0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r2 = gettid() tkill(r2, 0x16) 17:27:37 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000200)) 17:27:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$unix(r0, 0x0, &(0x7f0000000240)) 17:27:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:27:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x8e01, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x40, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000140)) 17:27:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, &(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001840)=0x80) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000200)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:27:38 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(r1, r0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x13, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x5, 0x0, [0x0, 0x200002c0, 0x20000584, 0x200005b4], 0x0, 0x0, 0x0}, 0x1be) 17:27:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 17:27:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SYNC(r0, 0x8940, 0x0) 17:27:38 executing program 2: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x2000c001) 17:27:38 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x30000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 17:27:38 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x5450, 0x0) 17:27:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f000000a7c0)=""/227, 0xe3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 17:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = dup2(r2, r1) ioctl$EVIOCGMTSLOTS(r3, 0x5421, &(0x7f0000000040)=""/175) 17:27:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x80}, 0x1c, 0x0}, 0x0) 17:27:39 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x7cea51ee, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x5451, 0x0) 17:27:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f0000000080)) 17:27:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x7, 0x0) ioctl$BLKIOMIN(r0, 0x1264, 0x0) 17:27:39 executing program 5: r0 = epoll_create(0x4) fcntl$setstatus(r0, 0x4, 0x4a000) 17:27:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x5450, 0x0) 17:27:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:39 executing program 5: r0 = eventfd2(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$HDIO_GETGEO(r0, 0x5451, 0x0) 17:27:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:39 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) 17:27:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x89a0, 0x0) 17:27:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendto$unix(r4, 0x0, 0x28e, 0x80020003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:39 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x133840, 0x0) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x323540, 0xbe) 17:27:39 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='\x84\x0e\x13s\xf1\xb5\x05\xe2qO\xb8\x893\x81`\xd2\x99\x96\x01\x00\x00\x00\x00\x00\x00\x00\x1c\a\xd0#\x05%\x18\x17Z\xa2gS\xc1\xe0\v\xcb\t\xe6\xe6*\xe9\xa3\xdc\x91', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) 17:27:40 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x24, &(0x7f0000000380)={{0x0, @multicast2, 0x0, 0x0, 'lc\x00'}, {@broadcast}}, 0xb) 17:27:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:40 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 17:27:40 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 17:27:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:40 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x69, &(0x7f0000000140)={0x0}}, 0x0) 17:27:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x29, 0x20, &(0x7f0000000400)=""/231, &(0x7f0000000500)=0xe7) 17:27:40 executing program 4: getgroups(0xffda, 0x0) 17:27:40 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000006840)={0x0, 0x0, &(0x7f0000006800)={0x0}}, 0x0) 17:27:40 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) 17:27:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0xfef8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:27:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:27:40 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000940)) 17:27:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x5451, 0x0) 17:27:40 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000440)={&(0x7f0000000000), 0x8f8c11f45c79273c, &(0x7f0000000400)={&(0x7f0000000100)={0x2d8, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x2d8}}, 0x0) 17:27:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, &(0x7f0000000180)={'tunl0\x00', 0x0}) 17:27:40 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000100)=0x80) dup3(r0, r1, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RSTATu(r2, 0x0, 0x0) 17:27:41 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TCXONC(r1, 0x540a, 0x0) 17:27:41 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={0x0}}, 0x0) 17:27:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x5000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:41 executing program 5: r0 = socket$inet(0x2, 0x80801, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 17:27:41 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:41 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5451, 0x0) 17:27:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$nbd(r1, 0x0, 0x0) 17:27:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, 0x0, 0x100000000, 0x20000801) 17:27:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 17:27:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:41 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) 17:27:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000180)) 17:27:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 17:27:41 executing program 1: futex(&(0x7f0000000000), 0x81, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 17:27:41 executing program 4: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005280)) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 17:27:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 17:27:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200003d9) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20008000) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/icmp6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:41 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 17:27:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x8000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:42 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:42 executing program 0: r0 = socket$nl_generic(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5411, &(0x7f0000000080)={0x2, 'geneve1\x00'}) 17:27:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) dup2(r0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) setsockopt$packet_fanout_data(r4, 0x10e, 0x3, 0x0, 0x0) 17:27:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4008090) 17:27:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000340)) 17:27:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0xe, 0x0, &(0x7f0000000380)) 17:27:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = gettid() read(r0, &(0x7f0000000380)=""/238, 0xee) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 17:27:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20004880) 17:27:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) close(r0) r2 = gettid() tkill(r2, 0x16) 17:27:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xe000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:27:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/autofs\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200000c4) 17:27:42 executing program 0: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x6ad06b84cc935b49) 17:27:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x5452, &(0x7f0000000040)) 17:27:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:43 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003d00)='/dev/vcs\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 17:27:43 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40140, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_mreqsrc(r1, 0x0, 0xd, 0x0, 0x0) 17:27:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000026c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:27:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "007e8dd489469f20c7f27dbb8a93ef4e0000d4664a04000000b200"}) 17:27:43 executing program 0: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 17:27:43 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x54}}, 0x0) close(r1) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:27:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x3f000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 17:27:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl(r0, 0x1000008953, &(0x7f0000000000)) 17:27:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) ioctl$TIOCL_PASTESEL(r1, 0x541b, &(0x7f0000000000)) 17:27:43 executing program 5: shmget(0x1, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) 17:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 17:27:44 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:44 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000200)) 17:27:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x8e010000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:44 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x0, 0x0) dup2(r1, r0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:27:44 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$P9_RCLUNK(r0, 0x0, 0xffffffa8) 17:27:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:27:44 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:44 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000040)) 17:27:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:44 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) close(0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 17:27:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$VT_RELDISP(r1, 0x540b) 17:27:44 executing program 2: r0 = inotify_init1(0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f00000005c0)) 17:27:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x18c8}}, 0x0) 17:27:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0x5450, 0x0) 17:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup2(r0, r1) write$P9_RSTAT(r1, 0x0, 0x0) 17:27:44 executing program 2: r0 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic\x00', 0x6) 17:27:44 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) tkill(r0, 0x1000000000016) 17:27:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000180)=@ethtool_sset_info}) 17:27:44 executing program 5: socket$inet6_icmp(0x2, 0xf, 0x3a) 17:27:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:27:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40) 17:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:45 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x5451, 0x0) 17:27:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) close(r1) fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/153) 17:27:45 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5451, 0x0) 17:27:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOC_PR_RELEASE(r0, 0x5451, 0x0) 17:27:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000), 0x2, 0x0) 17:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 17:27:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:27:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) dup2(r1, r0) shutdown(r0, 0x0) 17:27:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40840) 17:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:45 executing program 4: r0 = creat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:27:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0) 17:27:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000001940), 0x173, 0x0, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 17:27:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x72) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5452, &(0x7f0000001200)={{}, 0x0, 0x0, @unused, @name="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"}) 17:27:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:46 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:46 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000340)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r3 = dup2(r1, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000013) 17:27:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xf, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:46 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x10e, 0x5, 0x0, 0x0) 17:27:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 17:27:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x98) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:27:47 executing program 4: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x6, 0x0) 17:27:47 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:27:47 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 17:27:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFBR(r0, 0x8953, &(0x7f0000000000)=@generic) 17:27:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = dup2(r0, r0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x5f84a8ab334867a7) 17:27:47 executing program 4: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x10440, 0x0) fchownat(r1, &(0x7f0000000040)='\x00', 0xffffffffffffffff, 0x0, 0x1000) 17:27:47 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:27:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fadvise64(r0, 0x0, 0x0, 0x2) 17:27:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xe, 0x1a, 0x1ab, 0x0}) 17:27:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) fchownat(r1, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 17:27:47 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 17:27:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:47 executing program 0: r0 = msgget$private(0x0, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f00000001c0)=""/252) 17:27:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup3(r0, r1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 17:27:48 executing program 1: sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') 17:27:48 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 17:27:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2000005c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:48 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:48 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNDETACHFILTER(r0, 0x5450, 0x0) 17:27:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:27:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x2000c882) 17:27:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24004810) 17:27:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) recvfrom$packet(r2, 0x0, 0xfe3c, 0x142, 0x0, 0x50) 17:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:49 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 17:27:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RSTATu(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:49 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$unix(r1, 0x0, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) 17:27:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r0, 0x4b6b, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000018c0)="9955e25c477ee66b47400bb9ca93097f8dd952abb0504f8cbf108bc061fb8d401efdf1b185e80e1986c8d07174d16abdca6cfb7f6475bd95c62569a56101c29fb17e9e41c72a95c48a922de0791ce54441f28076c5182e185c72344b63c2c74c9fcfa39c58901897c8c15e18c29536ed2ffac45fc92badf724a7515675d4e02747a588687f08436f21ec1cc6a82ecd4eed1ad522c6d94e5cb96159609d4b379bfb38db6da35e3cad4ca97832a074020dd77d66137ae4dd630caf1ebbbc46f04f4235d75c121d1c5ed667fc1bf62fd7224c923e2906084eb8bd998d2ab428aebb0cb50ef3ec8deba20592dd14720223d1ae1319c0e768d6f015a0c63a8df2bb8c655f8cc3736df6afa5e53533af51c1ec9987b4fc98d44b65142a9e56b6b36533af91bfbc0399d2fb74764ddd0277c12bb492aac1ee4daaab45f864056a1d1cd74e51bdc32a8e68605fdff20d619ae753a366f65bea578bb7d0a65dce30674dc8392d0b4526e47aa07ff37d256e5a0960d4c2a8e2232ab8c311cfb42a0d43ec5391650287c66309f931fe5ea21b716cb85ec5e2dc7a4e989c0855f94f6f179856ea307cac0254ca704e660476ff133d437c31d57c59f281dc97925cb9d099b5b84e247417429fb364b4eff40d487d150f43ab4f55089e440950745a2dba2f8afe2d1c54a1dd103f18dbc602c53b5f8bb2c21727ef669458599948fd1eeb3137ca886b200ecf73a680da1c049195c9deb86f528fb7dcde7f1e51d6daf53bb6f59d081a87ba2ce0f2c973205bed62f8f5e07161968fe080a665d9f91d769c01a6192e1387f591a42b9d264b502ebda0dc34be2d1056b81bf23631e555c02f513481a886c33dd9d0c3d2f8db6028613ae7daa18cd8bc9575703ab00bb3de21fc9a285ec6732dca32433e8be24028fc7801b6c08de466fd83f8cf1f9ba3bfa4dd111d36fc06aa070f12232f3535736b545cd9496ba742c4316c26e382b16739c65fdd131fce2d0c718a499df6ab1e4e0786e4b212833e42ef96d70c054669e129a45cb5cc14cf5e4c0e65f66c3b035c887d7818033e1a7b2c6cf87a34269f1073fa87eb9e85cb4ea341a402117b9d93ee3e0f48ee7f9af2add6b22ff9d8c0d7851921ed47afa2d5f93c55864df1d02413d9413046448ec27b98af63014a101510b402968054821dcc23acf7b60e9079c0d3542d47d36f5d6795413ded86dd21792d41944af183c3afca981c67180512f03ece095d825b122435d8fd963116dcc66d966c6148db566870e5b0fde8b555e3274fba0987627b75dd8837f0e7ab46184f50087d500ff465e458af12a805598c30b4842c57f10192c6e2c98d0366dab81d960655b0cd263fd1ec1960a820c14327349fbc02f257c5359b185221b8623a5b184ab49a4aa14ce9c8d56aa862db4de1022197a88e1df7e916baf0bbaa1af4de68"}) 17:27:49 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003840)={0x0}}, 0x0) 17:27:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x7, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:49 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:49 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 17:27:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$EVIOCGID(r0, 0x5450, 0x0) 17:27:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') sendfile(r0, r0, 0x0, 0x8001) 17:27:50 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 17:27:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create(0x8001) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:27:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) openat(r0, &(0x7f0000000040)='/', 0x0, 0x0) 17:27:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:50 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 17:27:50 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 17:27:50 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 17:27:50 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x1b) listen(r0, 0x0) r1 = accept$packet(r0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x0) 17:27:50 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$evdev(r0, 0x0, 0x0) 17:27:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x12, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) 17:27:50 executing program 1: pipe2$9p(&(0x7f0000001d80)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 17:27:50 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 17:27:50 executing program 0: r0 = eventfd(0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:50 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup(r1) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast2, @empty, @mcast2}) tkill(r0, 0x1000000000016) 17:27:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$char_usb(r0, &(0x7f0000000080)='0', 0x1) [ 430.812661][T13694] syz-executor.4 (13694): /proc/13689/oom_adj is deprecated, please use /proc/13689/oom_score_adj instead. 