x539683) 00:37:34 executing program 5: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) [ 808.801553][ T3243] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.808026][ T3243] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.985557][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 809.004870][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.024904][ T36] usb 1-1: Product: syz [ 809.036095][ T36] usb 1-1: Manufacturer: syz [ 809.041613][ T36] usb 1-1: SerialNumber: syz [ 809.095515][ T36] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 809.724181][ T36] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 810.799877][T29563] udc-core: couldn't find an available UDC or it's busy [ 810.807373][T29563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 810.825344][ T9743] usb 1-1: USB disconnect, device number 15 00:37:36 executing program 5: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) 00:37:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)={0x14, 0x1f, 0xe31bb37af9b97fbd, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 00:37:36 executing program 4: select(0xfec3, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000180), 0x0) 00:37:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xde) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000180)="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", 0x108) 00:37:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 00:37:36 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xaa, &(0x7f0000000ac0)=@generic={0x8, 0x0, 0xa2, "082924ea", "b013bf94d653f80382b29063f266c43cedfc91d235c2c7144b5bb046d4892bb0e90cea869b75a66283ddb05be0213fcafe75463367f0e8859c6992899c2ee1f622e01940c27b74b21bc2b4179ca407053ef895a6c7c71c9fc6735629de4049077959a6e718bede9f0f21529f9313e1f182932a1fcd513baa9d854eb062ce2ac0f547a91e62e20a31471acf0ce72e6bd3a31a6297972a28cfabac625428642d36063f"}) [ 811.434128][ T36] usb 1-1: Service connection timeout for: 256 [ 811.442961][ T36] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 00:37:37 executing program 5: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) [ 811.491130][ T36] ath9k_htc: Failed to initialize the device [ 811.514484][ T9743] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, "8bfc66387045f29af03b3535bd40d9b4a5fcdf23f6c81254e7891e3afa5fc89e1d1d2cc3af8e1ecb8d50cfe968035eee55cac62da05b1528733ca31f37c23d73", "bd19e6d357628ab28819a35dbf46a1860b6882de270f3c32475d243452228268995ce191dd0889ab1287bb010818016306835f9e3cd0b00f0c1c136082648128", "327c376b5c566e329edcb496cbf101f6d9a13e5648d2828971c8e7b60c0e75dc", [0x0, 0x7f]}) 00:37:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)={0x14, 0x3a, 0x201, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 00:37:37 executing program 2: syz_open_dev$vcsu(0x0, 0x0, 0x0) getresgid(&(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480)) 00:37:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000040)="ea", 0x1}], 0x1}}], 0x1, 0x8850) 00:37:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:37:37 executing program 1: r0 = request_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000500)=""/63, 0x3f}], 0x2, 0x2, 0x40) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='trusted\x00', 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)=']*]{-/(&@k\\\x00', r0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f00000034c0)=""/4111, 0x100f}, {&(0x7f0000002480)=""/4106, 0x100a}], 0x4, 0x80000200, 0xfff) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x80001d00c0d0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r5}, 0x8) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="7661c085bdf5720aabb5a9906b21cf98c35d99df6c4773d82c7a9adb6a2774b9a663c1756787b46d70db77b0b1e561b1bf6ccea5ff316d89051c07f49d05a045bf30638450295897f37e321d6cccd4168b1ac0af251900ce15c90bdcf935ecb8e7e7f33631ee8cdb4fb48fabeb3eb95dd08033fc29e5595944deb39fb719f80d86a631c5a33a85f54281098e31eea082aaa23aacc821482a08648ecc57a3e5ec63b723b7ddc71b464b9e43231955b7a5a010e67775c8cf2f8797df53bacb688fbd1bb4dd6dd31c9b7d6494a36dbfbc0b129b2800", 0xd4, r4) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='[\x00', r4) 00:37:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000000)="ebb9763939789f3a42baee5d4fc7b08bf515a607b12f4fe9ddc1208eac549e9eeb73d21f2bf8d059d22dc55cb31e9c42e91ff48f91cb0efe33b059bff8b7c988a54efd2c66c296ad948f4b02c5379207b2c3a128b23e40bfc63c889b6b2d626fadcf2b72936fb304870925442aa4ea11a8754ba8adc9e312b21469380c1a63f4f9e89422d1a313ab", 0x88) [ 812.014079][ T9743] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 812.111745][T29649] Option '·ÝÇFKžC' to dns_resolver key: bad/missing value 00:37:37 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 00:37:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 00:37:37 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7d84bc", 0x10, 0x11, 0x0, @mcast1, @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 812.575215][ T9743] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 812.597707][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.635210][ T9743] usb 1-1: Product: syz [ 812.639442][ T9743] usb 1-1: Manufacturer: syz [ 812.645965][ T9743] usb 1-1: SerialNumber: syz [ 812.705167][ T9743] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 813.284234][ T9743] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 814.350159][T29629] udc-core: couldn't find an available UDC or it's busy [ 814.357745][T29629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 814.375210][ T9495] usb 1-1: USB disconnect, device number 16 00:37:40 executing program 1: r0 = request_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000500)=""/63, 0x3f}], 0x2, 0x2, 0x40) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='trusted\x00', 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)=']*]{-/(&@k\\\x00', r0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f00000034c0)=""/4111, 0x100f}, {&(0x7f0000002480)=""/4106, 0x100a}], 0x4, 0x80000200, 0xfff) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x80001d00c0d0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r5}, 0x8) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="7661c085bdf5720aabb5a9906b21cf98c35d99df6c4773d82c7a9adb6a2774b9a663c1756787b46d70db77b0b1e561b1bf6ccea5ff316d89051c07f49d05a045bf30638450295897f37e321d6cccd4168b1ac0af251900ce15c90bdcf935ecb8e7e7f33631ee8cdb4fb48fabeb3eb95dd08033fc29e5595944deb39fb719f80d86a631c5a33a85f54281098e31eea082aaa23aacc821482a08648ecc57a3e5ec63b723b7ddc71b464b9e43231955b7a5a010e67775c8cf2f8797df53bacb688fbd1bb4dd6dd31c9b7d6494a36dbfbc0b129b2800", 0xd4, r4) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='[\x00', r4) 00:37:40 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 00:37:40 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$sock(r0, &(0x7f00000041c0)={0x0, 0x0, 0x0}, 0x0) 00:37:40 executing program 4: socket(0x10, 0x3, 0x581) 00:37:40 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000009c0)={0x1, 0x200, 0x80000000}) 00:37:40 executing program 3: getcwd(&(0x7f0000000040)=""/15, 0xf) [ 814.954221][ T9743] usb 1-1: Service connection timeout for: 256 [ 814.960607][ T9743] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 815.005484][ T9743] ath9k_htc: Failed to initialize the device [ 815.020536][ T9495] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:40 executing program 5: fcntl$getflags(0xffffffffffffff9c, 0x0) 00:37:40 executing program 2: pipe(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:37:40 executing program 4: faccessat(0xffffffffffffffff, &(0x7f0000001b40)='./file0\x00', 0x0) [ 815.123111][T29686] Option '·ÝÇFKžC' to dns_resolver key: bad/missing value 00:37:40 executing program 3: readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 00:37:40 executing program 1: r0 = request_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000500)=""/63, 0x3f}], 0x2, 0x2, 0x40) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='trusted\x00', 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)=']*]{-/(&@k\\\x00', r0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f00000034c0)=""/4111, 0x100f}, {&(0x7f0000002480)=""/4106, 0x100a}], 0x4, 0x80000200, 0xfff) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x80001d00c0d0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r5}, 0x8) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="7661c085bdf5720aabb5a9906b21cf98c35d99df6c4773d82c7a9adb6a2774b9a663c1756787b46d70db77b0b1e561b1bf6ccea5ff316d89051c07f49d05a045bf30638450295897f37e321d6cccd4168b1ac0af251900ce15c90bdcf935ecb8e7e7f33631ee8cdb4fb48fabeb3eb95dd08033fc29e5595944deb39fb719f80d86a631c5a33a85f54281098e31eea082aaa23aacc821482a08648ecc57a3e5ec63b723b7ddc71b464b9e43231955b7a5a010e67775c8cf2f8797df53bacb688fbd1bb4dd6dd31c9b7d6494a36dbfbc0b129b2800", 0xd4, r4) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='[\x00', r4) 00:37:40 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) dup(r1) r2 = dup(r0) renameat(r2, &(0x7f0000002b00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002b40)='./file0\x00') 00:37:41 executing program 3: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:37:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000280), 0x568c69a8499d9f7, 0x0, 0x0) [ 815.491242][T29707] Option '·ÝÇFKžC' to dns_resolver key: bad/missing value [ 815.614078][ T9495] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 815.664173][ T36] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 815.854021][ T36] usb 3-1: device descriptor read/64, error 18 [ 816.124162][ T36] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 816.244696][ T9495] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 816.254199][ T9495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.263324][ T9495] usb 1-1: Product: syz [ 816.270529][ T9495] usb 1-1: Manufacturer: syz [ 816.276170][ T9495] usb 1-1: SerialNumber: syz [ 816.334196][ T36] usb 3-1: device descriptor read/64, error 18 [ 816.346031][ T9495] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 816.455652][ T36] usb usb3-port1: attempt power cycle [ 816.974220][ T9495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 817.174095][ T36] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 817.295248][ T36] usb 3-1: Invalid ep0 maxpacket: 0 [ 817.454264][ T36] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 817.544335][ T36] usb 3-1: Invalid ep0 maxpacket: 0 [ 817.550221][ T36] usb usb3-port1: unable to enumerate USB device [ 818.030090][T29694] udc-core: couldn't find an available UDC or it's busy [ 818.039322][T29694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 818.054847][ T8] usb 1-1: USB disconnect, device number 17 00:37:44 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000900)={[{0x87, 0x4e00, "b0f16164be7a5e0c0bddc9dbc6a0d539e7a621245955bb95e84b6cc46b954f099bc29286701287b27ea50951cca78f22d25e22d2e1d2c681cc9ed2768ce23bd47971330231161651267d6612ac540d1855cde2545aaaf4a57449d3286f48d860c4ce62bc401600f26dd4a594a22d90abd3f856d61ac0a2250160527070fe3d18ba080983f1ee22"}]}) 00:37:44 executing program 1: r0 = request_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000500)=""/63, 0x3f}], 0x2, 0x2, 0x40) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='trusted\x00', 0x0) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)=']*]{-/(&@k\\\x00', r0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f00000034c0)=""/4111, 0x100f}, {&(0x7f0000002480)=""/4106, 0x100a}], 0x4, 0x80000200, 0xfff) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x80001d00c0d0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r5}, 0x8) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="7661c085bdf5720aabb5a9906b21cf98c35d99df6c4773d82c7a9adb6a2774b9a663c1756787b46d70db77b0b1e561b1bf6ccea5ff316d89051c07f49d05a045bf30638450295897f37e321d6cccd4168b1ac0af251900ce15c90bdcf935ecb8e7e7f33631ee8cdb4fb48fabeb3eb95dd08033fc29e5595944deb39fb719f80d86a631c5a33a85f54281098e31eea082aaa23aacc821482a08648ecc57a3e5ec63b723b7ddc71b464b9e43231955b7a5a010e67775c8cf2f8797df53bacb688fbd1bb4dd6dd31c9b7d6494a36dbfbc0b129b2800", 0xd4, r4) request_key(&(0x7f0000000200)='.dead\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='[\x00', r4) 00:37:44 executing program 4: connect$unix(0xffffffffffffff9c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0xa) getrlimit(0x0, &(0x7f00000000c0)) 00:37:44 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 00:37:44 executing program 5: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 00:37:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 818.634139][ T9495] usb 1-1: Service connection timeout for: 256 [ 818.641560][ T9495] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 818.651155][T29742] Option '·ÝÇFKžC' to dns_resolver key: bad/missing value 00:37:44 executing program 5: socketpair(0x1, 0x0, 0x1, 0x0) 00:37:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) 00:37:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:37:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 818.690597][ T9495] ath9k_htc: Failed to initialize the device [ 818.729520][ T8] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:44 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000008c0)='/dev/vsock\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r0, 0x4) 00:37:44 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)="a750c5610302c1bf487f43c3cec1a6d458e0918b3d3d15bda181b74776bbf629dd110de10772385e1033a63e231e3c9a891a936211f9293e02cd7b24e4590bd4ef946f7f921ac34acf5f83788f1832e5ba08eec2cef1630211d889d09dc799c3813c8e12af", 0x65}, {&(0x7f0000000300)}, {&(0x7f0000000340)="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", 0xe63}], 0x3, &(0x7f0000002480)=[{0xc}], 0xc}, 0x24004800) [ 819.174251][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 819.704269][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 819.713815][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.727797][ T8] usb 1-1: Product: syz [ 819.731991][ T8] usb 1-1: Manufacturer: syz [ 819.739701][ T8] usb 1-1: SerialNumber: syz [ 819.785150][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 820.444214][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 821.478564][T29749] udc-core: couldn't find an available UDC or it's busy [ 821.486301][T29749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 821.508865][ T9743] usb 1-1: USB disconnect, device number 18 00:37:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x40044581, 0x0) 00:37:47 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000200)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 00:37:47 executing program 5: prctl$PR_SET_SECCOMP(0x28, 0x0, 0x0) 00:37:47 executing program 1: fork() wait4(0x0, 0x0, 0x40000000, 0x0) 00:37:47 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000300)="8c", 0x1}], 0x2}, 0x0) 00:37:47 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) r3 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000880)=""/87) 00:37:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 00:37:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:37:47 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x614083) [ 822.164139][ T8] usb 1-1: Service connection timeout for: 256 [ 822.170379][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 00:37:47 executing program 3: clock_gettime(0x0, &(0x7f0000002100)) [ 822.212787][ T8] ath9k_htc: Failed to initialize the device [ 822.252768][ T9743] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1b}, 0x14}}, 0x0) 