17:27:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={0x0}}, 0x0) 17:27:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) write$P9_RWRITE(r1, 0x0, 0x0) 17:27:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$char_usb(r0, &(0x7f0000000080)='0', 0x1) 17:27:51 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) dup2(r0, r1) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 17:27:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 17:27:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x19, 0x0, 0x0) 17:27:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$char_usb(r0, &(0x7f0000000080)='0', 0x1) 17:27:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:27:51 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x24000841) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={0x0}}, 0x2000a800) 17:27:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x3, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$char_usb(r0, &(0x7f0000000080)='0', 0x1) 17:27:51 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 17:27:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x100000068) write$char_usb(r0, &(0x7f0000000180)="0fbe", 0x2) 17:27:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b64, &(0x7f0000000080)) 17:27:52 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLINK(r0, &(0x7f0000000080)={0xfffffffffffffc90}, 0xfffffdf3) write$9p(r0, &(0x7f0000000000)="c5", 0x1) 17:27:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5452, &(0x7f0000002040)={{}, "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"}) 17:27:52 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x4, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0xf0}}, 0x0) 17:27:52 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 17:27:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = dup2(r0, r0) r2 = accept$inet6(r1, 0x0, 0x0) r3 = socket$unix(0x1, 0x8000000001, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0xe, 0x0, &(0x7f0000000040)) 17:27:52 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000001e80)='\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 17:27:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x5, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 17:27:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002080)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x2000c000) 17:27:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = dup2(r1, r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:27:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x6, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:52 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:27:52 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) 17:27:52 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={0x0}}, 0x0) 17:27:52 executing program 2: close(0xffffffffffffffff) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = socket$unix(0x1, 0x1000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x21, 0x0, &(0x7f0000000200)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/54) 17:27:52 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x331, &(0x7f0000000200)={0x0}}, 0x20000000) 17:27:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x7, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x6c1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 17:27:52 executing program 4: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 17:27:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:27:53 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x0) ioctl$BLKFLSBUF(r0, 0x5450, 0x0) 17:27:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x2, &(0x7f0000000480)) 17:27:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x8, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xf) tkill(r1, 0x1000000000016) 17:27:53 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r1, 0x1000000000016) 17:27:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) getpeername$netlink(r1, 0x0, &(0x7f0000000100)) 17:27:53 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x80) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x9, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:53 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x2, &(0x7f00000000c0)) 17:27:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xe, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:53 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:27:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010000, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 17:27:53 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x92a43, 0x9e) 17:27:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x5450, 0x0) 17:27:53 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2004c004, 0x0, 0x0) 17:27:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000800)={0x19980330}, &(0x7f0000000840)) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={0x0}}, 0x0) 17:27:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:27:53 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000980)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) dup2(r0, r1) write$P9_RSETATTR(r1, 0x0, 0x0) 17:27:54 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x60, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:27:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x41, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-'}, 0xfffffffffffffdd0, 0x0) 17:27:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 434.003654][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:27:54 executing program 2: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:27:54 executing program 1: pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 434.051186][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:27:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:54 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) 17:27:54 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 17:27:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000440)=0x400100000001, 0x4) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) tkill(r2, 0x8001004000000016) 17:27:54 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r1, r0) ioctl$KDFONTOP_SET(r0, 0x4b60, 0x0) 17:27:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44000) 17:27:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 17:27:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x18e, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:54 executing program 2: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty}}, 0xfffffe91) 17:27:54 executing program 4: r0 = socket(0x2000000000000002, 0xa, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x12, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX]}]}, 0x1c}}, 0x0) 17:27:54 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 17:27:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x300, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:27:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f0000000040)) 17:27:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 17:27:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x500, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5451, 0x0) 17:27:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004400)='comm\x00') dup2(r0, r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x4b, 0x0, &(0x7f0000000080)) 17:27:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 17:27:57 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f00000016c0)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x0) 17:27:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000004b00)='./file0\x00', 0x92242, 0xa) 17:27:58 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) 17:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0xd, 0x0, 0x0) 17:27:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x600, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x200480d0) 17:27:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x2d, &(0x7f00000043c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) 17:27:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f0000004040)) 17:27:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8840) 17:27:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x24004086) 17:27:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) fcntl$addseals(r0, 0x2, 0x0) 17:27:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x700, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x5421, &(0x7f00000006c0)) 17:27:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) 17:27:58 executing program 1: semget$private(0x0, 0x4, 0x181) 17:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:27:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x900, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:27:58 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 17:27:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:27:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, 0x0) 17:27:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xe00, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:27:59 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:27:59 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 17:27:59 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x290}}, 0x0) close(r0) r2 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 17:28:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf00, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x40cc) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$TCSETS(r3, 0x5450, 0x0) r4 = socket(0x10, 0x80003, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000240)={0x6, 'veth1_macvtap\x00', {0x8}}) 17:28:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010000, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 17:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 17:28:00 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$inet(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) 17:28:00 executing program 2: mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x810018, &(0x7f0000000140)='#\x14\x8a\xbeo\x85\x86H\x15\x8453S\xe6\xcf\xd0sx0J2O\xfbgQr\xe4\b\x00\x00\x00}w\x1f\xaf\x87!\x02f\xd4y@W\x90\x80>\xf4)\xb58\x17\x9b\x80\x12g\xad\xc6\xb2\xf6\'\xedr\xc0\xab\xcb}v\xe4\xab\xe9\x8c\xc2\x10\x15;+\xea\xf7\xf4=\tZ2c\xbb\x1f\t,\x83\xe77\x80d\xd07H>\xd7\xc1\x9d.{\x1a<%\xc4\xda1\x91\xe7p\xb1\xd3\x83\xfe\xe0\xa1W\xe7\x11VTl.\xc7\x00A\x1e\xbax\xcd[,\x88\xbbK:c#\xdd\xf1$\x81\x17\xdat\x8akD\xaf\x8e[G\x15\xca\x01\x03\xfe0\xcc\xbf\xb5\xb8\xf9\xcd\xea\x9c') 17:28:00 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 17:28:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 17:28:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x3f00, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:00 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x2004080) [ 440.198898][T14081] sysfs: Unknown parameter '#Š¾o…†H„53SæÏÐsx0J2OûgQrä' [ 440.229246][T14081] sysfs: Unknown parameter '#Š¾o…†H„53SæÏÐsx0J2OûgQrä' 17:28:00 executing program 4: r0 = open(&(0x7f00000009c0)='./file0\x00', 0x40440, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffb939}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 17:28:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') ioctl$EVIOCSMASK(r0, 0x5451, 0x0) 17:28:00 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x5450, 0x0) 17:28:00 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x18040, 0x0) ioctl$sock_SIOCADDRT(r0, 0x5451, 0x0) 17:28:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x6000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:00 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept$unix(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_ifreq(r2, 0x8942, &(0x7f0000000180)={'sit0\x00', @ifru_names}) 17:28:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r1, r0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 17:28:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4824) 17:28:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x8e01, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000880), 0x4) 17:28:01 executing program 1: r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) ioctl$BLKZEROOUT(r0, 0x5450, 0x0) 17:28:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x3e, 0x0, 0x0) 17:28:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x842, 0x0) dup2(r0, r1) ioctl$TCFLSH(r1, 0x540b, 0x0) 17:28:01 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00007b5000), 0x8) ioctl$LOOP_GET_STATUS(r0, 0x5452, &(0x7f0000000080)) 17:28:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) r1 = dup(r0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, 0x0) 17:28:01 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f00000001c0)) 17:28:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x30000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = dup(r1) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8000) 17:28:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) close(r0) eventfd(0x10001) read$char_raw(r0, &(0x7f0000001600)={""/44369}, 0xae00) 17:28:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$P9_RRENAMEAT(r2, 0x0, 0x0) 17:28:02 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRWALK(r0, 0x0, 0x0) 17:28:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 17:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40080) 17:28:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x34000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:02 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000080)='/', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x18001, 0x0) 17:28:05 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x5421, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) 17:28:05 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x5451) 17:28:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x17, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000ebffffff00"}, 0xd8) 17:28:05 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x400300, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0, 0xffffffc9}}, 0x0) 17:28:05 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) dup2(r0, r2) getsockopt$inet_int(r2, 0x0, 0xc, 0x0, &(0x7f00000001c0)) 17:28:05 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x30, &(0x7f0000ffd000/0x1000)=nil) r3 = geteuid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xee01]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000540)={{0x3, r3, r4, r5, r6, 0x100, 0x7}, 0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x8}) ioprio_set$uid(0x0, r3, 0x10000) dup2(r1, r0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000380)) 17:28:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x90) 17:28:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf0ffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:05 executing program 2: r0 = socket(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0}, 0x20000068) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={0x0}}, 0x20000800) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r0, 0x0) 17:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window, @timestamp], 0x20000158) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:28:05 executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000007c0)) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 17:28:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x1000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$BLKTRACESETUP(r0, 0x5450, 0x0) 17:28:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$F_SET_RW_HINT(r0, 0x3, 0x0) 17:28:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x101200, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5428) 17:28:05 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) close(r0) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) 17:28:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x2000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000400)) 17:28:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200180c1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x70}}, 0x0) close(r0) r2 = gettid() openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 17:28:06 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x0) 17:28:06 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup(r0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x800000000015) 17:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010003, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RAUTH(r2, 0x0, 0x58) tkill(r1, 0x1000000000016) 17:28:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x3000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0xb, 0x0, &(0x7f0000000100)) 17:28:06 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) 17:28:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$inet(0x2, 0xa, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:28:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x4000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, 0x0, &(0x7f0000000180)) 17:28:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004051) 17:28:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:28:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x5000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:06 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), 0x8) 17:28:06 executing program 5: r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80440, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:07 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, "0c3552c94c54724c2743a99b698043d1b77d8d"}) 17:28:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MIGRATE(r0, 0x8907) 17:28:07 executing program 4: mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000080)='syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x6000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:07 executing program 5: capset(&(0x7f0000001300)={0x20080522}, &(0x7f0000001340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) 17:28:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 17:28:07 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vga_arbiter\x00', 0x181842, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 17:28:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') dup2(r0, r1) getsockopt$packet_buf(r1, 0x107, 0xf, 0x0, &(0x7f0000000040)) 17:28:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x7000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:07 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x88) fchown(r0, 0x0, 0x0) 17:28:07 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) 17:28:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) 17:28:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5421, &(0x7f00000000c0)) 17:28:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x8000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:07 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "c2694506fa44b54686257c7910fcff32000000000000831d6ab108e9d7989227"}) 17:28:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) ioctl$TIOCL_SETVESABLANK(r1, 0x4b37, 0x0) 17:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20050001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff31, &(0x7f0000000000)={0x0, 0xfffffd78}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 17:28:08 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x81) 17:28:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x9000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) 17:28:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) tkill(r2, 0x1000000000016) 17:28:08 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000100)) 17:28:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0xe, 0x0, &(0x7f0000000080)) 17:28:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xe000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:28:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='{vmnet1posix_acl_access@mime_type\x00', 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) 17:28:08 executing program 2: r0 = socket(0x2, 0x3, 0xf9) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x80) ioctl$sock_SIOCSIFBR(r1, 0x5452, &(0x7f0000000000)=@get={0x1, 0x0}) 17:28:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 17:28:08 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002780)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 17:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 17:28:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x3f000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:08 executing program 5: r0 = epoll_create(0x3fff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:28:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 17:28:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDGKBTYPE(r1, 0x4b33, 0x0) 17:28:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x60000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RATTACH(r0, 0x0, 0xfffffeb5) 17:28:09 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 17:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNGETDEVNETNS(r0, 0x5450, 0x0) 17:28:09 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) ioctl$PIO_FONTX(r0, 0x541b, &(0x7f0000000540)={0x0, 0x0, 0x0}) 17:28:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:28:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:28:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x8e010000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:09 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 17:28:09 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$FITRIM(r0, 0x8906, 0x0) 17:28:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) dup3(r0, r1, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x0) 17:28:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:28:09 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) writev(r0, 0x0, 0x0) 17:28:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x9effffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5450, 0x0) 17:28:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20000090) 17:28:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0) 17:28:10 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 17:28:10 executing program 1: creat(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x100, 0x0) ioctl$FIONCLEX(r0, 0x5450) 17:28:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008000) 17:28:10 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40000) 17:28:10 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f00000000c0)) 17:28:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xf0ffffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:10 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) 17:28:10 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffe3f}}, 0x0) 17:28:10 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xfffff000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) 17:28:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:28:10 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 17:28:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xffffff7f, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:10 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$packet_drop_memb(r0, 0x10e, 0x5, 0x0, 0x0) 17:28:10 executing program 5: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 17:28:10 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0)) 17:28:11 executing program 1: r0 = socket(0x11, 0x3, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 17:28:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xffffff9e, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:28:11 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x0, 0x1, [], [@jumbo, @ra]}, 0x18) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:11 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) [ 451.004356][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 451.040710][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:28:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:11 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 17:28:11 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 17:28:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) r2 = dup2(r1, r1) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r1, &(0x7f0000002740)=@un=@abs, 0x80) 17:28:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0xffffffff, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:11 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 17:28:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="12", 0x1}], 0x1) 17:28:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmsg$inet(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 17:28:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000440), &(0x7f0000000480)=0x4) 17:28:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x5452, &(0x7f0000000080)={'caif0\x00', {0x2, 0x0, @multicast1}}) 17:28:12 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0x5451, 0x0) 17:28:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:28:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000010) 17:28:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) dup2(r0, r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:28:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8c0) 17:28:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$tcp_mem(r2, 0x0, 0x0) 17:28:13 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5451, 0x0) 17:28:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r0, r1, 0x0) ioctl$GIO_UNIMAP(r1, 0x5427, 0x0) 17:28:13 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r1) dup3(r1, r0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:28:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x5451, 0x0) 17:28:13 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') close(r0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)) 17:28:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(r2, 0x1000000000016) 17:28:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:28:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x4, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:13 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0) 17:28:13 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 17:28:13 executing program 4: r0 = socket(0x11, 0x3, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 17:28:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x5, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:13 executing program 4: r0 = socket(0x11, 0x3, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 17:28:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x80) sendmsg$inet(r1, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x0) dup2(r0, r2) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:13 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFADDR(r0, 0x5451, 0x0) 17:28:13 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) pread64(r0, 0x0, 0x0, 0x0) 17:28:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002240)='/dev/vcsa#\x00', 0x1000, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "88a97cd96c92c6c4", "9e9a32d0ab3a2af44d7a172cc4d771ca", "d9ebde9a", "fd0a8cb10b0252ca"}, 0x28) 17:28:14 executing program 4: r0 = socket(0x11, 0x3, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 17:28:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x6, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "77bcc91b0c67730c985c1a019651158a020bb1"}) 17:28:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:14 executing program 5: r0 = socket(0x10, 0x803, 0x2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 17:28:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:28:14 executing program 4: r0 = socket(0x11, 0x3, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 17:28:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x7, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:14 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) 17:28:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 17:28:14 executing program 5: r0 = socket(0xa, 0x3, 0xffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000007c0)={&(0x7f0000000040), 0xfd9d, &(0x7f0000000780)={0x0}}, 0x0) 17:28:14 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x60402, 0x0) write$char_raw(r0, 0x0, 0x0) 17:28:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x8, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:14 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0x4, 0x0, 0x0) 17:28:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x40002) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}) 17:28:15 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x29, &(0x7f0000000040)={'filter\x00', 0x4}, 0x200000a8) 17:28:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='!\x00', 0x0) dup2(r0, r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={0x0}}, 0x0) 17:28:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8902, &(0x7f0000000040)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) 17:28:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x40081271, 0x0) 17:28:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) [ 457.175651][ T9785] Bluetooth: hci0: command 0x0406 tx timeout 17:28:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 17:28:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) dup3(r1, r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) write$binfmt_elf64(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x6c1) r2 = dup(r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 17:28:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 17:28:18 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup2(r0, r1) write$P9_RRENAME(r1, 0x0, 0x0) 17:28:18 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x11, 0x0, &(0x7f00000000c0)) 17:28:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x20000004) 17:28:18 executing program 2: r0 = epoll_create(0x7ff) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:28:18 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x188c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 17:28:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 17:28:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x60, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010005, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) tkill(r2, 0x1000000000016) 17:28:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socket$inet6(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0) 17:28:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) 17:28:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = gettid() tkill(r2, 0x1000000000016) 17:28:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:19 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x90040, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 17:28:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010000, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004020) 17:28:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x18e, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:19 executing program 0: r0 = eventfd2(0x6, 0x0) readv(r0, 0x0, 0x0) 17:28:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)) 17:28:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x300, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:19 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xfd10, &(0x7f0000000340)={&(0x7f0000000240)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x48}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}}, 0x0) 17:28:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000000000e0ff"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 17:28:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 17:28:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000580)) 17:28:21 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCGUNIQ(r0, 0x5450, 0x0) 17:28:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x29, 0x39, 0x0, 0x18) 17:28:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x500, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:21 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044591, 0x0) 17:28:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000100), 0x0, 0x20000050, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80) 17:28:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/208, &(0x7f0000000000)=0xd0) 17:28:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup2(r1, r0) getpeername$unix(r0, 0x0, &(0x7f0000005240)) 17:28:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x600, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') dup2(r0, r1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x33, 0x0, &(0x7f0000000080)) 17:28:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x2, &(0x7f0000000000)) 17:28:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept$unix(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 17:28:22 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) dup2(r1, r0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) [ 462.295761][ T9785] Bluetooth: hci1: command 0x0406 tx timeout [ 462.303289][ T9785] Bluetooth: hci2: command 0x0406 tx timeout [ 462.327115][ T9785] Bluetooth: hci3: command 0x0406 tx timeout [ 462.355648][ T9785] Bluetooth: hci5: command 0x0406 tx timeout [ 462.380846][ T9785] Bluetooth: hci4: command 0x0406 tx timeout 17:28:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFLAGS(r0, 0x8953, &(0x7f0000000080)) 17:28:22 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x41240, 0x0) eventfd(0x0) ioctl$RNDGETENTCNT(r0, 0x5452, &(0x7f0000000140)) 17:28:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x700, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) 17:28:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 17:28:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) 17:28:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) 17:28:23 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe39}}, 0x0) 17:28:23 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5451, 0x0) 17:28:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x900, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:23 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:23 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454ca, 0x400000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/241) 17:28:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 17:28:23 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24008080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) tkill(r0, 0x1000000000015) 17:28:23 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xe00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:23 executing program 1: r0 = eventfd2(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40) 17:28:23 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:28:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) ioctl$EVIOCGPHYS(r1, 0x80404507, 0x0) 17:28:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:23 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 17:28:23 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000005c0)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) 17:28:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x3f00, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:23 executing program 4: r0 = socket(0xa, 0x80801, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0}}, 0x1400c0d1) 17:28:24 executing program 1: r0 = timerfd_create(0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:28:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup2(r1, r0) ioctl$TIOCEXCL(r0, 0x540c) 17:28:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$P9_ROPEN(r0, 0x0, 0x0) 17:28:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x5031, r0, 0x0) 17:28:24 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) dup3(r0, r2, 0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x6000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCMSET(r0, 0x541b, &(0x7f0000000040)) 17:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmmsg$sock(r0, 0x0, 0x0, 0x40844) 17:28:24 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x15, 0x8c006e8fc02d7c54, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 17:28:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/3\x00') ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000002c0)) 17:28:24 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2008c847, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x9c, 0x4008011, 0x0, 0xffffff2a) 17:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x8e01, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 464.258376][T15015] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 17:28:24 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 17:28:24 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x5450, 0x0) 17:28:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000002000)={'batadv_slave_0\x00'}) 17:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_int(r0, 0x10e, 0x4, 0x0, 0x0) 17:28:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 17:28:24 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={0x0, 0x2a1, &(0x7f0000000140)={0x0, 0x3a}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 17:28:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x4d) 17:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x30000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0xebc0) dup2(r0, r1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f5449117da533ab250a6816b655635c5d2af59"}) 17:28:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x5450, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x8, 0x1, 0x8, 0xfc1d, 0x1, "a17c3c6db33ac2b27c677442607e30e61c05d9", 0x3ff, 0x8aa}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x5450, 0x0) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000240)="03d17807a96aed160cbc3b076775aef76e352bffae7d3b2b0676ada7975ad73a722094d5a64b5c63aa94581afea74afb0eccd7db06376bdacbd1bd54dd372adbdaf2c808023ba889cdd42defb31242926562f38f7327f046f8c84145ec55f83ba0fef15758165a97d63bb5f63d6788478eb634b15e4e5c3b3a70006810411d7a52e7abb7ef4544d3fbffd0c9ceaa943597fe379a61f9f35131e8d7b1e28ecf3308afc3e48e69a0871cfec0b5e8ae9c74aa6dd490", 0xb4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/autofs\x00', 0x0, 0x0) close(r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000000c0)={0x7, 0x1a70000000000000}) close(r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x4a581, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000140)={0xffff, 0xbd, "494b96b35cf2f2b31beb520de1cc255f06f0539418ef0b6ba2f89a16e0f5cfa8fb023baf20ab4120b26252b51b8e1c8e1a41c267778eb34bf56ae01397139f4df28be2467d31a6b57465b7a20037e97a6e63b34645efd39823665a6e07d1fa3117d82a47738d6e11e36c7a5bdfe002663b686696dcec6468563805c385216a08190c3b48b3f4093cec15f0e94ac573e01ae946153a1314093b169fb4d07c2d7d103eb0e4c3f189769c9623de1e49501254d2b0dcef101c2d1fb3b3e03f"}) 17:28:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) fcntl$setlease(r0, 0x406, 0x0) 17:28:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c014) 17:28:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x34000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000100)) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 17:28:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x24040084) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 465.057433][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:28:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b66, 0xe07400) 17:28:25 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:28:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, 0x0, 0x0) 17:28:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) tkill(r2, 0x1000000000016) 17:28:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x400300, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:25 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 17:28:25 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$BLKDISCARD(r0, 0x2, &(0x7f00000002c0)) 17:28:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000003080)={0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:28:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGLED(r0, 0x5450, 0x0) 17:28:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffffffffffc7, 0x30000815, 0x0, 0x0) 17:28:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf0ffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:26 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000003000)='ns/ipc\x00') fstatfs(r0, &(0x7f0000000080)=""/240) 17:28:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, 0x0) 17:28:26 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:26 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x5450, 0x0) 17:28:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x7103) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$KDENABIO(r0, 0x4b36) 17:28:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x1000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:26 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, r2/1000+30000}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = dup(r1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x24800) 17:28:26 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vcs\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x3) 17:28:26 executing program 2: r0 = eventfd(0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:28:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x200580c0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:28:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 17:28:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, &(0x7f0000001900)) 17:28:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getpeername(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80) dup3(r1, r3, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f0000000200)) 17:28:27 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:28:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x3000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @ramp}) 17:28:27 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x200000000001, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 17:28:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:27 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x5450, 0x0) 17:28:27 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x10450, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x6857b21ff1155d94) write$P9_RCREATE(r0, &(0x7f0000000140)={0x18}, 0x18) 17:28:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x4000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r3, 0x0, 0x0) tkill(r2, 0x1000000000016) 17:28:27 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:28:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000000)=0x80) dup3(r0, r1, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 17:28:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) 17:28:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x5000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:28:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x12, 0x0, &(0x7f0000000040)) 17:28:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x6000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 17:28:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:28:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r1, 0x1000000000016) 17:28:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x69, 0x0) dup3(r0, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x0) 17:28:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) dup3(r0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5414, 0x20000004) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 17:28:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x7000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:28 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 17:28:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48054) 17:28:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x5409, 0x0) 17:28:28 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, 0x0, &(0x7f0000000180)) 17:28:28 executing program 0: r0 = epoll_create(0x8) ioctl$BLKRRPART(r0, 0x5450, 0x0) 17:28:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x8000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x1f6) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) sendmsg$unix(r1, &(0x7f0000000b80)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x20007ffc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}}, 0x4800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:28:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x4c80, 0x0) 17:28:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RLOCK(r0, 0x0, 0x0) 