00:37:47 executing program 2: syz_io_uring_setup(0x5419, &(0x7f0000000000)={0x0, 0x0, 0x27}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 00:37:47 executing program 5: keyctl$chown(0x4, 0x0, 0xee01, 0xee01) 00:37:48 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x400, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 00:37:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) [ 822.614112][ T9743] usb 1-1: new high-speed USB device number 19 using dummy_hcd 00:37:48 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x5}, &(0x7f0000000400)={0x7}, &(0x7f0000000440)={0x20}, &(0x7f0000000500)={0x0, 0x3938700}, 0x0) 00:37:48 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) [ 823.165353][ T9743] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 823.183155][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.203262][ T9743] usb 1-1: Product: syz [ 823.214278][ T9743] usb 1-1: Manufacturer: syz [ 823.223621][ T9743] usb 1-1: SerialNumber: syz [ 823.275919][ T9743] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 823.864268][ T9743] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 824.909146][T29799] udc-core: couldn't find an available UDC or it's busy [ 824.916550][T29799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 824.931951][ T7] usb 1-1: USB disconnect, device number 19 00:37:50 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x38c, &(0x7f00000003c0)={[{0xd9, 0x4e00, "cafc80c58dd72942a463e53f1122b32eccd1d67042cb0a36866b3f9df36889953d94e6219e8844fdfd1be2a2c58cfe5f1dd8edb1d2b96a3e4a7b633455582cb3ec41d4015ecf7775761f6d7b7939d00e7ca32fd646b12469f50b9a5f3abd6bd83105d55d8ded80563f3519fd15b4f43d38b5a8b5bdcf2d2b5b7efcfc901223b628bd02bae3e62e33b76822271ea0b4a145d3a00252f7b1094968088bc9c436d416d9b599afa95daa803b68e13a7d048b207d54b53084822d0bc61443d2cdb09614f5b8c8f0736eddea1c1b82fd423b78ae7e1e7e1203aa0d73"}, {0x9d, 0x4e00, "8e3a8db809a38da960d34397ddcba64bd54a227bc1896b2a827e2e9f26a541fc0155bcdb960d44e53e0d66499c5560a52ff1bc8f507511c27300cc9be8ec2b5ff77a18e6ca38175f7e4f0b2713a0613c0231fb2a4d7ea129e5903c3f4e6ad10b546d0c79ae56ed019d9d12560c022b72b2d8db10083e339c5f037e2358786304c2c65ddadb030373babaae552e62355941e1c1325df9dd5ac52b9dbc75"}, {0xb8, 0x4e00, "dc9fe11173281810bc361cb5226c9d3f20c99cedc623fc59cfa78bc6b892cd50ba9a458ad1f7a0e23012a3236893817ed289545148562ac6ce72cc4bb1cfced2ca39466831ed2d396ad741fd0536744e2848dda6d32eeca2a1ce026a8d2d4c2e1820d92fea82ffd72fa90b41df5490f1431545e2f51e5966a3774a138f353151cf841077bd2e242f50dc580af91fbb34544175d8f25c1ea9eed28c452fa22368a135fec8905229e280c29604c793f9fedbd400b7b6710456"}, {0x7f, 0x4e00, "a461e2c748d4462ad80b3667b2abd76a86767eef5ec6b871d9a00df440c2e6d5496c06b1d19ce236c084b5da04bef92a372cc1c7bb5ea315e4798ba7adda74b585c5e4dc9aa2d34caa6a5670f1e0fff94d6f9bba919c5ba12bdf71900105c28eef86f46ce701747521c8a0b365d15b2d76023b2eb13acc33d415994e9bcfb8"}, {0xc3, 0x4e00, "c88d5e9f1bde0c47c02a795b00245b5f4ca2f004e8cfe0ee3ba569a2d6ee28a66f2860b5704bb85a015cfbecee5d85b4319e44956f5637c18ed03056a0da81a0bd4a28bd997d0cd97bb70bf80fff5221a7bd10719a3209021503ddab79e48060db3805e5d077260f256e0752d772df46fb2219bf3feb9f7739413fd1486193c640123b4c968d1661b8c159ffaeb74dc23b3ead6e93a9904c54ccbfd2dd2e5599269c23315bc70d2db5371b392601f43b92095b1276cbd4f24fd52aecc732faf7d215ae"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000800)=@ready={0x0, 0x0, 0x8, "c8aea58d", {0x1, 0x9, 0x800, 0x0, 0xb0}}) syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x311000) 00:37:50 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000480)) 00:37:50 executing program 3: syz_io_uring_setup(0x3f86, &(0x7f00000001c0)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) 00:37:51 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0xffffffffffffffff, 0x0, r0, 0x0) 00:37:51 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)='}', 0x1, 0x4}, {&(0x7f0000000140)="0b443dec2491578695b5bb5e01696697577b87286155dddff67aa7a695d25b594e826b57d2f11f67ca8120b7fcba5e1f202406431045", 0x36}, {0x0}, {&(0x7f00000001c0)="6c19", 0x2, 0x7fff}], 0x0, 0x0) 00:37:51 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x200) [ 825.514113][ T9743] usb 1-1: Service connection timeout for: 256 [ 825.521777][ T9743] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 00:37:51 executing program 2: prctl$PR_SET_SECCOMP(0x25, 0x85a0000, 0x0) 00:37:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f00000008c0)='/dev/vsock\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r0, 0x0) 00:37:51 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x800, 0x0) [ 825.561602][ T9743] ath9k_htc: Failed to initialize the device [ 825.574459][T29859] loop5: detected capacity change from 0 to 127 [ 825.587289][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 00:37:51 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) 00:37:51 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f00000027c0)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x2f8c, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 00:37:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdrdstopts={{0x14}}], 0x14}, 0x20001810) [ 825.961779][ T37] audit: type=1326 audit(1616546271.499:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29875 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 826.144237][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 826.764280][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 826.773591][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.784692][ T7] usb 1-1: Product: syz [ 826.788894][ T7] usb 1-1: Manufacturer: syz [ 826.793522][ T7] usb 1-1: SerialNumber: syz [ 826.855013][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 827.524214][ T9495] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 828.570196][T29868] udc-core: couldn't find an available UDC or it's busy [ 828.577310][T29868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 828.595545][ T9736] usb 1-1: USB disconnect, device number 20 00:37:54 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008cc0)) 00:37:54 executing program 4: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:37:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x234, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x3b}, 0x2e}}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8c7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 00:38:01 executing program 1: syz_emit_ethernet(0x38, &(0x7f0000000040)={@random="ffd598a56ae8", @broadcast, @val, {@ipv6}}, 0x0) [ 836.234177][ T4896] usb 1-1: Service connection timeout for: 256 [ 836.241850][ T4896] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 836.271755][ T4896] ath9k_htc: Failed to initialize the device 00:38:01 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, 0x0, 0x0) [ 836.293624][ T8] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="10024e22000000000000000000000000000000000000000000000000000000000000000000000400"/121, @ANYRES64], &(0x7f0000000140)=0x94) 00:38:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000001280), 0x4) 00:38:02 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000001180), 0x3) 00:38:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f00000001c0)='R', 0x1, 0x0, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) 00:38:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0xc}], 0xc}, 0x0) [ 836.912539][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 837.494259][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.503493][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.514522][ T8] usb 1-1: Product: syz [ 837.518774][ T8] usb 1-1: Manufacturer: syz [ 837.523401][ T8] usb 1-1: SerialNumber: syz [ 837.565055][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 838.264343][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 839.296133][ T9743] usb 1-1: USB disconnect, device number 23 00:38:05 executing program 3: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x3}, &(0x7f0000000140), &(0x7f0000000180)={0x1}) 00:38:05 executing program 2: clock_settime(0xf, &(0x7f0000000000)) 00:38:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:38:05 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 00:38:05 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000380)) 00:38:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000780), &(0x7f0000000280)=0x8c) [ 839.924471][ T8] usb 1-1: Service connection timeout for: 256 [ 839.933225][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 00:38:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@init={0x14, 0x84, 0x1, {0x0, 0x0, 0x0, 0x1}}], 0x14}, 0x0) [ 839.979803][ T8] ath9k_htc: Failed to initialize the device 00:38:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000140)={0x2}, 0x1) 00:38:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) [ 840.021937][ T9743] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) 00:38:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@init={0x14, 0x84, 0x1, {0x1, 0x0, 0x0, 0x1}}], 0x14}, 0x0) 00:38:05 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x28, &(0x7f00000001c0), 0x4) 00:38:05 executing program 1: clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3b9ac9ff}) 00:38:05 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdee}, 0x0) 00:38:05 executing program 2: shmget(0x3, 0x3000, 0x600, &(0x7f0000ffc000/0x3000)=nil) 00:38:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@prinfo={0x14, 0x84, 0x7, {0x2}}, @sndrcv={0x2c}], 0x40}, 0x0) [ 840.514180][ T9743] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 841.045114][ T9743] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 841.059309][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.078819][ T9743] usb 1-1: Product: syz [ 841.104201][ T9743] usb 1-1: Manufacturer: syz [ 841.108912][ T9743] usb 1-1: SerialNumber: syz [ 841.155244][ T9743] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 841.734233][ T9743] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 842.561821][ T4896] usb 1-1: USB disconnect, device number 24 00:38:08 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "1e622025", {0x1, 0x9, 0xfffb, 0xbf, 0x20}}) 00:38:08 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) 00:38:08 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) 00:38:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:38:08 executing program 2: syz_extract_tcp_res(&(0x7f0000000080), 0x971, 0x7fff) 00:38:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 00:38:08 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, &(0x7f00000000c0)) 00:38:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x68d}, 0x10) 00:38:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f00000000c0)='C>e|', 0x4) 00:38:08 executing program 4: syz_emit_ethernet(0x10a7, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv6}}, 0x0) 00:38:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1000}}], 0x1c}, 0x0) [ 843.434386][ T9743] usb 1-1: Service connection timeout for: 256 [ 843.441061][ T9743] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 843.492608][ T9743] ath9k_htc: Failed to initialize the device [ 843.518380][ T4896] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x37, 0x2}, 0x10) getsockname(r0, 0x0, &(0x7f0000000040)) [ 843.894197][ T4896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 844.414221][ T4896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 844.424071][ T4896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.432238][ T4896] usb 1-1: Product: syz [ 844.438077][ T4896] usb 1-1: Manufacturer: syz [ 844.443179][ T4896] usb 1-1: SerialNumber: syz [ 844.495868][ T4896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 845.064235][ T4896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 845.890259][ T8] usb 1-1: USB disconnect, device number 25 00:38:11 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000300)) 00:38:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) writev(r0, &(0x7f0000001240)=[{0x0}, {0x0}, {0x0}], 0x3) 00:38:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)) 00:38:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000080)={0x2, [0x3, 0x1]}, 0x8) 00:38:11 executing program 1: syz_emit_ethernet(0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08060001"], 0x0) 00:38:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f00000000c0)="523256d644494fd5b1c7a41f86d90a19934d67ec314932a76a73977d1deb69e4b94999700fe1af5ec4dfaac1de947dea593e3d468451da0dc25689fec7e7afc355fd563aae2819d38040db0bb1bc9c85a8768fc7fa6d14b523080091fec80e52142d6db10aacedd8460a355026861f89b57f29cb8abcddffb4ab1ba813d00cd65c92f2d0dddadf630a454ce5a10e5b53ee925a200b98d76bf8", 0x99, 0x88, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) 00:38:12 executing program 5: select(0x40, &(0x7f0000000280)={0x6}, &(0x7f00000004c0), &(0x7f0000000500)={0x100000001}, 0x0) 00:38:12 executing program 1: futimesat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 00:38:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) sendto(r0, &(0x7f0000000000)="f03460514658cb1cf868c52a3693316b6ca11d48cad0b4e502a636751deadaf35fb54a59b4cd5d0fa3edb0d01cb7536f133ea261f9e6b30f536ed9964de5ef9b42dc32c463122fe08cbfd415821411cda084492c982e6faf6dbbcca057df4a2c5617417968b48923f6c7c1c0eb0d28b922", 0x71, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:38:12 executing program 2: pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x0) close_range(r0, r0, 0x0) pipe2(&(0x7f0000000000), 0x0) 00:38:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:38:12 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x19, &(0x7f00000000c0), 0x0) [ 846.725650][ T4896] usb 1-1: Service connection timeout for: 256 [ 846.732128][ T4896] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 846.780765][ T4896] ath9k_htc: Failed to initialize the device [ 846.788111][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 847.164334][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 847.684119][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 847.693404][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.702412][ T8] usb 1-1: Product: syz [ 847.706807][ T8] usb 1-1: Manufacturer: syz [ 847.711545][ T8] usb 1-1: SerialNumber: syz [ 847.755057][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 848.404209][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 849.039923][ T7] usb 1-1: USB disconnect, device number 26 [ 849.443989][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 849.451725][ T8] ath9k_htc: Failed to initialize the device [ 849.461319][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:15 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000002c0)={0x3, 0x3, 0x2, 0x3, 0x0, 0x5, 0x10001, 0x10000, 0x63c, 0x80000000, 0x7fffffff, 0x6, 0xbda, 0x2}) 00:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) 00:38:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 00:38:15 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), 0x2c) 00:38:15 executing program 3: pipe2(&(0x7f0000000700), 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/18) 00:38:15 executing program 4: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0xfffffffffffffdd7, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x10}, 0x0) 00:38:15 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000240)="1c39b31bac7d8f3448c9f50220258cd37fdaee56c75b443a9e93902bc509f5d9e94005ecbe", 0x25, 0x0, &(0x7f0000000280)={0x1c, 0x1c, 0x2}, 0x1c) 00:38:15 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 