17:28:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x9000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) dup2(r0, r1) setsockopt$inet_group_source_req(r1, 0x0, 0xf, &(0x7f0000000940)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 17:28:28 executing program 5: pipe2$9p(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:28:28 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000001bc0)) 17:28:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xe000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffff9c, 0xfffffffffffffffd, r0, 0x0, 0x0, 0x7) 17:28:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5450, 0x0) 17:28:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xb8}}, 0x0) 17:28:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$BLKRRPART(r3, 0x5450, 0x0) 17:28:29 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept$packet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 17:28:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x349, 0x20010080, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c003) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() tkill(r2, 0x1000000000015) [ 469.061571][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 469.110785][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:28:29 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x5450, 0x0) 17:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r0, r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2000c880) 17:28:29 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BLKRRPART(r0, 0x5450, 0x0) 17:28:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 17:28:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x3f000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:29 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:29 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r0, 0x0, 0x0) 17:28:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) tkill(r2, 0x401004000000016) 17:28:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r0) socket(0x40000000002, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 17:28:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x60000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x3e, 0x0, 0x0) 17:28:29 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x400c840) 17:28:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) r2 = dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x0, 0x0, 0x0) 17:28:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 17:28:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) dup2(r0, r1) getpeername$inet6(r1, 0x0, &(0x7f0000000280)) 17:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKALIGNOFF(r1, 0x5451, 0x0) 17:28:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x8e010000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:30 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\'ppp1security\x00', 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 17:28:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 17:28:30 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x2, &(0x7f0000000000)) 17:28:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x9effffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:30 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5451, 0x0) 17:28:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) 17:28:30 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 17:28:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$GIO_UNIMAP(r1, 0x4b66, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:28:30 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:28:30 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r1, r0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) 17:28:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) close(r0) tkill(r2, 0x1000000000016) 17:28:30 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB='B'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @link_local}, 0x10) 17:28:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xf0ffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 470.959139][T15392] device lo entered promiscuous mode [ 470.983727][T15385] device lo left promiscuous mode 17:28:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r2 = dup2(r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) close(r2) socket(0xa, 0x2, 0x0) tkill(r1, 0x1000000000016) 17:28:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x5452, 0x5078e3) [ 471.006441][T15397] device lo entered promiscuous mode [ 471.019663][T15385] device lo left promiscuous mode 17:28:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xfffff000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfff4, 0x20050801, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) tkill(r2, 0x1000000000016) 17:28:31 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000080)=0xfffffffa, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 17:28:31 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$notify(r2, 0x402, 0x0) 17:28:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xffffff7f, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$packet(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="6fa0fba51a60"}, 0x14) 17:28:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 17:28:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, 0x0) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:28:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x29, 0x31, 0x0, 0x300) 17:28:36 executing program 4: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:28:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x0) 17:28:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xffffff9e, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, &(0x7f0000001280)={@rand_addr, @empty, @local={0xac, 0x14, 0x0}}, 0xc) 17:28:36 executing program 0: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff}}) 17:28:36 executing program 5: msync(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0) 17:28:36 executing program 1: r0 = socket$inet6(0x1c, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, 0x0, 0x0) 17:28:36 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x19, &(0x7f00000000c0)='p', 0x1) 17:28:36 executing program 2: io_setup(0x1, &(0x7f0000000b80)) io_setup(0x0, &(0x7f0000000b80)) 17:28:36 executing program 0: add_key$user(&(0x7f0000000380)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 17:28:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xfffffff0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xb0, 0xffffffff, 0xffffffff, 0xb0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x9}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 17:28:36 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000700)={&(0x7f00000004c0), 0xc, &(0x7f00000006c0)={0x0}}, 0x0) [ 476.422189][T15480] x_tables: duplicate underflow at hook 3 17:28:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'macvlan1\x00', {0x28, 0x4, 0x0, 0x0, 0x0, 0x3, 0x101}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 17:28:36 executing program 5: ioperm(0x1, 0x7f, 0x0) 17:28:36 executing program 4: r0 = socket(0xa, 0x3, 0x1f) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:28:36 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 17:28:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 476.657670][T15489] x_tables: duplicate underflow at hook 3 17:28:36 executing program 2: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 17:28:37 executing program 0: r0 = socket(0x1, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 17:28:37 executing program 1: r0 = socket(0x1, 0x1, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x0, 0x1, &(0x7f0000000000)=[{}], 0x0) 17:28:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002e00)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x4048094) 17:28:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x80) sendmmsg$inet(r0, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="dd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{0xfffffffffffffffd}], 0x1}}], 0x3, 0xc000) 17:28:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:37 executing program 0: clock_gettime(0x4ddcf116b24a2f23, 0x0) 17:28:37 executing program 2: r0 = socket(0x1, 0x2, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 17:28:37 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[], 0x58}}, 0x0) 17:28:37 executing program 2: socket(0x10, 0x2, 0xdb6) 17:28:37 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 17:28:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 17:28:37 executing program 4: r0 = socket(0xa, 0x3, 0x20) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 17:28:37 executing program 4: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:28:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') write$FUSE_BMAP(r0, 0x0, 0x0) 17:28:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @ifru_ivalue}) 17:28:37 executing program 2: io_setup(0x1, &(0x7f0000000b80)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000000)={0x77359400}) 17:28:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x24, 0x0, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'callforwarding\x00'}]}, 0x30}}, 0x0) 17:28:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:37 executing program 4: r0 = socket(0x1, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x1) 17:28:37 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @xdp, @can}) 17:28:37 executing program 5: socket(0x10, 0x3, 0x3) 17:28:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 17:28:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x4}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/170, 0xaa) 17:28:38 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40}, {0x6}]}) 17:28:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 17:28:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 17:28:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local}}}}) 17:28:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:38 executing program 4: io_setup(0xffff, &(0x7f0000000b80)) 17:28:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 17:28:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x6d}}, 0x0) 17:28:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1, 0x0) read$eventfd(r0, 0x0, 0x0) 17:28:38 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000015c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 17:28:39 executing program 0: set_mempolicy(0x2, &(0x7f00000003c0)=0x5, 0x3) syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 17:28:39 executing program 5: syz_mount_image$qnx4(0x0, &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="c1d7801b525af459e3eb3431b9b030c77655d5093948439ec82e5058dd411fa84b0d7c09f82c045f2f5d4fd786d0ca5a148fd73559fcae1de9331c75e3b7af3a47056db7e49bb6f2c3ea514ba513a968e41f24b1678adba439446fbe7a09eea7ec3a4d86", 0x64, 0x1}, {&(0x7f0000000100)="f62b33444ed9a537812cf3781848889be8df6243f8c42272a7fec2003b8e2d69260f9f9931bfa7b60f190b1a818683a854ba6608650b2e56f7aec133f93ce22c1e563e96e5b6f4a927f8e0cc33d2f3542c15bbd5e2bdeace8fb77d7d42c902ff972ae912e3428f0512486216dae411ffc5eac3917db65e446be0cbf66f0849265edbd1ff6a83f86035a92f214a4cbcad9ef405e544d52471d9270cd5c13c535a392773d85330b95aedcba8e0932a68e541118180a36ddc386270077f200ef36a49960399d953302ae6762ee4119130d625c3c60bc7511cd93a3a832156365104dc49edcc8f994336dc2b360c00fcaa730ef9", 0xf2, 0xc520}], 0x1000, &(0x7f0000000240)={[{}, {'*\xea/^)!'}, {',!'}, {'>\\&$'}, {}, {}, {'-'}, {',.-)'}, {'))'}]}) 17:28:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000640)) 17:28:39 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x121031, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x0) 17:28:39 executing program 1: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c02, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 478.915930][T15594] loop5: detected capacity change from 197 to 0 [ 478.957869][T15592] hpfs: Bad magic ... probably not HPFS 17:28:39 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) [ 479.062107][T15594] loop5: detected capacity change from 197 to 0 17:28:39 executing program 0: set_mempolicy(0x2, &(0x7f00000003c0)=0x5, 0x3) syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 17:28:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000004cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xa7, &(0x7f0000000200)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) [ 479.214424][T15613] hpfs: Bad magic ... probably not HPFS 17:28:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000004cc0)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xa7, &(0x7f0000000200)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 17:28:39 executing program 4: mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x0, 0x0) 17:28:39 executing program 0: set_mempolicy(0x2, &(0x7f00000003c0)=0x5, 0x3) syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 17:28:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000000)={'team_slave_0\x00', @ifru_addrs=@can}) 17:28:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 479.483228][T15629] hpfs: Bad magic ... probably not HPFS 17:28:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 17:28:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x5382, 0x0) 17:28:39 executing program 2: socketpair(0xa, 0x3, 0x9, &(0x7f0000000000)) 17:28:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000100)=@raw=[@generic={0x2e}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:28:39 executing program 0: set_mempolicy(0x2, &(0x7f00000003c0)=0x5, 0x3) syz_mount_image$hpfs(&(0x7f0000000000)='hpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)) 17:28:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x200002) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580)='/dev/cuse\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='(`\x00', 0x0, r1) 17:28:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="1c00000031000d08d22780648c6394fb0124fc0010000b400c410209", 0x1c}], 0x1}, 0x0) 17:28:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x5d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) recvmsg$kcm(r0, &(0x7f0000002980)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) 17:28:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x5d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001500)=[@ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0x0, [{@local}, {@broadcast}, {@rand_addr=0x64010100}, {}, {}]}, @generic={0x88, 0x2}]}}}], 0x40}, 0x0) [ 479.930849][T15650] hpfs: Bad magic ... probably not HPFS 17:28:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x29, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)) getpid() perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 17:28:40 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20) 17:28:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 17:28:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 17:28:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:40 executing program 0: syz_usb_connect$cdc_ecm(0x7, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 480.328566][T15675] BPF:Unsupported section found [ 480.358350][T15676] BPF:Unsupported section found 17:28:40 executing program 4: syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:28:40 executing program 5: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x6ef}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) 17:28:40 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0x64, 0xbe, 0x6b, 0x10, 0x543, 0x1922, 0x1937, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x41, 0x7a, 0xc3}}]}}]}}, 0x0) 17:28:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 480.702605][ T8688] usb 1-1: new full-speed USB device number 2 using dummy_hcd 17:28:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 481.057913][ T9785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 481.066451][ T8688] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:28:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x35, 0x3e, 0xd3, 0x40, 0xb05, 0x17ad, 0x1026, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0x18, 0x71}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001980)={0x44, 0x0, &(0x7f00000017c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000001840)={0x20, 0x81, 0x1, 'q'}, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x85, 0x3, "fc23a3"}}) 17:28:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) [ 481.267383][ T8688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.283464][ T8688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.306296][ T8688] usb 1-1: Product: syz 17:28:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xd}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 481.318341][ T8688] usb 1-1: Manufacturer: syz [ 481.326482][ T9785] usb 3-1: Using ep0 maxpacket: 16 [ 481.338364][ T8688] usb 1-1: SerialNumber: syz [ 481.399896][T15682] raw-gadget gadget: fail, usb_ep_enable returned -22 17:28:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xe}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000000)='\a', 0x1) [ 481.606417][ T9785] usb 3-1: New USB device found, idVendor=0543, idProduct=1922, bcdDevice=19.37 [ 481.625850][ T9785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.642861][T15682] udc-core: couldn't find an available UDC or it's busy [ 481.667754][T15682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 481.674879][ T9785] usb 3-1: Product: syz [ 481.685688][ T3849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 481.710623][ T9785] usb 3-1: Manufacturer: syz 17:28:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 481.740472][ T8688] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 481.751177][ T9785] usb 3-1: SerialNumber: syz [ 481.771977][ T9785] usb 3-1: config 0 descriptor?? [ 481.792477][ T8688] usb 1-1: USB disconnect, device number 2 [ 482.049769][ T9785] usb 3-1: USB disconnect, device number 2 [ 482.227786][T15746] udc-core: couldn't find an available UDC or it's busy [ 482.236291][ T3849] usb 6-1: New USB device found, idVendor=0b05, idProduct=17ad, bcdDevice=10.26 [ 482.245363][ T3849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.261851][T15746] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 482.269855][ T3849] usb 6-1: Product: syz 17:28:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 17:28:42 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, &(0x7f0000000000)=ANY=[@ANYRES64], 0x1028) [ 482.274046][ T3849] usb 6-1: Manufacturer: syz [ 482.295704][ T3849] usb 6-1: SerialNumber: syz [ 482.331504][ T3849] usb 6-1: config 0 descriptor?? [ 482.825670][ T3849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 483.065576][ T3849] usb 3-1: Using ep0 maxpacket: 16 [ 483.346284][ T3849] usb 3-1: New USB device found, idVendor=0543, idProduct=1922, bcdDevice=19.37 [ 483.366021][ T3849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.374043][ T3849] usb 3-1: Product: syz [ 483.389011][ T3849] usb 3-1: Manufacturer: syz [ 483.393629][ T3849] usb 3-1: SerialNumber: syz [ 483.406935][ T3849] usb 3-1: config 0 descriptor?? 17:28:43 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 17:28:43 executing program 1: shmat(0x0, &(0x7f0000ff9000/0x5000)=nil, 0x0) 17:28:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 483.656049][ T3849] usb 3-1: USB disconnect, device number 3 17:28:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000000), 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 17:28:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 17:28:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) mkdir(0x0, 0x0) 17:28:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 17:28:44 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 484.294694][ T9351] usb 6-1: USB disconnect, device number 2 17:28:44 executing program 4: openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4001) 17:28:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000480)) 17:28:44 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)) 17:28:44 executing program 0: keyctl$set_timeout(0xf, 0x0, 0x8) uname(0x0) r0 = openat$vim2m(0xffffff9c, &(0x7f0000002840)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x2, 0x1}) 17:28:45 executing program 4: syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x0) 17:28:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000009c0), 0x4) 17:28:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000080)='Q', 0x1) 17:28:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:45 executing program 1: faccessat(0xffffffffffffffff, 0x0, 0x1c1) 17:28:45 executing program 0: socketpair(0x2, 0xa, 0xf2, &(0x7f0000000000)) 17:28:45 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) 17:28:45 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) 17:28:45 executing program 1: socketpair(0x23, 0x80000, 0x0, &(0x7f0000000b00)) 17:28:45 executing program 4: openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), 0x0) 17:28:45 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x11, 0x0, 0x0, 0x0, 0x0) 17:28:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:45 executing program 5: openat$dsp(0xffffff9c, &(0x7f0000001500)='/dev/dsp\x00', 0x0, 0x0) 17:28:45 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) 17:28:45 executing program 1: r0 = openat$vnet(0xffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 17:28:45 executing program 0: keyctl$search(0xa, 0x0, &(0x7f00000000c0)='.request_key_auth\x00', 0x0, 0xfffffffffffffff9) 17:28:46 executing program 4: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000380)) 17:28:46 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$vnet(0xffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 17:28:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x4}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:46 executing program 2: r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x9) 17:28:46 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000640)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 17:28:46 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140), 0x0, 0x0, 0x0) 17:28:46 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) 17:28:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) 17:28:46 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000740)='cifs.spnego\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 17:28:46 executing program 0: request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='{\x00', 0xfffffffffffffffb) 17:28:46 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f000000b140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f000000b180)=0x3) 17:28:46 executing program 5: socket(0x22, 0x0, 0x100) 17:28:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:46 executing program 2: clock_gettime(0x0, &(0x7f0000002880)) 17:28:46 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f0000002840)='/dev/vim2m\x00', 0x2, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x1, 0x2, 0x1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40d0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, 0x0) 17:28:46 executing program 0: r0 = openat$vnet(0xffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, 0x0) 17:28:46 executing program 5: openat2$dir(0xffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x20e}, 0x18) 17:28:47 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) 17:28:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000740)) 17:28:47 executing program 1: r0 = openat$vim2m(0xffffff9c, &(0x7f0000002840)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f00000028c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5b58d6cc"}, 0x0, 0x0, @fd}) 17:28:47 executing program 5: r0 = openat$vnet(0xffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)) 17:28:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 487.053596][ T35] audit: type=1400 audit(1608830927.274:27): avc: denied { set_context_mgr } for pid=15930 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 17:28:47 executing program 2: openat$mice(0xffffff9c, &(0x7f0000000700)='/dev/input/mice\x00', 0x40000) 17:28:47 executing program 0: r0 = openat$vnet(0xffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 17:28:47 executing program 4: r0 = openat$drirender128(0xffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000001c0)) 17:28:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) 17:28:47 executing program 2: keyctl$reject(0x17, 0x0, 0x0, 0x0, 0x0) 17:28:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000900)={0xec, 0x0, 0x0, "ada7549a9e82399b37e4bf734503c8f38e59bf68ae7d81c5f26d7355d748b50df7c5b7a41e59d774e673a9e7d86f68b07bc2c866f859233053cc44de5eba39070041375e8929c91f86f039d973e161bfbf06bf2bd31ef5f8f3874ce5110182bfe63c6d488834d0b3241cc85ec8914e3159acdbcbd36664594be425bf1b1e2dc585953c560e5b3a19de524bf2ae04786e765ea663b5b7bb3681f4ed8d33baecd67db51515167725121abfd459ca1a451383c21390b6f13436ecb45cf7789a3b0a7f932bb756c0cb6a020b1dc8eab696507d3af750c2ec21c5f21734b6162c119a32cbc2f7a4e2de76ffac58f8"}) 17:28:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:47 executing program 0: r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000600)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 17:28:48 executing program 4: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) unshare(0x40000000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) 17:28:48 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001500), 0x0) 17:28:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000900)={0xec, 0x0, 0x0, "ada7549a9e82399b37e4bf734503c8f38e59bf68ae7d81c5f26d7355d748b50df7c5b7a41e59d774e673a9e7d86f68b07bc2c866f859233053cc44de5eba39070041375e8929c91f86f039d973e161bfbf06bf2bd31ef5f8f3874ce5110182bfe63c6d488834d0b3241cc85ec8914e3159acdbcbd36664594be425bf1b1e2dc585953c560e5b3a19de524bf2ae04786e765ea663b5b7bb3681f4ed8d33baecd67db51515167725121abfd459ca1a451383c21390b6f13436ecb45cf7789a3b0a7f932bb756c0cb6a020b1dc8eab696507d3af750c2ec21c5f21734b6162c119a32cbc2f7a4e2de76ffac58f8"}) 17:28:48 executing program 1: syz_io_uring_setup(0x3d32, &(0x7f0000000040), &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:28:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0xe}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 488.036634][T15971] IPVS: ftp: loaded support on port[0] = 21 17:28:48 executing program 0: shmat(0x0, &(0x7f0000e03000/0x2000)=nil, 0x0) 17:28:48 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200400, 0x0) 17:28:48 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/urandom\x00', 0x0, 0x0) 17:28:48 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000580)=@ccm_128={{}, "342c7415533814d5", "04b0001c204f7e5d3ceecb51dc4665d0", "3bcf859b", "7ca5e0dfe61d9502"}, 0x28) 17:28:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{}]}, 0x10) [ 488.407935][T15974] IPVS: ftp: loaded support on port[0] = 21 17:28:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000006c0), 0x4) 17:28:49 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000280)) 17:28:49 executing program 1: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, 0x0}) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, 0x0) 17:28:49 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 17:28:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x60}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:49 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000280)) 17:28:49 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000006c0), 0x4) 17:28:49 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 488.962391][T16056] IPVS: ftp: loaded support on port[0] = 21 17:28:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:49 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001940)='/dev/ocfs2_control\x00', 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 17:28:49 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x5, 0x2}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x3, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r0, r0, r0], 0x4) r3 = syz_io_uring_setup(0x461a, &(0x7f0000000180)={0x0, 0x7d79, 0x10, 0x1, 0x380}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x0, 0x0, 0x20, 0xffff}, {0x2, 0x1f, 0x5, 0x3}]}) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x6, 0x2, 0x9, 0x9}, 0x5, 0x4, 0x3274, 0x0, 0x5, 0x9, 'syz1\x00', &(0x7f0000000380)=['\xd3\x00', '@{@/\x00', '\x00', ':\x00', '\\G\x00'], 0xd, [], [0x1000, 0x5, 0x5, 0x1]}) getuid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000540)={r1}) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000580)=""/181) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) syz_mount_image$ubifs(&(0x7f0000000680)='ubifs\x00', &(0x7f00000006c0)='./file0\x00', 0x9384, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000700)="3d4f0296a84a14fa9e04b7216f3963a54dce6789d9e4284f9fc0d09b999ad27530f571c8998a2926a18189dbc5c5e568e5b7fc9f889b53ccc7f3eb3fe5ca579b19bf769cf70c7e25431f5997dd27db9d4bce48b970087b622a8a40dd74e4a0a17cf9bf3008cfb64eed1b8ea93ed507d01d0a93e89f0febc920db03", 0x7b, 0x400}, {&(0x7f0000000780)="13e0bf0fab3b34f5e1f009094978220123557593f84da5ab213aa053ecbe8add634ae8180f58fc1c964eeb53e85e335b88cd272bec7836b1d02023f3015f8d", 0x3f, 0x372}], 0x40, &(0x7f0000000800)={[], [{@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type='appraise_type=imasig'}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) 17:28:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x0, &(0x7f0000000740)}, 0x10) [ 489.344227][T16061] IPVS: ftp: loaded support on port[0] = 21 [ 489.349648][T16088] IPVS: ftp: loaded support on port[0] = 21 17:28:49 executing program 2: socketpair(0x11, 0x0, 0x0, &(0x7f0000000280)) 17:28:49 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000280)) [ 489.394818][T16095] loop4: detected capacity change from 73 to 0 [ 489.523644][T16095] UBIFS error (pid: 16095): cannot open "/dev/loop4", error -22 [ 489.750233][T16095] IPVS: ftp: loaded support on port[0] = 21 [ 489.815165][T16114] loop4: detected capacity change from 73 to 0 17:28:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x7, 0x0, &(0x7f0000000700)) 17:28:50 executing program 5: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 17:28:50 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) 17:28:50 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x5, 0x2}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x3, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r0, r0, r0], 0x4) r3 = syz_io_uring_setup(0x461a, &(0x7f0000000180)={0x0, 0x7d79, 0x10, 0x1, 0x380}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x0, 0x0, 0x20, 0xffff}, {0x2, 0x1f, 0x5, 0x3}]}) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x6, 0x2, 0x9, 0x9}, 0x5, 0x4, 0x3274, 0x0, 0x5, 0x9, 'syz1\x00', &(0x7f0000000380)=['\xd3\x00', '@{@/\x00', '\x00', ':\x00', '\\G\x00'], 0xd, [], [0x1000, 0x5, 0x5, 0x1]}) getuid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000540)={r1}) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000580)=""/181) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) syz_mount_image$ubifs(&(0x7f0000000680)='ubifs\x00', &(0x7f00000006c0)='./file0\x00', 0x9384, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000700)="3d4f0296a84a14fa9e04b7216f3963a54dce6789d9e4284f9fc0d09b999ad27530f571c8998a2926a18189dbc5c5e568e5b7fc9f889b53ccc7f3eb3fe5ca579b19bf769cf70c7e25431f5997dd27db9d4bce48b970087b622a8a40dd74e4a0a17cf9bf3008cfb64eed1b8ea93ed507d01d0a93e89f0febc920db03", 0x7b, 0x400}, {&(0x7f0000000780)="13e0bf0fab3b34f5e1f009094978220123557593f84da5ab213aa053ecbe8add634ae8180f58fc1c964eeb53e85e335b88cd272bec7836b1d02023f3015f8d", 0x3f, 0x372}], 0x40, &(0x7f0000000800)={[], [{@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type='appraise_type=imasig'}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) 17:28:50 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/ocfs2_control\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x7, 0x10, r0, 0x0) [ 489.828063][T16114] UBIFS error (pid: 16114): cannot open "/dev/loop4", error -22 [ 490.299231][T16183] IPVS: ftp: loaded support on port[0] = 21 17:28:50 executing program 2: ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) 17:28:50 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000015c0), 0x8) 17:28:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:28:50 executing program 5: socketpair(0x0, 0x8, 0x0, &(0x7f00000017c0)) [ 490.352999][T16192] loop4: detected capacity change from 73 to 0 17:28:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:50 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) bind(r0, &(0x7f0000000000)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80) 17:28:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x0, 0x13, 0xffffffffffffffff, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000000000)=@ret_unlink={{0x4, 0x34, 0x0, 0x0, 0x9}, {0x3ff}}, 0x30) syz_io_uring_setup(0x1b57, &(0x7f0000000140)={0x0, 0x636b, 0x0, 0x3, 0x314}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 17:28:50 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') 17:28:51 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, 0x0) 17:28:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x4}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0xa2a, 0x4) 17:28:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x2, &(0x7f0000000040)=@raw=[@btf_id], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:28:51 executing program 0: syz_io_uring_setup(0x3855, &(0x7f0000000040)={0x0, 0xde07, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x1b57, &(0x7f0000000140)={0x0, 0x636b, 0x0, 0x3, 0x314}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 17:28:51 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40000, 0x0) 17:28:51 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/ocfs2_control\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=@raw=[@call], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x78) 17:28:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:51 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000017c0)) 17:28:51 executing program 4: syz_io_uring_setup(0x3855, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:28:51 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0x3, 0x4) 17:28:51 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dlm_plock\x00', 0x0, 0x0) 17:28:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x7, &(0x7f00000006c0)=""/9, &(0x7f0000000700)=0x9) 17:28:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:51 executing program 1: syz_io_uring_setup(0x625e, &(0x7f00000004c0)={0x0, 0xa9b5, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000540), &(0x7f0000000600)) 17:28:51 executing program 2: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_io_uring_setup(0x461a, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x1, 0x380}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{}, {0x2, 0x0, 0x5, 0x3}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) 17:28:52 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x202302) 17:28:52 executing program 0: getresgid(&(0x7f0000003040), &(0x7f0000003080), 0x0) 17:28:52 executing program 5: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/153) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') 17:28:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@buf={0x0, &(0x7f00000006c0)}) 17:28:52 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x5, 0x2}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2}]}) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) 17:28:52 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000280)) 17:28:52 executing program 0: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000280)) 17:28:52 executing program 5: getresgid(&(0x7f0000003040), &(0x7f0000003080), &(0x7f00000030c0)) 17:28:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 490.420312][T16192] UBIFS error (pid: 16192): cannot open "/dev/loop4", error -22 [ 492.332489][T16332] IPVS: ftp: loaded support on port[0] = 21 17:28:52 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x5, 0x2}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x3, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r0, r0, r0], 0x4) r3 = syz_io_uring_setup(0x461a, &(0x7f0000000180)={0x0, 0x7d79, 0x10, 0x1, 0x380}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x0, 0x0, 0x20, 0xffff}, {0x2, 0x1f, 0x5, 0x3}]}) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x6, 0x2, 0x9, 0x9}, 0x5, 0x4, 0x3274, 0x0, 0x5, 0x9, 'syz1\x00', &(0x7f0000000380)=['\xd3\x00', '@{@/\x00', '\x00', ':\x00', '\\G\x00'], 0xd, [], [0x1000, 0x5, 0x5, 0x1]}) getuid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000540)={r1}) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000580)=""/181) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) syz_mount_image$ubifs(&(0x7f0000000680)='ubifs\x00', &(0x7f00000006c0)='./file0\x00', 0x9384, 0x2, &(0x7f00000007c0)=[{&(0x7f0000000700)="3d4f0296a84a14fa9e04b7216f3963a54dce6789d9e4284f9fc0d09b999ad27530f571c8998a2926a18189dbc5c5e568e5b7fc9f889b53ccc7f3eb3fe5ca579b19bf769cf70c7e25431f5997dd27db9d4bce48b970087b622a8a40dd74e4a0a17cf9bf3008cfb64eed1b8ea93ed507d01d0a93e89f0febc920db03", 0x7b, 0x400}, {&(0x7f0000000780)="13e0bf0fab3b34f5e1f009094978220123557593f84da5ab213aa053ecbe8add634ae8180f58fc1c964eeb53e85e335b88cd272bec7836b1d02023f3015f8d", 0x3f, 0x372}], 0x40, &(0x7f0000000800)={[], [{@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise_type='appraise_type=imasig'}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000) 17:28:52 executing program 4: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 17:28:52 executing program 0: syz_io_uring_setup(0x625e, &(0x7f00000004c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000000540), &(0x7f0000000600)) 17:28:52 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d4, &(0x7f0000000000)={[{0x72, 0x4e00, "894a772a7d60dd10e1ad8a6ee08d519344afbf90bc217d8d1487d05b0dd76fd08ac7361d604723c763af994e0786d6d782aa32793eb75c66dc5b82550318199ce8181fc10ea1775a94361fbd3244d4bd6f92d643354912f741d18c4cf52c267484850958499ec4b853876e5596bb8436ea13"}, {0x68, 0x4e00, "9d8b36c5ca4492a1820e735c13994c38afd4eddb41bccf830c9b498e74c4ebb3d2e622ca3d15688a1966a675fdc0e870a4f17f96fa262996ec179a8ce8210f03a70cb591675e2e3c34423554591b3b736f69b8b9918facc2317336f3fc9757fbbb693240b22864fb"}, {}, {}, {0x6, 0x4e00, "2ab71fa71718"}, {0x2, 0x4e00, "9804"}, {0x52, 0x4e00, "30f2e1e4548a4651cf28b981f6f5e7795d5a0e2e5fc17dc50573a5a002195dbd61da22e871a07765a0187521fd7a7f87a231c2e3e1cc3ae36285275353c8f7eebde347d5204ac8999b29261ceb8d001bf61b"}, {0x78, 0x4e00, "5a62e043e3e354763105c4cc68176b3036a9469fe183e81202d2847279c8b8dd457549d33e698fb1c6f28c82b1c5c6d7deff0fb822141f6d8f6e48dd912b1ffe830bf12234485691f52737df5f39cafd89d97750f13d06d48c37a64667e86bbdae1a2930e7e873f0b5601b8b9648c8f0e705c111e1a19b1e"}]}) r0 = epoll_create(0xfae) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000240)=""/28, &(0x7f0000000280)=0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0x200, 0x2, 0x3, 0x20}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4) 17:28:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:52 executing program 4: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000780)={0x3, &(0x7f0000000740)=[{0x9}, {}, {0x2, 0x40, 0x4, 0x7}]}, 0x10) r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) [ 492.708154][T16357] IPVS: ftp: loaded support on port[0] = 21 [ 492.732702][T16372] loop1: detected capacity change from 73 to 0 [ 492.749168][T16335] IPVS: ftp: loaded support on port[0] = 21 17:28:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{}, {0x180}]}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880), 0x10) [ 492.794164][T16372] UBIFS error (pid: 16372): cannot open "/dev/loop1", error -22 [ 493.105190][T16383] IPVS: ftp: loaded support on port[0] = 21 [ 493.150650][T16372] loop1: detected capacity change from 73 to 0 17:28:57 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:28:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001500), &(0x7f0000001540)=0x8) 17:28:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xe}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:57 executing program 0: waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 17:28:57 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000a00)='nbd\x00') 17:28:57 executing program 1: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000780)={0x4, &(0x7f0000000740)=[{0x9, 0x0, 0x3f, 0x7}, {0x180, 0x4, 0x0, 0x7ff}, {0x9, 0x6, 0x6, 0x9}, {0x2, 0x40, 0x4, 0x7}]}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000800)={'bridge0\x00', {0x2, 0x0, @remote}}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880), 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000900)) 17:28:57 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/74) 17:28:57 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1}, 0x2141) 17:28:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 17:28:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:57 executing program 1: socketpair(0x24, 0x0, 0x0, &(0x7f0000000280)) 17:28:57 executing program 2: socketpair(0xf, 0x0, 0x0, &(0x7f0000000280)) 17:28:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:28:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x60}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:57 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x461a, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, 0x0) getuid() syz_mount_image$ubifs(0x0, &(0x7f00000006c0)='./file0\x00', 0x9384, 0x0, 0x0, 0x40, &(0x7f0000000800)) 17:28:57 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) unshare(0x40000000) syz_mount_image$ubifs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:28:57 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:28:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) [ 493.163859][T16372] UBIFS error (pid: 16372): cannot open "/dev/loop1", error -22 [ 497.861476][T16530] IPVS: ftp: loaded support on port[0] = 21 [ 497.892009][T16531] IPVS: ftp: loaded support on port[0] = 21 17:28:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x7, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:28:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:28:58 executing program 2: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={0x0}}, 0x4008885) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_complete(0x0) socket$can_j1939(0x1d, 0x2, 0x7) 17:28:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xf0}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:58 executing program 0: syz_open_dev$ndb(&(0x7f0000001a00)='/dev/nbd#\x00', 0x0, 0x440) syz_open_dev$ndb(&(0x7f0000001a40)='/dev/nbd#\x00', 0x0, 0x0) 17:28:58 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000017c0)) socket$pppl2tp(0x18, 0x1, 0x1) [ 498.265244][T16540] IPVS: ftp: loaded support on port[0] = 21 [ 498.292397][T16530] IPVS: ftp: loaded support on port[0] = 21 17:28:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x18e}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:28:58 