00:38:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00000001c0)="e30b456117547a8bb5d0cd3ca6f1315e0b0000e19b7ca8a590512409c7480e93d78ea39018b40000a8a285d1703bdaf954359623c812271fa67f7f0d5b1cf7b92b36aff9e5c65d973020b868b31a80cefdea19cbd64bf3977882e48bebc4f61f534b11502d2515bee1f2ad43d9a004be", 0xffffffe5, 0x8a, &(0x7f0000000140)={0x10, 0x2}, 0x10) 00:38:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140), 0x84) 00:38:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$CHAR_RAW_ROGET(r0, 0x125e, 0x0) 00:38:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 850.064063][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 850.714158][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 850.723515][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.733583][ T7] usb 1-1: Product: syz [ 850.738964][ T7] usb 1-1: Manufacturer: syz [ 850.743698][ T7] usb 1-1: SerialNumber: syz [ 850.805400][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 851.514086][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 852.128866][ T8] usb 1-1: USB disconnect, device number 27 [ 852.554041][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 852.561077][ T7] ath9k_htc: Failed to initialize the device [ 852.567764][ T8] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:18 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0x21, 0x240400) 00:38:18 executing program 1: pipe2$9p(&(0x7f0000000400), 0x0) 00:38:18 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$CHAR_RAW_FLSBUF(r0, 0x1261, 0x0) 00:38:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/59, 0x3b}], 0x1}, 0xc0) 00:38:18 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x51, &(0x7f0000000380)={0x0, {{0x1c, 0x1c, 0x2}}, {{0x1c, 0x1c, 0x2}}}, 0x108) 00:38:18 executing program 4: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000002340)='U', 0x1}], 0x1) fsync(r0) 00:38:18 executing program 1: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10220, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1, 0x0, 0x0) 00:38:18 executing program 4: getresuid(&(0x7f0000000200), 0x0, 0x0) 00:38:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f0000000040)={0x1, {{0x10, 0x2}}}, 0x90) 00:38:18 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:38:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000300)=@in={0x10, 0x2}, 0x10) 00:38:18 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) [ 853.054364][ T4896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 853.624300][ T4896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 853.633765][ T4896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.648629][ T4896] usb 1-1: Product: syz [ 853.652921][ T4896] usb 1-1: Manufacturer: syz [ 853.658254][ T4896] usb 1-1: SerialNumber: syz [ 853.715299][ T4896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 854.314357][ T4896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 854.953219][ T9743] usb 1-1: USB disconnect, device number 28 [ 855.354166][ T4896] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 855.361478][ T4896] ath9k_htc: Failed to initialize the device [ 855.369062][ T9743] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:21 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) 00:38:21 executing program 5: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000140), 0x8) getsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000000)=""/147, &(0x7f00000000c0)=0x93) 00:38:21 executing program 1: r0 = socket$inet6(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 00:38:21 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000003580)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 00:38:21 executing program 2: connect(0xffffffffffffffff, &(0x7f0000001940)=ANY=[], 0xa) 00:38:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000180)=0x94) 00:38:21 executing program 3: r0 = socket$inet6(0x1c, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080)='@', 0x1, 0x0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="c1", 0x1, 0x0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c) 00:38:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:38:21 executing program 2: renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) 00:38:21 executing program 1: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 00:38:21 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x28, 0x0, &(0x7f0000000040)) 00:38:21 executing program 2: r0 = socket$inet6(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) [ 855.914180][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 856.445056][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 856.469793][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.489160][ T8] usb 1-1: Product: syz [ 856.505875][ T8] usb 1-1: Manufacturer: syz [ 856.520906][ T8] usb 1-1: SerialNumber: syz [ 856.565648][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.154159][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 857.773253][ T7] usb 1-1: USB disconnect, device number 29 00:38:23 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) 00:38:23 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3b, &(0x7f00000003c0), 0x4) 00:38:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10, 0x2}, 0x10) 00:38:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="d9", 0x1}, {&(0x7f0000000100)='s', 0x1}], 0x2}, 0x0) 00:38:23 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x110a48, 0x0) 00:38:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a01e23b"], 0xa) [ 858.244239][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 858.251321][ T8] ath9k_htc: Failed to initialize the device [ 858.260081][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x40, 0x0, &(0x7f0000000200)) 00:38:24 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 00:38:24 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001140)="04", 0x1}], 0x2) 00:38:24 executing program 3: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) 00:38:24 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000001940)=ANY=[@ANYBLOB="00012e2f66"], 0xa) 00:38:24 executing program 5: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) fcntl$getown(r0, 0x5) [ 858.884369][ T7] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 859.475162][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 859.487752][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.497334][ T7] usb 1-1: Product: syz [ 859.501791][ T7] usb 1-1: Manufacturer: syz [ 859.508594][ T7] usb 1-1: SerialNumber: syz [ 859.576841][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.204115][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 860.625857][ T4896] usb 1-1: USB disconnect, device number 30 00:38:26 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) 00:38:26 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) connect(r0, &(0x7f0000000300)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:38:26 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x40042) 00:38:26 executing program 1: socketpair(0x2, 0x3, 0x6, 0x0) 00:38:26 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) 00:38:26 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) connect(r0, &(0x7f0000000300)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:38:26 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x52, &(0x7f0000000100)={0x2, {{0x1c, 0x1c}}, {{0x1c, 0x1c, 0x1}}}, 0x108) [ 861.275120][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 861.286140][ T7] ath9k_htc: Failed to initialize the device 00:38:26 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) [ 861.367976][ T4896] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x8c, 0x0, 0x0) 00:38:27 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 00:38:27 executing program 5: sendmsg$unix(0xffffffffffffff9c, &(0x7f00000000c0)={&(0x7f0000000040)=@file={0xa}, 0xfffffffffffffe43, &(0x7f0000000340)=[{&(0x7f0000000600)="88060dc312a64402caa88b8dbb3470c133712c083fbac294590f6938fa5ae22e835fbbcb69b0a82c173dfa60a5468bcb2ddb369be91cdb5e9f767e285c620abb06e86254c2ad713b3b59b27a517a5cbbc28e061677aa3384afa9610e8a0a22c8039e3db08ba47e4cd7b524fd6553cb67c5d75157fb292944b90990a46c0d9fdcfb04b21c877f96691794f78e4948d56b22ba90763698eedac05dc1235ebb800606fc8e04c17e333415151ea82d9618cd18ee2213c5a8954ede379d1bf3873358c9039c745face0f8f3ff", 0xca}, {&(0x7f0000000240)="86c553773ed608ea1874d0c24a8e1ec8ea58e6fb28bbaa3b4a268a51410ce5774faca18ac56a64c18e973d2ef28b5101b478c507429c6bc657f0c3cd45ddc42baa5a0a211e40700a46bf7a80f2db6c68183efbb76c5030df68488ad891aa68dd34a8ba1bdc96ae5dc134da16d575d15cf8db93ef2ddb4939128a1f723ca34bb4efb75a44840adbde107a73bfd4a6b9fd87dfcd59c47b6723ca78ef094f97ffe2f51608ab7768f604828d049d9a80ca4e12f32ada20e0a7b5a77e7fe3833390cf4973e0f63f8537465bd2bb9c2a4b80af64c6ba2375", 0x19}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="2000000000000000ffff000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001800000000000000ffff00000100000082ef1c70323f10f535f31fe2304a7346c680151737b21b50b87dea3547fc379496c25a972c457a56b13fac201ab1b19a7f918bdd2d8d3130cc08e5000000000000", @ANYRES32=0xffffffffffffff9c, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4}, 0x100) 00:38:27 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000280)={@loopback}, 0x14) [ 861.734078][ T4896] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 862.264186][ T4896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 862.273648][ T4896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.294020][ T4896] usb 1-1: Product: syz [ 862.298251][ T4896] usb 1-1: Manufacturer: syz [ 862.302886][ T4896] usb 1-1: SerialNumber: syz [ 862.415091][ T4896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 862.984175][ T4896] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 863.418073][ T7] usb 1-1: USB disconnect, device number 31 00:38:29 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x168, &(0x7f00000000c0)={[{0xc1, 0x4e00, "b2a34c60303ae93f83978329212ad13da250ade480ac99304db937c3f5ac87e38f0f85cd079dd04ca25edacab5b92fde89e2223eac2c37d0f4b99daab2e3229c5d6f9d8c19d9a16c25da6dbe860e3f4d7f2dae7365d599db726a349d145b1144c95e85caf00f4bd3aca0414780b4bf883c12de742f2c468621a522c3946fbcb16da2d9bb4611a303870979c18c7c8a18afcc05027041702371cbf40615a16434a5e74d2ec55448eeff406291eca66e5557620cc853d314939dcc6105e0953af881"}, {0x9b, 0x4e00, "47c6f23a3ec3bfa987fc113b07c417094b8da7dec95c086adad0c29407c1c4e86395fe6f9db70a6dd3f071cb47ecaff6d029afeb409ca2c3e1f74ea385b7dc8b475a8a021f53e003ede5554be3a10af486cf8be367a409f9404da7818675f121ac55efcd0fcff46379a785e3fcbf34dbd7078d67f8523e72e3a1cda05cb4ff463111a5d0e2d163999951781d6b3043fe9c5d71a0d171e278346980"}]}) 00:38:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 00:38:29 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) 00:38:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 00:38:29 executing program 4: clock_settime(0x7, 0x0) 00:38:29 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/vcsa\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x17b2) 00:38:29 executing program 4: getgroups(0x1, &(0x7f00000050c0)=[0x0]) [ 864.074114][ T4896] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 864.083057][ T4896] ath9k_htc: Failed to initialize the device [ 864.154461][T30570] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 864.183100][ T7] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000530408002abd7000fbdbdf25be3778ef7a94ff7a2c1bddd8c091"], 0xc0}}, 0x8000) [ 864.223791][T30570] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 00:38:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffffffffff8b, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x6f3cc4aba2ecdab4}, 0x20000801) 00:38:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)) 00:38:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_MCE_KILL(0x1a, 0x1, 0x0) [ 864.313029][ T37] audit: type=1107 audit(1616546309.845:35): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='¾7xïz”ÿz,ÝØÀ‘' [ 864.359412][ T37] audit: type=1107 audit(1616546309.895:36): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='¾7xïz”ÿz,ÝØÀ‘' 00:38:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x1814001, &(0x7f0000001580)) [ 864.595415][ T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 864.654319][T30599] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 865.174921][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 865.195904][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.226366][ T7] usb 1-1: Product: syz [ 865.235258][ T7] usb 1-1: Manufacturer: syz [ 865.245751][ T7] usb 1-1: SerialNumber: syz [ 865.305977][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 866.004538][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 866.426211][ T9743] usb 1-1: USB disconnect, device number 32 00:38:32 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000240)) 00:38:32 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6, 0xc3, 0x0, 0xffffffd4}]}) 00:38:32 executing program 2: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}}) 00:38:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:38:32 executing program 3: syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00', 0xffffffffffffffff) [ 867.035471][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 867.042903][ T7] ath9k_htc: Failed to initialize the device [ 867.072713][ T9743] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20044011, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="9ad45e5164f97bd6730551a36494e85e1f605a520dc8933d6dafdf21ad1ff22933f782a915a84d6f5935b9e81dd999da6fabaa6263201ae07405ebfcf3f965a77343cd6d1c1dc5da0d10b35de227232631bae9c9876be712306bb703ce51ea141ad2c40dc2752cf705b400d64df1b3961f62d41f51bf7c7eb200bf01d3c525bcd53f9ce3085621eb7ea069a4d19824133d5329d7bf0867ca519f479ad4cd25a17b84f540196ea5c6ec9c32f8c93b9eb25769", 0xfffffffffffffedb, 0xc8c0, 0x0, 0x0) 00:38:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x13, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [ 867.162996][ T37] audit: type=1326 audit(1616546312.695:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30622 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0xffff0000 00:38:32 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) [ 867.215272][T30626] fuse: Bad value for 'fd' [ 867.225748][T30626] fuse: Bad value for 'fd' 00:38:32 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:32 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x0, 0x0) [ 867.653984][ T9743] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 867.785130][T30655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 868.184130][ T9743] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 868.193331][ T9743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.224883][ T9743] usb 1-1: Product: syz [ 868.229201][ T9743] usb 1-1: Manufacturer: syz [ 868.253965][ T9743] usb 1-1: SerialNumber: syz [ 868.316840][ T9743] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 868.924127][ T9743] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 869.331221][ T36] usb 1-1: USB disconnect, device number 33 00:38:35 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) 00:38:35 executing program 1: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:38:35 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 00:38:35 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[{&(0x7f0000000080)='F', 0x1}, {&(0x7f0000000180)="b8", 0x1, 0x80000000}, {&(0x7f0000000440)='j', 0x1, 0x6462}], 0x0, 0x0) 00:38:35 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:35 