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4201, 0x0) 17:29:02 executing program 5: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_io_uring_setup(0x461a, &(0x7f0000000180), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) unshare(0x40000000) msgctl$IPC_INFO(0x0, 0x3, 0x0) getuid() syz_mount_image$ubifs(0x0, &(0x7f00000006c0)='./file0\x00', 0x9384, 0x0, 0x0, 0x40, &(0x7f0000000800)) 17:29:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x40) 17:29:02 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 17:29:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x300}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:02 executing program 2: socketpair(0x0, 0x0, 0x8, &(0x7f00000017c0)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) geteuid() socket$phonet(0x23, 0x2, 0x1) 17:29:02 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) 17:29:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 17:29:03 executing program 0: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 17:29:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 17:29:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 502.941079][T16690] IPVS: ftp: loaded support on port[0] = 21 17:29:03 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x4400) 17:29:03 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x0) 17:29:03 executing program 5: add_key(&(0x7f0000001b40)='id_resolver\x00', 0x0, &(0x7f0000001bc0)='Z', 0x1, 0xfffffffffffffff9) 17:29:03 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/cgroup\x00') 17:29:03 executing program 1: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400)='NLBL_CIPSOv4\x00') 17:29:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x600}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:03 executing program 2: openat$vnet(0xffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 17:29:03 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 17:29:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000001500)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001540)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '(MC\"'}, 0x0, 0x0, @userptr}) 17:29:03 executing program 2: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x2000c085) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x6d521dc1bc5fac9f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_setup(0x471e, &(0x7f0000000480)={0x0, 0xff78, 0x8, 0x2}) socket$alg(0x26, 0x5, 0x0) 17:29:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x700}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:03 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x6d521dc1bc5fac9f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 17:29:03 executing program 4: syz_open_procfs$namespace(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000001840)='/dev/media#\x00', 0x0, 0x2c0) 17:29:03 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x89, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109027700010103403f09040007020206003309"], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) 17:29:04 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x76000000) 17:29:04 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 17:29:04 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0xc000000000000000, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000800)='D', 0x1}], 0x0, 0x0) 17:29:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x900}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:04 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x0) chroot(&(0x7f0000000080)='./file0\x00') [ 504.195654][ T9807] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 504.230905][T16776] loop0: detected capacity change from 264192 to 0 17:29:04 executing program 4: io_uring_setup(0x471e, &(0x7f0000000480)={0x0, 0xff78}) syz_open_dev$media(&(0x7f0000001a80)='/dev/media#\x00', 0x0, 0xa000) add_key(&(0x7f0000001b40)='id_resolver\x00', &(0x7f0000001b80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_genetlink_get_family_id$gtp(&(0x7f0000001d80)='gtp\x00') syz_open_procfs$namespace(0x0, &(0x7f0000002540)='ns/pid\x00') 17:29:04 executing program 1: syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "18"}, {0x5}, {0xd}, [@dmm={0x7}, @obex={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x4}}}}}]}}]}}, 0x0) pipe2(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x81) geteuid() [ 504.356386][T16776] loop0: detected capacity change from 264192 to 0 17:29:04 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000080)={0x0, "009fa5133cd49ed235f2b9c7a6ebbfe87dabd01ea998915836f3595fe144d8beca38f9a38ad222264ef831c6e2b035bdb7a41054061571900b77a9f61deb2b56"}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 17:29:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xe00}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @private0}]}, 0x30}}, 0x0) 17:29:04 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x9}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xc}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) io_setup(0x0, &(0x7f0000000780)) [ 504.667187][ T9807] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.685897][ T9807] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.719673][ T9807] usb 6-1: config 1 interface 0 has no altsetting 0 [ 504.886413][T16490] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 504.911654][ T9807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.931550][ T9807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.964663][ T9807] usb 6-1: Product: syz [ 504.969086][ T9807] usb 6-1: Manufacturer: syz [ 504.973710][ T9807] usb 6-1: SerialNumber: syz [ 505.145687][T16813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 505.246429][T16490] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 505.336337][ T9807] cdc_ether 6-1:1.0: skipping garbage [ 505.341837][ T9807] usb 6-1: bad CDC descriptors [ 505.384627][ T9807] usb 6-1: USB disconnect, device number 3 [ 505.409145][T16813] usb 1-1: Using ep0 maxpacket: 16 [ 505.438155][T16490] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.453527][T16490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.484219][T16490] usb 2-1: Product: syz [ 505.505099][T16490] usb 2-1: Manufacturer: syz [ 505.523418][T16490] usb 2-1: SerialNumber: syz [ 505.536444][T16813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.565629][T16813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.588214][T16813] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.600256][T16813] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.611630][T16813] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 505.622730][T16813] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 505.827464][T16490] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 505.898959][T16490] usb 2-1: USB disconnect, device number 4 [ 505.906085][T16813] usb 1-1: string descriptor 0 read error: -22 [ 505.912354][T16813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.993117][T16813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.095803][ T9351] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 506.335955][T16813] cdc_ncm 1-1:1.0: bind() failure [ 506.362482][T16813] cdc_ncm 1-1:1.1: bind() failure [ 506.386794][T16813] usb 1-1: USB disconnect, device number 3 [ 506.576408][T16490] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 506.595724][ T9351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.607324][ T9351] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.623218][ T9351] usb 6-1: config 1 interface 0 has no altsetting 0 [ 506.815726][ T9351] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.824819][ T9351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:07 executing program 5: mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:29:07 executing program 4: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) mlockall(0x5) 17:29:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xf00}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:07 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) [ 506.876793][ T9351] usb 6-1: Product: syz [ 506.880985][ T9351] usb 6-1: Manufacturer: syz [ 506.896239][ T9351] usb 6-1: SerialNumber: syz [ 506.936367][T16490] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 506.956103][ T9351] usb 6-1: can't set config #1, error -71 [ 507.001284][ T9351] usb 6-1: USB disconnect, device number 4 17:29:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x3f00}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 507.085840][ T9807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 507.135702][T16490] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.144766][T16490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:07 executing program 5: socketpair(0x28, 0x0, 0x1ff, &(0x7f0000002240)) [ 507.198588][T16490] usb 2-1: Product: syz [ 507.202796][T16490] usb 2-1: Manufacturer: syz [ 507.227922][T16490] usb 2-1: SerialNumber: syz 17:29:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 507.335746][ T9807] usb 1-1: Using ep0 maxpacket: 16 [ 507.395723][ T9785] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 507.465708][ T9807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.491702][ T9807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:29:07 executing program 1: mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:29:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x6000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 507.517772][ T9807] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.526569][T16490] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 507.542388][ T9807] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 507.554796][T16490] usb 2-1: USB disconnect, device number 5 17:29:07 executing program 5: getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='threaded\x00', 0x9) socket(0x0, 0x0, 0x0) getresgid(&(0x7f0000000500), 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0xc000000000000000, 0x2, &(0x7f0000000cc0)=[{&(0x7f0000000780), 0x0, 0x6}, {0x0}], 0x0, &(0x7f0000000d40)={[{@max_batch_time={'max_batch_time'}}, {@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}]}) 17:29:07 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000002800)='ethtool\x00') [ 507.589439][ T9807] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 507.659563][ T9807] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 507.756726][T16905] loop5: detected capacity change from 264192 to 0 [ 507.796174][T16905] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 507.816565][ T9785] usb 3-1: unable to get BOS descriptor or descriptor too short 17:29:08 executing program 0: eventfd2(0x0, 0x0) select(0x40, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={0x8}, &(0x7f0000000900)={0x0, 0x2710}) 17:29:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0x8e01}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:08 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x89, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109027700010103403f0904000702"], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) [ 507.897140][ T9785] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 507.916250][ T9807] usb 1-1: string descriptor 0 read error: -71 [ 507.922540][ T9807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 17:29:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}}, 0x0) [ 507.964155][ T9807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.010041][T16905] loop5: detected capacity change from 264192 to 0 [ 508.019151][ T9807] usb 1-1: can't set config #1, error -71 [ 508.031505][ T9807] usb 1-1: USB disconnect, device number 4 [ 508.065154][T16905] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 508.106367][ T9785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.115467][ T9785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.196897][ T9785] usb 3-1: Product: syz [ 508.227378][ T9785] usb 3-1: Manufacturer: syz [ 508.250795][ T9785] usb 3-1: SerialNumber: syz [ 508.335623][ T9351] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 508.348169][ T9785] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 508.554507][T16817] usb 3-1: USB disconnect, device number 4 [ 508.795744][ T9351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.810797][ T9351] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.841375][ T9351] usb 2-1: config 1 interface 0 has no altsetting 0 [ 509.026369][ T9351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.052411][ T9351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.075441][ T9351] usb 2-1: Product: syz [ 509.080998][ T9351] usb 2-1: Manufacturer: syz [ 509.095834][ T9351] usb 2-1: SerialNumber: syz [ 509.380010][ T9351] usb 2-1: USB disconnect, device number 6 [ 509.395597][T16817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 509.826361][T16817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.906286][T16817] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:29:10 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) 17:29:10 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240a}}, {0x0, 0x0}]}) 17:29:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x10) 17:29:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@dstopts, 0x8) [ 509.997004][T16817] usb 3-1: string descriptor 0 read error: -71 [ 510.003296][T16817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.074508][T16817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.115694][T16813] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 510.152605][T16817] usb 3-1: can't set config #1, error -71 17:29:10 executing program 4: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x80000001) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x401, [], 0x3, "f8ca5f18fed11d"}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000020c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 17:29:10 executing program 5: socketpair(0x58, 0x0, 0x0, &(0x7f0000000200)) [ 510.189937][T16817] usb 3-1: USB disconnect, device number 5 17:29:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x12, 0x0, 0xffff}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) [ 510.415757][T16490] usb 1-1: new high-speed USB device number 5 using dummy_hcd 17:29:10 executing program 4: socketpair(0x0, 0xefddeefe543d2f1d, 0x0, 0x0) [ 510.576974][T16813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.620528][T16813] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.651712][T16813] usb 2-1: config 1 interface 0 has no altsetting 0 [ 510.777195][T16490] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 510.856727][T16813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.870663][T16813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.891937][T16813] usb 2-1: Product: syz [ 510.896569][T16813] usb 2-1: Manufacturer: syz [ 510.902475][T16813] usb 2-1: SerialNumber: syz 17:29:11 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\v', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 17:29:11 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffff, 0x3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000200)="a4c511879c78022ef521c3b829431b325457cca9d90145fd2d3b1e396c1da572187357c64f37a602be4d4c7d5fcbc9387f8392e34485b4cbdc9e3a8aeec21e8d10d581ed646fd3cd2c0af8af5c7e104fe3c1ca580e23b8e7b009ff720b6dae05d5de99a0ed330ac2d9854f41c185fb9195da3f68a05f2b6f52e06af6b5595c7c3beb7237b4285aeba3b7515a7cf1c2db3f05b7d98e12e795c57dd0037397", 0x9e, 0x100000000}, {0x0, 0x0, 0x5}], 0x80042, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f62682c5a737271756f74612c6e6f626c6f636b5f76616c69646974792c657569643ea013dc041155b28a206610e024fa4984e1bf770a830b27891db14b48b12b05acbace40ba5d9e90faaac1c8661405c915c1a74b5d6d8879e4676641e3a341ef92ba37a3e0c30a", @ANYRESDEC=0xee01, @ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000e80)={'IDLETIMER\x00'}, &(0x7f0000000ec0)=0x1e) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440)='threaded\x00', 0x9) socket(0x0, 0x3, 0x81) fchownat(r0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0xc000000000000000, 0x3, &(0x7f0000000cc0)=[{&(0x7f0000000800)="44779d00ec180eedd43cf2be2efddd054555e93045b49582b055909c575fd7c4222eb0ef4836ed213f90c927701a8fce700fb072c235a3327bee42592d7dcb44c84d502612a0862cc2cd5a6b67afbf68c8806adcfc7fab797bdc73d5261e5d518106943e3428a1ddef4aa8dbb0c6b1477e", 0x71}, {&(0x7f0000000b40), 0x0, 0x6}, {0x0, 0x0, 0x1}], 0x0, &(0x7f0000000d40)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noacl='noacl'}, {@data_err_ignore='data_err=ignore'}, {@inode_readahead_blks={'inode_readahead_blks'}}, {@nouser_xattr='nouser_xattr'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [{@smackfsdef={'smackfsdef', 0x3d, '$'}}, {@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<'}}, {@fowner_gt={'fowner>', 0xee00}}, {@seclabel='seclabel'}]}) 17:29:11 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) [ 511.146249][T16490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.149869][T16813] usb 2-1: USB disconnect, device number 7 [ 511.164901][T16490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.192806][T16490] usb 1-1: Manufacturer: ⊠[ 511.213909][T16490] usb 1-1: SerialNumber: syz [ 511.249475][T17014] loop2: detected capacity change from 264192 to 0 [ 511.287205][T16490] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 511.314558][T17014] loop2: detected capacity change from 264192 to 0 [ 511.335013][T17014] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 511.399198][T17014] loop2: detected capacity change from 264192 to 0 [ 511.493216][T16813] usb 1-1: USB disconnect, device number 5 [ 511.535849][ T9785] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 511.946339][ T9785] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 511.995835][ T9785] usb 6-1: language id specifier not provided by device, defaulting to English [ 512.116377][ T9785] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.125478][ T9785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.139896][ T9785] usb 6-1: Product: syz [ 512.144228][ T9785] usb 6-1: Manufacturer: syz [ 512.150835][ T9785] usb 6-1: SerialNumber: syz [ 512.197195][ T9785] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 512.275710][T16813] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 512.405819][ T9785] usb 6-1: USB disconnect, device number 5 [ 512.695742][T16813] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:29:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 17:29:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x3, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:13 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:29:13 executing program 0: select(0x40, &(0x7f0000000840), 0x0, 0x0, 0x0) 17:29:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9809}]}) [ 513.085726][T16813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.110335][T16813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.124819][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:29:13 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 17:29:13 executing program 2: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x80000001) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x401, [], 0x3, "f8ca5f18fed11d"}) fcntl$dupfd(r0, 0x406, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17:29:13 executing program 1: pipe2$9p(&(0x7f0000000180), 0x0) [ 513.175750][T16813] usb 1-1: can't set config #1, error -71 [ 513.184768][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.193453][T16813] usb 1-1: USB disconnect, device number 6 [ 513.194227][ T8688] usb 6-1: new high-speed USB device number 6 using dummy_hcd 17:29:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xc, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:13 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x66, &(0x7f00000001c0)=@string={0x66, 0x3, "b35f67b00ae2ca00108b2b62c6846bfd52bf387a5e362dfbe0c851056fd1a4d2b4acc8af628865bef4bece1ae00450bcad5278c74d96223c30f1c8413f0e5da3a67641c96a66183cc332314cba7144a2185ea7e1ab0182d109dd1efa5950122d42da4bfd"}}]}) 17:29:13 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x3}, &(0x7f0000000040)={0x10002}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x10001]}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00'}) [ 513.456254][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.490382][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.596268][ T8688] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 513.666487][ T8688] usb 6-1: language id specifier not provided by device, defaulting to English [ 513.677012][ T9785] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 513.806493][ T8688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.820730][ T8688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.840605][ T8688] usb 6-1: Product: syz [ 513.851496][ T8688] usb 6-1: Manufacturer: syz [ 513.863624][ T8688] usb 6-1: SerialNumber: syz [ 513.875723][T16813] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 513.907649][ T8688] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 514.035868][ T9785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.115754][ T9785] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 514.123401][ T9785] usb 5-1: can't read configurations, error -71 [ 514.131967][ T8688] usb 6-1: USB disconnect, device number 6 17:29:14 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)="01", 0x1}, {&(0x7f0000000100)='\t', 0x1, 