executing program 4: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)) 00:38:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) [ 869.994100][ T9743] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 870.001586][T30690] loop3: detected capacity change from 0 to 264192 [ 870.008690][ T9743] ath9k_htc: Failed to initialize the device [ 870.024542][ T36] usb 1-1: ath9k_htc: USB layer deinitialized 00:38:35 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1ff14478620b795c, 0x0) 00:38:35 executing program 4: openat$vcsa(0xffffffffffffff9c, 0x0, 0x3ab86d5dc2722a04, 0x0) [ 870.196106][T30690] loop3: detected capacity change from 0 to 264192 [ 870.235327][ T3243] ieee802154 phy0 wpan0: encryption failed: -22 00:38:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x1, 0x1, 0x101}, 0x14}}, 0x0) [ 870.241720][ T3243] ieee802154 phy1 wpan1: encryption failed: -22 00:38:35 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000500)) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x3}], 0x200004, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)={0x81b, 0x7}) clone(0x2002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x43, 0x4, 0x0, 0x0, 0x0, 0x718, 0x41000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x71d9, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000040)="80d8737a6c", 0x5, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x230100, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000880)=0x14) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r5, &(0x7f0000000240)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586204c034bd8e0c941d600006b", 0x33, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write(r5, &(0x7f0000000140)="2d89dbe28eb02cba0010a90000000000fd00", 0x12) poll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x3000}, {r0, 0x8000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2245}, {r1, 0xa0}, {r5, 0x4000}, {0xffffffffffffffff, 0x208a}, {r2}], 0x9, 0x800) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/86, 0x56}, {&(0x7f0000001c80)=""/4098, 0x1002}], 0x2}}], 0x1, 0x40000020, 0x0) 00:38:36 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0)='NLBL_UNLBL\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 00:38:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x200008, &(0x7f0000000200)=ANY=[]) 00:38:36 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) 00:38:36 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) copy_file_range(r1, &(0x7f0000000000), r0, &(0x7f0000000080), 0x0, 0x0) 00:38:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fsname={'fsname', 0x3d, ']('}}, {@obj_user={'obj_user', 0x3d, '@,\'/'}}]}}) 00:38:36 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) listen(r0, 0x0) 00:38:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 870.877629][T30738] fuse: Bad value for 'fd' [ 870.916113][T30738] fuse: Bad value for 'fd' 00:38:36 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) copy_file_range(r1, &(0x7f0000000000), r0, 0x0, 0x3d1b, 0x0) 00:38:36 executing program 5: r0 = getpgrp(0x0) r1 = getpgrp(0x0) r2 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) 00:38:36 executing program 1: rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) 00:38:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000000c0)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x54}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000005) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) dup3(r2, r1, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xa000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0xffffffff}}) 00:38:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="050200000000000008001b"], 0x28}}, 0x0) 00:38:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x10, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) 00:38:36 executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x10c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="00fffbffff00000008000a000d0000002500120008000100766574688b010630c7a005b05a19980dce7a2594fc5e60c27c16104ffc602310dfdec82ec185edadc01342df9a8ee7b7512ad8986cfc8a72036bfd58ad02cbd3340410d97e263f3e5eebc5f6725cc7a8d35559e9707c7b21a9156d9ad90d3b1c9e771a715b354767324001aeaeead6961455"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2c34a8b5196ca18b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @private0}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) [ 871.389491][T30762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 871.416869][T30762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:38:37 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x20, &(0x7f0000000000)={[{0x1b, 0x4e00, "5082e1522ccd674a2bc7e2e9723f26cee262465da5c1080ec8a2c5"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) 00:38:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) [ 871.492490][T30762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:38:37 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000083807404540800102030109023b0001010000000904"], 0x0) 00:38:37 executing program 4: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x151) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='#b'], 0x141) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 00:38:37 executing program 2: lchown(&(0x7f0000000000)='.\x00', 0x0, 0x0) 00:38:37 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x1e1) chdir(&(0x7f00000001c0)='./file2\x00') creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_io_uring_complete(0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xcc, &(0x7f0000000000), 0x3c) link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000140)='./bus/file0\x00') [ 871.704852][ T9743] usb 6-1: new high-speed USB device number 8 using dummy_hcd 00:38:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00E']}) 00:38:37 executing program 2: r0 = socket(0x23, 0x805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) [ 871.944579][ T9743] usb 6-1: Using ep0 maxpacket: 8 00:38:37 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0, 0x0) close(r0) [ 872.034165][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 872.064859][ T9743] usb 6-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 872.086949][ T9743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:38:37 executing program 2: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd2c236bfa1c251b4a45bfe30f444d000114658f7cd623c5d2bb2c9249dd44be32dc79b39812dda876840f3f971dd75e672f24fe1584a53a"], 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80011, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4aa6}, 0x8000000200052e02, 0x40000000800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) [ 872.140821][ T9743] usb 6-1: config 0 descriptor?? [ 872.206943][ T9743] pwc: Philips PCA645VC USB webcam detected. [ 872.304132][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 872.360388][T30798] ================================================================================ [ 872.371387][T30798] UBSAN: shift-out-of-bounds in net/sunrpc/xprt.c:658:14 [ 872.385434][T30798] shift exponent 19110 is too large for 64-bit type 'long unsigned int' [ 872.395807][T30798] CPU: 1 PID: 30798 Comm: syz-executor.2 Not tainted 5.12.0-rc4-next-20210323-syzkaller #0 [ 872.406087][T30798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.416189][T30798] Call Trace: [ 872.419506][T30798] dump_stack+0x141/0x1d7 [ 872.424092][T30798] ubsan_epilogue+0xb/0x5a [ 872.428575][T30798] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 872.435406][T30798] ? xprt_calc_majortimeo.isra.0+0xe3/0x1c0 [ 872.441499][T30798] xprt_calc_majortimeo.isra.0.cold+0x17/0x46 [ 872.447837][T30798] xprt_request_init+0x486/0x9c0 [ 872.452851][T30798] xprt_reserve+0x18f/0x280 [ 