0x1a62}], 0x0, 0x0) 17:29:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x12, 0x3, r3}]}, 0x1c}}, 0x0) 17:29:14 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 17:29:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0xf}, 0x0) [ 514.246324][T16813] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 514.275761][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:29:14 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 514.322818][T17120] loop5: detected capacity change from 26 to 0 [ 514.323692][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:29:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) [ 514.466598][T16813] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.477114][T17120] loop5: detected capacity change from 26 to 0 [ 514.485559][T16813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.511153][T16813] usb 3-1: Product: syz [ 514.515401][T16813] usb 3-1: Manufacturer: å¾³ë§îˆŠÃŠè¬æˆ«è“†ïµ«ë½’稸㙞שּׂ죠Ց텯튤겴꿈衢빥뻴ᫎӠë±åŠ­ì¸é™ã°¢ï„°ä‡ˆà¸¿ê皦ì¥æ™ªã°˜ã‹ƒä°±ç†ºê‰„帘ƫ톂羽å™â´’﵋ [ 514.532412][T16813] usb 3-1: SerialNumber: syz [ 514.594194][T16813] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 514.782581][T16813] usb 3-1: USB disconnect, device number 6 [ 514.825588][ T9785] usb 5-1: new high-speed USB device number 3 using dummy_hcd 17:29:15 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 17:29:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 17:29:15 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 17:29:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000004c0)=@string={0x2}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) [ 515.195708][ T9785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 515.255704][ T9785] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 515.263435][ T9785] usb 5-1: can't read configurations, error -71 [ 515.326221][ T9785] usb usb5-port1: attempt power cycle [ 515.589361][T16816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 515.625589][ T8688] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 515.885664][ T8688] usb 1-1: Using ep0 maxpacket: 16 [ 515.970723][T16816] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 516.023360][ T8688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.046028][ T8688] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 516.095714][ T8688] usb 1-1: language id specifier not provided by device, defaulting to English [ 516.106858][ T9785] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 516.166062][T16816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.175912][T16816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.184728][T16816] usb 3-1: Product: syz [ 516.191114][T16816] usb 3-1: Manufacturer: å¾³ë§îˆŠÃŠè¬æˆ«è“†ïµ«ë½’稸㙞שּׂ죠Ց텯튤겴꿈衢빥뻴ᫎӠë±åŠ­ì¸é™ã°¢ï„°ä‡ˆà¸¿ê皦ì¥æ™ªã°˜ã‹ƒä°±ç†ºê‰„帘ƫ톂羽å™â´’﵋ [ 516.211561][T16816] usb 3-1: SerialNumber: syz [ 516.216982][ T8688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.236508][ T8688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.254111][ T8688] usb 1-1: Product: syz [ 516.261113][ T8688] usb 1-1: SerialNumber: syz [ 516.267007][T16816] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 516.355926][ T9785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 516.425671][ T9785] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.433467][ T9785] usb 5-1: can't read configurations, error -71 17:29:16 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f0000000080)) 17:29:16 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) 17:29:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 17:29:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x5, r3}]}, 0x1c}}, 0x0) [ 516.485984][T16817] usb 3-1: USB disconnect, device number 7 [ 516.555915][ T8688] cdc_ncm 1-1:1.0: bind() failure [ 516.587976][ T8688] cdc_ncm 1-1:1.1: bind() failure [ 516.637018][ T8688] usb 1-1: USB disconnect, device number 7 17:29:16 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0xc000000000000000, 0x1, &(0x7f0000000cc0)=[{0x0}], 0x0, &(0x7f0000000d40)={[], [{@seclabel='seclabel'}]}) 17:29:16 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0xc, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8f, 0x7f, 0x5}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x80, 0xb7, 0x0, 0x40, 0x1}, 0x3f, &(0x7f0000000480)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "f21c67d716666cc6450199f0446eaef5"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x8, 0xac5}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "e8b414bf7400a260350cb4e9d712b7e7"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x6, 0xff, 0x9, 0xff}]}, 0x5, [{0x78, &(0x7f00000004c0)=@string={0x78, 0x3, "3017318fbb2ff6bca48a329078d34c23edc3d0fb022ff7d0b3cc187b824a2e13b278b6b920130491c4c8c7231c92def4b17fa615cddc0590da4aa73cb734da81ebf3a2fcb54c62b8f78d7e1d27e1fe2cbcbaaa4368c65cdcff486085bdb9fe9447e5aa3cd3f8e4dbe2b258a516eed329606133d5a07b"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x0, 0x0}]}) 17:29:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x6, r3}]}, 0x1c}}, 0x0) 17:29:17 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 516.835142][T17201] loop5: detected capacity change from 264192 to 0 [ 516.872789][T17201] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 17:29:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)={[{@max_batch_time={'max_batch_time'}}, {@resuid={'resuid'}}], [{@seclabel='seclabel'}]}) 17:29:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x8, r3}]}, 0x1c}}, 0x0) 17:29:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 517.108158][T17216] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 517.195820][ T8688] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 517.208964][T17216] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 517.325654][T16816] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 517.435796][ T8688] usb 2-1: Using ep0 maxpacket: 16 [ 517.545735][ T9785] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 517.555793][ T8688] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.573007][ T8688] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.587713][T16816] usb 1-1: Using ep0 maxpacket: 16 [ 517.597358][ T8688] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.717079][T16816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.728253][T16816] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 517.776259][T16816] usb 1-1: language id specifier not provided by device, defaulting to English [ 517.776452][ T8688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.794381][ T8688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.802808][ T9785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.810987][ T8688] usb 2-1: Product: 〉 [ 517.815177][ T8688] usb 2-1: Manufacturer: à ‡ [ 517.820779][ T8688] usb 2-1: SerialNumber: ï“¿ [ 517.879691][ T9785] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 517.894958][ T9785] usb 5-1: can't read configurations, error -71 [ 517.911600][ T9785] usb usb5-port1: unable to enumerate USB device [ 517.929723][T16816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.957420][T16816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.004313][T16816] usb 1-1: Product: syz [ 518.033064][T16816] usb 1-1: SerialNumber: syz [ 518.125685][ T8688] cdc_ncm 2-1:1.0: bind() failure [ 518.144130][ T8688] cdc_ncm 2-1:1.1: bind() failure [ 518.207582][ T8688] usb 2-1: USB disconnect, device number 8 17:29:18 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc740, 0x0) 17:29:18 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000780)='V', 0x1}], 0x0, 0x0) 17:29:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x9, r3}]}, 0x1c}}, 0x0) 17:29:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0xa000, 0x0) [ 518.295934][T16816] cdc_ncm 1-1:1.0: bind() failure [ 518.332657][T16816] cdc_ncm 1-1:1.1: bind() failure 17:29:18 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 518.399316][T16816] usb 1-1: USB disconnect, device number 8 17:29:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) [ 518.865665][ T8688] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 518.865672][T16817] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 519.125674][ T8688] usb 2-1: Using ep0 maxpacket: 16 [ 519.246363][ T8688] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.264133][T16817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 519.272336][ T8688] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.289967][ T8688] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 519.345678][T16817] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 519.353333][T16817] usb 5-1: can't read configurations, error -71 [ 519.456052][ T8688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.465094][ T8688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.478977][ T8688] usb 2-1: Product: 〉 [ 519.483235][ T8688] usb 2-1: Manufacturer: à ‡ [ 519.489107][ T8688] usb 2-1: SerialNumber: ï“¿ 17:29:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)="01bfe1bd0924bc15608e6d30d1c93770207a4280ae01a89dad723d", 0x1b, 0x100}, {&(0x7f0000000200)="a4c511879c78022ef521c3b829431b325457cca9d90145fd2d3b1e396c1da57218", 0x21, 0x100000000}], 0x80042, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0xee01, @ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) socket(0x15, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000740)='./file0\x00', 0xc000000000000000, 0x1, &(0x7f0000000cc0)=[{0x0, 0x0, 0x6}], 0x1000012, 0x0) 17:29:20 executing program 2: request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='+}../%{\x00', 0x0) 17:29:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0xa, r3}]}, 0x1c}}, 0x0) 17:29:20 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 17:29:20 executing program 0: eventfd2(0x0, 0x0) select(0x40, &(0x7f0000000840)={0x7}, &(0x7f0000000880)={0x6}, &(0x7f00000008c0)={0x8}, &(0x7f0000000900)={0x0, 0x2710}) 17:29:20 executing program 4: select(0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)={0x0, 0x2710}) [ 519.775734][ T8688] cdc_ncm 2-1:1.0: bind() failure [ 519.823466][ T8688] cdc_ncm 2-1:1.1: bind() failure [ 519.878851][ T8688] usb 2-1: USB disconnect, device number 9 17:29:20 executing program 5: eventfd2(0x0, 0x0) select(0x40, &(0x7f0000000840)={0x7}, 0x0, 0x0, 0x0) 17:29:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x100}], 0x0, &(0x7f00000005c0)=ANY=[]) [ 519.936936][T17302] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:29:20 executing program 4: getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000e80)={'IDLETIMER\x00'}, 0x0) geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0xc000000000000000, 0x1, &(0x7f0000000cc0)=[{0x0}], 0x0, &(0x7f0000000d40)={[{@nouser_xattr='nouser_xattr'}, {@resuid={'resuid'}}], [{@seclabel='seclabel'}]}) [ 520.003173][T17308] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 17:29:20 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 520.056708][T17309] loop1: detected capacity change from 264192 to 0 17:29:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0xb, r3}]}, 0x1c}}, 0x0) [ 520.164111][T17317] loop1: detected capacity change from 264192 to 0 [ 520.194970][T17318] loop0: detected capacity change from 1 to 0 17:29:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x0, 0x13}, 0x14}}, 0x0) [ 520.254384][T17326] loop4: detected capacity change from 264192 to 0 [ 520.275898][T17318] EXT4-fs (loop0): unable to read superblock [ 520.352214][T17309] loop1: detected capacity change from 264192 to 0 [ 520.373912][T17326] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 520.412338][T17318] loop0: detected capacity change from 1 to 0 17:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}) 17:29:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x10, r3}]}, 0x1c}}, 0x0) 17:29:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x0, 0x0) 17:29:20 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x5415, 0x0) [ 520.513921][T17318] EXT4-fs (loop0): unable to read superblock 17:29:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x11, r3}]}, 0x1c}}, 0x0) 17:29:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) [ 520.613205][T17348] loop4: detected capacity change from 264192 to 0 17:29:20 executing program 5: select(0x40, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={0x8}, 0x0) [ 520.676118][T17348] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 17:29:20 executing program 2: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 520.757225][T17362] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 520.769027][T17363] netlink: 'syz-executor.3': attribute type 17 has an invalid length. 17:29:21 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x240600, 0x0) 17:29:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x12, r3}]}, 0x1c}}, 0x0) 17:29:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000290001002bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x12c}}, 0x0) [ 520.951558][T17368] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 521.006512][T17377] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 17:29:21 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0x2, 0x0) 17:29:21 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400, 0x0) [ 521.090581][T17384] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 521.107957][T17368] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 17:29:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0xc020660b, 0x0) 17:29:21 executing program 0: syz_usb_connect$cdc_ecm(0x3, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302000040"], 0x0) 17:29:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 17:29:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3c, r3}]}, 0x1c}}, 0x0) 17:29:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)) 17:29:21 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:29:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x4b47, 0x0) 17:29:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000040)={0x1c, 0x0, 0x21c, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 17:29:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x2001, r3}]}, 0x1c}}, 0x0) 17:29:21 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x600000, 0x0) 17:29:21 executing program 1: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x0, 0x0) [ 521.705695][T16813] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 521.816147][T16817] usb 6-1: new high-speed USB device number 7 using dummy_hcd 17:29:22 executing program 4: select(0x40, &(0x7f0000000840), 0x0, 0x0, &(0x7f0000000900)={0x0, 0x2710}) 17:29:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x4801, r3}]}, 0x1c}}, 0x0) [ 522.056071][T16817] usb 6-1: Using ep0 maxpacket: 16 [ 522.076563][T16813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.084721][T16813] usb 1-1: no configurations [ 522.096472][T16813] usb 1-1: can't read configurations, error -22 [ 522.176630][T16817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.195842][T16817] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 522.485794][T16817] usb 6-1: string descriptor 0 read error: -22 [ 522.492126][T16817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.513883][T16817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.875791][T16817] cdc_ncm 6-1:1.0: bind() failure [ 522.884830][T16817] cdc_ncm 6-1:1.1: bind() failure [ 522.908567][T16817] usb 6-1: USB disconnect, device number 7 [ 523.015892][T16813] usb 1-1: new high-speed USB device number 10 using dummy_hcd 17:29:23 executing program 0: fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) 17:29:23 executing program 2: eventfd2(0x0, 0x0) select(0x40, &(0x7f0000000840), &(0x7f0000000880)={0x6}, 0x0, 0x0) 17:29:23 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:29:23 executing program 4: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) [ 523.385756][T16813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 523.400349][T16813] usb 1-1: no configurations [ 523.411716][T16813] usb 1-1: can't read configurations, error -22 [ 523.461049][T16813] usb usb1-port1: attempt power cycle [ 523.645722][T16817] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 523.885693][T16817] usb 6-1: Using ep0 maxpacket: 16 [ 524.005822][T16817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.051279][T16817] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 524.366264][T16817] usb 6-1: string descriptor 0 read error: -22 [ 524.372618][T16817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.401971][T16817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:24 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 17:29:24 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x2710}) 17:29:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0xf}}, 0x0) 17:29:24 executing program 2: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 17:29:24 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)) 17:29:24 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x989680}) [ 524.505734][T16817] usb 6-1: can't set config #1, error -71 [ 524.568797][T16817] usb 6-1: USB disconnect, device number 8 17:29:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000005c0)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="56c9eb62f7a254", 0x7, 0x6}], 0x0, 0x0) 17:29:24 executing program 0: syz_usb_connect(0x0, 0x0, 0xfffffffffffffffe, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 17:29:24 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 17:29:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x14}}, 0x0) 17:29:25 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) 17:29:25 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x3, &(0x7f00000004c0)=@string={0x3, 0x3, '0'}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) 17:29:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0xc0}}, 0x0) 17:29:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c8"], 0xc8}}, 0x8010) [ 524.946261][T17508] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 17:29:25 executing program 2: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x80000001) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001080)={0x0, 0x0, "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", "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"}) fcntl$dupfd(r0, 0x406, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17:29:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0xec0}}, 0x0) [ 525.166770][T16817] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 525.187629][T17523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17523 comm=syz-executor.1 17:29:25 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') ioctl$KDENABIO(r0, 0x4b36) [ 525.245690][ T9807] usb 6-1: new high-speed USB device number 9 using dummy_hcd 17:29:25 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x29c0, 0x0) 17:29:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x33fe0}}, 0x0) 17:29:25 executing program 0: ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 525.505676][ T9807] usb 6-1: Using ep0 maxpacket: 16 [ 525.546482][T16817] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 525.646672][ T9807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.670513][ T9807] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 525.756333][T16817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.765404][T16817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.773876][ T9807] usb 6-1: language id specifier not provided by device, defaulting to English [ 525.801296][T16817] usb 5-1: Product: syz [ 525.818277][T16817] usb 5-1: Manufacturer: syz [ 525.829097][T16817] usb 5-1: SerialNumber: syz [ 525.878025][T16817] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 525.916343][ T9807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.925418][ T9807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.936013][ T9807] usb 6-1: Product: syz [ 525.940840][ T9807] usb 6-1: SerialNumber: syz [ 526.085277][T16817] usb 5-1: USB disconnect, device number 8 [ 526.235883][ T9807] cdc_ncm 6-1:1.0: bind() failure [ 526.245067][ T9807] cdc_ncm 6-1:1.1: bind() failure [ 526.286262][ T9807] usb 6-1: USB disconnect, device number 9 [ 526.867236][ T9807] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 526.975647][T16488] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 527.245746][T16488] usb 6-1: Using ep0 maxpacket: 16 [ 527.276247][ T9807] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 527.395729][T16488] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.406824][T16488] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 527.445681][ T9807] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.454714][ T9807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.463231][ T9807] usb 5-1: Product: syz [ 527.465879][T16488] usb 6-1: language id specifier not provided by device, defaulting to English [ 527.468398][ T9807] usb 5-1: Manufacturer: syz [ 527.482065][ T9807] usb 5-1: SerialNumber: syz [ 527.527124][ T9807] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 527.616080][T16488] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.625182][T16488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.633329][T16488] usb 6-1: Product: syz [ 527.637605][T16488] usb 6-1: SerialNumber: syz 17:29:28 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x6ae80, 0x0) 17:29:28 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x89, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a4400001020301090277"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 