872.457418][T30798] ? call_bc_transmit_status+0x240/0x240 [ 872.463126][T30798] __rpc_execute+0x21d/0x12d0 [ 872.468021][T30798] ? trace_event_raw_event_rpc_xdr_alignment+0xb60/0xb60 [ 872.475119][T30798] ? lock_downgrade+0x6e0/0x6e0 [ 872.480123][T30798] rpc_execute+0x2ba/0x460 [ 872.484600][T30798] rpc_run_task+0x5d0/0x8f0 [ 872.489165][T30798] rpc_call_sync+0xc6/0x1a0 [ 872.493756][T30798] ? rpc_run_task+0x8f0/0x8f0 [ 872.498498][T30798] ? rpc_new_client+0x94f/0x12d0 [ 872.503500][T30798] rpc_create_xprt+0x3f1/0x4a0 [ 872.508313][T30798] ? rpc_call_sync+0x1a0/0x1a0 [ 872.513211][T30798] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 872.519500][T30798] ? xprt_create_transport+0xd6/0x7c0 [ 872.524957][T30798] rpc_create+0x354/0x670 [ 872.529330][T30798] ? rpc_create_xprt+0x4a0/0x4a0 [ 872.534315][T30798] ? lockdep_hardirqs_on+0x79/0x100 [ 872.539588][T30798] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 872.545850][T30798] ? nfs_create_rpc_client+0x486/0x680 [ 872.551424][T30798] nfs_create_rpc_client+0x4eb/0x680 [ 872.556768][T30798] ? nfs_mark_client_ready+0x50/0x50 [ 872.562305][T30798] ? do_raw_spin_lock+0x120/0x2b0 [ 872.567378][T30798] ? rwlock_bug.part.0+0x90/0x90 [ 872.572378][T30798] nfs_init_client+0x6d/0x100 [ 872.577092][T30798] nfs_get_client+0x10ee/0x1450 [ 872.582021][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.588566][T30798] nfs_init_server.isra.0+0x2c0/0xed0 [ 872.593978][T30798] ? nfs_get_client+0x1450/0x1450 [ 872.599065][T30798] ? __kasan_kmalloc+0x9b/0xd0 [ 872.604051][T30798] nfs_create_server+0x18f/0x650 [ 872.609028][T30798] nfs_try_get_tree+0x166/0x940 [ 872.613928][T30798] ? io_schedule_timeout+0x140/0x140 [ 872.619249][T30798] ? nfs_get_tree_common+0x1410/0x1410 [ 872.624756][T30798] ? preempt_schedule_thunk+0x16/0x18 [ 872.630295][T30798] ? preempt_schedule_common+0x59/0xc0 [ 872.635800][T30798] ? preempt_schedule_thunk+0x16/0x18 [ 872.641345][T30798] nfs_get_tree+0x116a/0x1510 [ 872.646223][T30798] vfs_get_tree+0x89/0x2f0 [ 872.650796][T30798] path_mount+0x132a/0x1fa0 [ 872.655410][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.661706][T30798] ? strncpy_from_user+0x2a0/0x3e0 [ 872.667048][T30798] ? finish_automount+0xad0/0xad0 [ 872.672118][T30798] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.678412][T30798] ? getname_flags.part.0+0x1dd/0x4f0 [ 872.683901][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.690221][T30798] __x64_sys_mount+0x27f/0x300 [ 872.695026][T30798] ? copy_mnt_ns+0xae0/0xae0 [ 872.699664][T30798] ? syscall_enter_from_user_mode+0x27/0x70 [ 872.705617][T30798] do_syscall_64+0x2d/0x70 [ 872.710072][T30798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.716014][T30798] RIP: 0033:0x466459 [ 872.719950][T30798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.739855][T30798] RSP: 002b:00007f84785cb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 872.748345][T30798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 872.756351][T30798] RDX: 0000000020fb5ffc RSI: 0000000020343ff8 RDI: 0000000020000100 [ 872.764365][T30798] RBP: 00000000004bf9fb R08: 000000002000a000 R09: 0000000000000000 [ 872.772557][T30798] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 872.780567][T30798] R13: 00007ffee04fe63f R14: 00007f84785cb300 R15: 0000000000022000 [ 872.825002][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.004703][T30798] ================================================================================ [ 873.016653][T30798] Kernel panic - not syncing: panic_on_warn set ... [ 873.023288][T30798] CPU: 0 PID: 30798 Comm: syz-executor.2 Not tainted 5.12.0-rc4-next-20210323-syzkaller #0 [ 873.033294][T30798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.043383][T30798] Call Trace: [ 873.046688][T30798] dump_stack+0x141/0x1d7 [ 873.051061][T30798] panic+0x306/0x73d [ 873.055040][T30798] ? __warn_printk+0xf3/0xf3 [ 873.059675][T30798] ? dump_stack+0x1c1/0x1d7 [ 873.064221][T30798] ? ubsan_epilogue+0x3e/0x5a [ 873.068949][T30798] ubsan_epilogue+0x54/0x5a [ 873.073505][T30798] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 873.080316][T30798] ? xprt_calc_majortimeo.isra.0+0xe3/0x1c0 [ 873.086269][T30798] xprt_calc_majortimeo.isra.0.cold+0x17/0x46 [ 873.092390][T30798] xprt_request_init+0x486/0x9c0 [ 873.097777][T30798] xprt_reserve+0x18f/0x280 [ 873.102511][T30798] ? call_bc_transmit_status+0x240/0x240 [ 873.108280][T30798] __rpc_execute+0x21d/0x12d0 [ 873.113030][T30798] ? trace_event_raw_event_rpc_xdr_alignment+0xb60/0xb60 [ 873.120107][T30798] ? lock_downgrade+0x6e0/0x6e0 [ 873.125022][T30798] rpc_execute+0x2ba/0x460 [ 873.129503][T30798] rpc_run_task+0x5d0/0x8f0 [ 873.135879][T30798] rpc_call_sync+0xc6/0x1a0 [ 873.140426][T30798] ? rpc_run_task+0x8f0/0x8f0 [ 873.145159][T30798] ? rpc_new_client+0x94f/0x12d0 [ 873.150158][T30798] rpc_create_xprt+0x3f1/0x4a0 [ 873.154969][T30798] ? rpc_call_sync+0x1a0/0x1a0 [ 873.159780][T30798] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 873.166076][T30798] ? xprt_create_transport+0xd6/0x7c0 [ 873.171674][T30798] rpc_create+0x354/0x670 [ 873.176050][T30798] ? rpc_create_xprt+0x4a0/0x4a0 [ 873.181024][T30798] ? lockdep_hardirqs_on+0x79/0x100 [ 873.186253][T30798] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 873.192461][T30798] ? nfs_create_rpc_client+0x486/0x680 [ 873.197971][T30798] nfs_create_rpc_client+0x4eb/0x680 [ 873.203305][T30798] ? nfs_mark_client_ready+0x50/0x50 [ 873.208637][T30798] ? do_raw_spin_lock+0x120/0x2b0 [ 873.213694][T30798] ? rwlock_bug.part.0+0x90/0x90 [ 873.218670][T30798] nfs_init_client+0x6d/0x100 [ 873.223376][T30798] nfs_get_client+0x10ee/0x1450 [ 873.228263][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 873.234544][T30798] nfs_init_server.isra.0+0x2c0/0xed0 [ 873.239964][T30798] ? nfs_get_client+0x1450/0x1450 [ 873.245045][T30798] ? __kasan_kmalloc+0x9b/0xd0 [ 873.249880][T30798] nfs_create_server+0x18f/0x650 [ 873.254951][T30798] nfs_try_get_tree+0x166/0x940 [ 873.259876][T30798] ? io_schedule_timeout+0x140/0x140 [ 873.265199][T30798] ? nfs_get_tree_common+0x1410/0x1410 [ 873.270724][T30798] ? preempt_schedule_thunk+0x16/0x18 [ 873.276256][T30798] ? preempt_schedule_common+0x59/0xc0 [ 873.281738][T30798] ? preempt_schedule_thunk+0x16/0x18 [ 873.287156][T30798] nfs_get_tree+0x116a/0x1510 [ 873.291886][T30798] vfs_get_tree+0x89/0x2f0 [ 873.296327][T30798] path_mount+0x132a/0x1fa0 [ 873.300872][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 873.307188][T30798] ? strncpy_from_user+0x2a0/0x3e0 [ 873.312362][T30798] ? finish_automount+0xad0/0xad0 [ 873.317423][T30798] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 873.323695][T30798] ? getname_flags.part.0+0x1dd/0x4f0 [ 873.329097][T30798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 873.335387][T30798] __x64_sys_mount+0x27f/0x300 [ 873.340180][T30798] ? copy_mnt_ns+0xae0/0xae0 [ 873.344816][T30798] ? syscall_enter_from_user_mode+0x27/0x70 [ 873.350772][T30798] do_syscall_64+0x2d/0x70 [ 873.355213][T30798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 873.361136][T30798] RIP: 0033:0x466459 [ 873.365058][T30798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.384720][T30798] RSP: 002b:00007f84785cb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 873.393192][T30798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 873.401190][T30798] RDX: 0000000020fb5ffc RSI: 0000000020343ff8 RDI: 0000000020000100 [ 873.409189][T30798] RBP: 00000000004bf9fb R08: 000000002000a000 R09: 0000000000000000 [ 873.417185][T30798] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 873.425185][T30798] R13: 00007ffee04fe63f R14: 00007f84785cb300 R15: 0000000000022000 [ 873.433985][T30798] Kernel Offset: disabled [ 873.439947][T30798] Rebooting in 86400 seconds..