17:29:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c8000000310004"], 0xc8}}, 0x0) [ 527.737689][ T9807] usb 5-1: USB disconnect, device number 9 17:29:28 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x4c, 0x0) [ 527.905892][T16488] cdc_ncm 6-1:1.0: bind() failure 17:29:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000100)='\t', 0x1, 0x1a62}, {&(0x7f0000000200)="a4", 0x1, 0x100000000}, {&(0x7f0000000300)='a', 0x1}], 0x80042, &(0x7f00000005c0)=ANY=[@ANYBLOB]) 17:29:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2000005c}}, 0x0) 17:29:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 17:29:28 executing program 4: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 527.927987][T16488] cdc_ncm 6-1:1.1: bind() failure [ 527.969745][T16488] usb 6-1: USB disconnect, device number 10 [ 528.008753][T17608] loop0: detected capacity change from 264192 to 0 [ 528.069360][T16817] usb 3-1: new high-speed USB device number 8 using dummy_hcd 17:29:28 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) [ 528.140920][T17608] loop0: detected capacity change from 264192 to 0 17:29:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 17:29:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x7ffff000}}, 0x0) 17:29:28 executing program 5: openat$zero(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) 17:29:28 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x89, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a44000010203010902"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 528.482005][T16817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 528.565751][T16817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.582985][T16817] usb 3-1: config 0 has no interfaces? [ 528.745792][ T9351] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 528.755893][T16817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.755933][T16817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.755963][T16817] usb 3-1: Product: syz [ 528.755983][T16817] usb 3-1: Manufacturer: syz [ 528.756004][T16817] usb 3-1: SerialNumber: syz [ 528.778651][T16817] usb 3-1: config 0 descriptor?? [ 529.021032][T16817] usb 3-1: USB disconnect, device number 8 [ 529.145901][ T9351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.225766][ T9351] usb 1-1: config 0 has no interfaces? [ 529.386410][ T9351] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.395705][ T9351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.403851][ T9351] usb 1-1: Product: syz [ 529.408277][ T9351] usb 1-1: Manufacturer: syz [ 529.413047][ T9351] usb 1-1: SerialNumber: syz [ 529.425410][ T9351] usb 1-1: config 0 descriptor?? [ 529.683493][ T9351] usb 1-1: USB disconnect, device number 12 [ 529.845730][ T9785] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 530.285764][ T9785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.386141][ T9785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.398173][ T9785] usb 3-1: config 0 has no interfaces? [ 530.465949][T16488] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 530.575905][ T9785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.585002][ T9785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.594349][ T9785] usb 3-1: Product: syz [ 530.599413][ T9785] usb 3-1: Manufacturer: syz [ 530.604030][ T9785] usb 3-1: SerialNumber: syz [ 530.611551][ T9785] usb 3-1: config 0 descriptor?? 17:29:31 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0xc0189436, 0x0) 17:29:31 executing program 4: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 17:29:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 17:29:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0xfffffdef}}, 0x0) 17:29:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 530.795279][ T9807] usb 3-1: USB disconnect, device number 9 17:29:31 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6a7900794c866952}, 0xc) [ 530.895874][T16488] usb 1-1: unable to get BOS descriptor or descriptor too short 17:29:31 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 530.976607][T16488] usb 1-1: config 0 has no interfaces? 17:29:31 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsa\x00', 0x2143, 0x0) 17:29:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x2}, 0x0) 17:29:31 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [ 531.136642][T16488] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.155633][T16488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x68) [ 531.218914][T16488] usb 1-1: Product: syz [ 531.248634][T16488] usb 1-1: Manufacturer: syz [ 531.270396][T16488] usb 1-1: SerialNumber: syz [ 531.294599][T16488] usb 1-1: config 0 descriptor?? 17:29:31 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x5) 17:29:31 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x89, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109027700010103403f0904000702020600330924060000ed06653b05240014000d240f0104000000050001000708241c04008b0001072414ff07b289052415040007240aee301f0308241c0400000500152412ff01a317a88b045e4f01a607c0ffcb7e392a090582024000000112090503"], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}}) 17:29:31 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000002140)='/dev/vcsu\x00', 0x369400, 0x0) 17:29:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x7}, 0x0) 17:29:31 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)="01", 0x1}, {&(0x7f0000000200)="a4", 0x1, 0x100000000}], 0x0, 0x0) [ 531.445667][ T9351] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 531.467020][T16488] usb 1-1: USB disconnect, device number 13 17:29:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x8}, 0x0) 17:29:31 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xd2, 0xc0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b762f33f95aa"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x9, 0x20}, {0x6, 0x24, 0x1a, 0x3, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x9, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xc, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8f, 0x7f, 0x5}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x80, 0xb7, 0x0, 0x40, 0x1}, 0x3f, &(0x7f0000000480)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "f21c67d716666cc6450199f0446eaef5"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x8, 0xac5}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "e8b414bf7400a260350cb4e9d712b7e7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x6, 0xff, 0x9, 0xff}]}, 0x6, [{0x78, &(0x7f00000004c0)=@string={0x78, 0x3, "3017318fbb2ff6bca48a329078d34c23edc3d0fb022ff7d0b3cc187b824a2e13b278b6b920130491c4c8c7231c92def4b17fa615cddc0590da4aa73cb734da81ebf3a2fcb54c62b8f78d7e1d27e1fe2cbcbaaa4368c65cdcff486085bdb9fe9447e5aa3cd3f8e4dbe2b258a516eed329606133d5a07b"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x427}}]}) [ 531.587660][T17732] loop4: detected capacity change from 264192 to 0 [ 531.695780][ T9351] usb 2-1: Using ep0 maxpacket: 16 [ 531.710279][T17732] loop4: detected capacity change from 264192 to 0 [ 531.815858][ T9351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.835673][ T9807] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 531.843385][ T9351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.856432][ T9351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.866566][ T9351] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 531.881147][ T9351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 531.892900][ T9351] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 532.056509][T16817] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 532.137010][ T9351] usb 2-1: string descriptor 0 read error: -22 [ 532.143288][ T9351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.165433][ T9351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.276415][ T9807] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 64 [ 532.294998][ T9807] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.307298][T16817] usb 3-1: Using ep0 maxpacket: 16 [ 532.324678][ T9807] usb 6-1: config 1 interface 0 has no altsetting 0 [ 532.426506][T16817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 532.449686][T16817] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 532.465800][ T9351] cdc_ncm 2-1:1.0: bind() failure [ 532.479362][ T9351] cdc_ncm 2-1:1.1: bind() failure [ 532.506178][ T9351] usb 2-1: USB disconnect, device number 10 [ 532.517103][ T9807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.529499][ T9807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.560001][ T9807] usb 6-1: Product: syz [ 532.564187][ T9807] usb 6-1: Manufacturer: syz [ 532.570964][ T9807] usb 6-1: SerialNumber: syz [ 532.597433][T17728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 532.656448][T16817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.665958][T16817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.673970][T16817] usb 3-1: Product: 〉 [ 532.681378][T16817] usb 3-1: Manufacturer: à ‡ [ 532.687210][T16817] usb 3-1: SerialNumber: â  [ 532.906662][ T9807] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 533.011549][ T9807] usb 6-1: USB disconnect, device number 11 [ 533.025697][T16817] cdc_ncm 3-1:1.0: bind() failure [ 533.034595][T16817] cdc_ncm 3-1:1.1: bind() failure [ 533.106896][T16817] usb 3-1: USB disconnect, device number 10 [ 533.245871][ T9785] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 533.515720][ T9785] usb 2-1: Using ep0 maxpacket: 16 [ 533.595796][ T9807] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 533.656113][ T9785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.667195][ T9785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.679171][ T9785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.690557][ T9785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 533.701218][ T9785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 533.711965][ T9785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 533.765915][ T8688] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 534.005822][ T9785] usb 2-1: string descriptor 0 read error: -22 [ 534.012168][ T9785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.030472][ T9785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.035705][ T9807] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 64 [ 534.044192][ T8688] usb 3-1: Using ep0 maxpacket: 16 [ 534.049578][ T9807] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.085665][ T9807] usb 6-1: config 1 interface 0 has no altsetting 0 17:29:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f0000000040)={0x20, 0x0, 0x21c, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 17:29:34 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0xcf, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x458}}, {0xa9, &(0x7f0000000240)=@string={0xa9, 0x3, "7e552582a02f7a2d103466d13b644477fc1e34c3a24d7edaebb73f2d916dc42f93c2f7be3d8c23ac5c31d7b7f87739151c51120f6b1604b0b34bada6eed0d62c86d961cb80a9a5a31895a9193395bebd303d9d570e7d12122095563a97f0650ce90a8f117eff40ec34efafe4b16cb79a3c26c1c68f3b0741f4059b1d55cdf2eb0961a29f4083aaba5163e86027eab2b86e5f6e477b188984d7f9eac639fba176e2a4a59a1f2618"}}]}) 17:29:34 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000100)="0981707e063ab9149d437abb3c02f9206db4eca3a52d9269cab1e9a6f2145961481556358e71b1bb5288e51ebe7721bd40e11e54928b3be458ea45687ce546921875ac17f5a0246b19fc7a8454236b3337297c112f1c55616a4e62121e9abb2f9dce7433169be5b98b9c864a4c4bb7018638c9", 0x73, 0x1a62}, {0x0, 0x0, 0x100000000}], 0x80042, 0x0) 17:29:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x12}, 0x0) [ 534.166751][ T8688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 534.190792][ T9785] cdc_ncm 2-1:1.0: bind() failure [ 534.207754][ T9785] cdc_ncm 2-1:1.1: bind() failure [ 534.219022][ T8688] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 534.255891][ T9785] usb 2-1: USB disconnect, device number 11 [ 534.276396][ T9807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.300567][T17808] loop4: detected capacity change from 264192 to 0 [ 534.307912][ T9807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x300}, 0x0) [ 534.337730][ T9807] usb 6-1: Product: syz [ 534.347759][ T9807] usb 6-1: Manufacturer: syz [ 534.357088][ T9807] usb 6-1: SerialNumber: syz [ 534.398378][T17728] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 534.420779][T17808] loop4: detected capacity change from 264192 to 0 17:29:34 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x66, &(0x7f00000001c0)=@string={0x66, 0x3, "b35f67b00ae2ca00108b2b62c6846bfd52bf387a5e362dfbe0c851056fd1a4d2b4acc8af628865bef4bece1ae00450bcad5278c74d96223c30f1c8413f0e5da3a67641c96a66183cc332314cba7144a2185ea7e1ab0182d109dd1efa5950122d42da4bfd"}}]}) [ 534.459174][ T8688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.469610][ T8688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:29:34 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="01", 0x1}, {&(0x7f0000000100)='\t', 0x1, 0x1a62}, {&(0x7f0000000200)="a4", 0x1, 0x100000000}, {&(0x7f0000000300)='a', 0x1}], 0x0, 0x0) 17:29:34 executing program 4: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x0, 0x5, 0x1, "463359a58fe4fe72"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83, 0xf7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9b, 0x2, 0x7, 0x81}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0xa1}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x81, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xbd, 0x68, 0x3, 0x0, 0x9}, 0xce, &(0x7f0000000140)=ANY=[@ANYBLOB="050fce000218100a020300000000f001000f00ff00077e00000000ff00b1100156476e32164491aabfc71e8b83749a2a260fe3372a7739387f39a05220d0bf1296e3ae71a6769f9f7a3eb4ab8392c5b085c3b46c36dca18b54a734c454362cc906c8cf3a8f46edb6c0c8f3e8d6a1201702c4aa4593580e4be5a0acd956c063f5a1f0f298d44d7ebe4895c523dde3ae3db2fe65b85889b280371089d9931cb1b49681b6a9e36d8d0bd0aeea1603d5937e2ce2102440b0f987f3a11918f3f5fc054edd32970737133ec5e510aeb8"], 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) [ 534.549557][ T8688] usb 3-1: Product: 〉 [ 534.553750][ T8688] usb 3-1: Manufacturer: à ‡ [ 534.575729][ T3849] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 534.595145][ T8688] usb 3-1: SerialNumber: â  17:29:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0xffffff1f}, 0x0) [ 534.636566][ T9807] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 534.659727][ T9807] usb 6-1: USB disconnect, device number 12 17:29:35 executing program 2: syz_usb_connect$uac1(0x0, 0xb3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x71, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x0, 0x7f}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xdf, 0x7, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7f, 0x0, "7e36e8"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x2, 0x80, 0x7, "6e22a336fcee"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9b, 0x0, 0x7, 0x81, "3e0ff0d6a25567e6"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0xa1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x1, 0x0, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, 0x0) 17:29:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x2}, 0x0) [ 534.819270][T17849] loop5: detected capacity change from 264192 to 0 [ 534.886441][ T8688] cdc_ncm 3-1:1.0: bind() failure [ 534.893926][ T8688] cdc_ncm 3-1:1.1: bind() failure [ 534.895707][ T9351] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 534.940839][T17849] loop5: detected capacity change from 264192 to 0 [ 534.944149][ T8688] usb 3-1: USB disconnect, device number 11 [ 534.958670][ T3849] usb 1-1: config 1 interface 0 altsetting 207 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.986938][ T3849] usb 1-1: config 1 interface 0 has no altsetting 0 17:29:35 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 17:29:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3}, 0x0) [ 535.166236][ T9913] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 535.174586][ T3849] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.189970][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.210039][ T3849] usb 1-1: Product: syz [ 535.220938][ T3849] usb 1-1: Manufacturer: 啾舥⾠⵺ãí…¦æ»ç„Ỽ쌴䶢럫ⴿ涑⿄슓뻷谽갣ㅜ럗矸ᔹ儜༒ᙫ뀄䮳ꚭ탮Ⳗ쭡ꦀꎥ锘ᦩ锳붾㴰åžç´Žáˆ’锠㩖౥૩á†ï½¾î±€î¼´î’¯æ²±éª·â˜¼ì›ã®ä„‡×´á¶›ìµ•î¯²æ„‰é¾¢è€ëªªæ‘惨뢲彮ä®á¡»è’‰ï§—웪יּ皡ꓢ骥☟ [ 535.263479][ T3849] usb 1-1: SerialNumber: syz [ 535.307620][ T3849] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 535.355802][ T9351] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 535.396373][ T8688] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 535.426813][ T9785] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 535.447465][ T9913] usb 5-1: Using ep0 maxpacket: 32 [ 535.520844][ T9807] usb 1-1: USB disconnect, device number 14 [ 535.546200][ T9351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.555260][ T9351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.568087][ T9351] usb 2-1: Product: syz [ 535.572542][ T9351] usb 2-1: Manufacturer: å¾³ë§îˆŠÃŠè¬æˆ«è“†ïµ«ë½’稸㙞שּׂ죠Ց텯튤겴꿈衢빥뻴ᫎӠë±åŠ­ì¸é™ã°¢ï„°ä‡ˆà¸¿ê皦ì¥æ™ªã°˜ã‹ƒä°±ç†ºê‰„帘ƫ톂羽å™â´’﵋ [ 535.592278][ T9351] usb 2-1: SerialNumber: syz [ 535.600802][ T9913] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 535.632418][ T9913] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 535.646939][ T9913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.647268][ T9351] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 535.665167][ T8688] usb 3-1: Using ep0 maxpacket: 32 [ 535.686447][ T9785] usb 6-1: Using ep0 maxpacket: 16 [ 535.809290][ T8688] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 535.826316][ T9785] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.837959][ T8688] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 535.855575][ T9785] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.857178][ T9351] usb 2-1: USB disconnect, device number 12 [ 535.865408][ T9785] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 535.886252][ T9913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.895310][ T9913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.903421][ T8688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.930300][ T9913] usb 5-1: Product: syz [ 535.934493][ T9913] usb 5-1: SerialNumber: syz [ 536.122885][ T8688] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.132146][ T8688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.151811][ T8688] usb 3-1: Product: syz [ 536.160140][ T8688] usb 3-1: Manufacturer: syz [ 536.164756][ T8688] usb 3-1: SerialNumber: syz [ 536.226371][ T9785] usb 6-1: string descriptor 0 read error: -22 [ 536.232631][ T9785] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.254382][ T9785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.274696][ T9913] usb 5-1: 0:2 : does not exist [ 536.295944][T16816] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 536.335065][ T9913] usb 5-1: USB disconnect, device number 10 [ 536.575908][ T9785] cdc_ncm 6-1:1.0: bind() failure [ 536.584535][ T8688] usb 3-1: 0:2 : does not exist [ 536.626722][ T9785] cdc_ncm 6-1:1.1: bind() failure [ 536.644993][ T8688] usb 3-1: USB disconnect, device number 12 [ 536.648594][ T9351] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 536.668372][ T9785] usb 6-1: USB disconnect, device number 13 [ 536.676515][T16816] usb 1-1: config 1 interface 0 altsetting 207 endpoint 0x3 has invalid wMaxPacketSize 0 [ 536.705103][T16816] usb 1-1: config 1 interface 0 has no altsetting 0 [ 536.896633][T16816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.927202][T16816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.991434][T16816] usb 1-1: Product: syz [ 537.030141][T16816] usb 1-1: Manufacturer: 啾舥⾠⵺ãí…¦æ»ç„Ỽ쌴䶢럫ⴿ涑⿄슓뻷谽갣ㅜ럗矸ᔹ儜༒ᙫ뀄䮳ꚭ탮Ⳗ쭡ꦀꎥ锘ᦩ锳붾㴰åžç´Žáˆ’锠㩖౥૩á†ï½¾î±€î¼´î’¯æ²±éª·â˜¼ì›ã®ä„‡×´á¶›ìµ•î¯²æ„‰é¾¢è€ëªªæ‘惨뢲彮ä®á¡»è’‰ï§—웪יּ皡ꓢ骥☟ [ 537.145709][ T9913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 537.158253][ T9351] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 537.241927][T16816] usb 1-1: SerialNumber: syz 17:29:37 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "18"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfc5d}, [@dmm={0x7}, @mbim={0xc, 0x24, 0x1b, 0xf535, 0x7ff, 0x0, 0x0, 0x0, 0xf3}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x4}}}}}]}}]}}, 0x0) 17:29:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x4}, 0x0) [ 537.336130][T16816] usb 1-1: can't set config #1, error -71 [ 537.349938][T16816] usb 1-1: USB disconnect, device number 15 [ 537.375698][ T9351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.376376][ T8688] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 537.389581][ T9351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.406265][ T9913] usb 5-1: Using ep0 maxpacket: 32 [ 537.451123][ T9351] usb 2-1: Product: syz [ 537.470420][ T9351] usb 2-1: Manufacturer: å¾³ë§îˆŠÃŠè¬æˆ«è“†ïµ«ë½’稸㙞שּׂ죠Ց텯튤겴꿈衢빥뻴ᫎӠë±åŠ­ì¸é™ã°¢ï„°ä‡ˆà¸¿ê皦ì¥æ™ªã°˜ã‹ƒä°±ç†ºê‰„帘ƫ톂羽å™â´’﵋ 17:29:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x5}, 0x0) [ 537.508037][ T9351] usb 2-1: SerialNumber: syz [ 537.566340][ T9913] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 537.575175][ T9913] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 17:29:37 executing program 1: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)='\xa3\xe0\xce\x16L\xcc\xc33\xb3\x9d\x9c\x0fJUF\x11:\x95(\xb4\f\xe8\xb6/\xde\x99\x7f\xe8K2x^tg@r\x94\xf1\xb7\xdbl5+\xdf\xfd_\xd8\x12\xa6?\x01\x00\x00\x00 q\x8c96\xf0\xb9\x9c\b\xc6\xb8z\xb2\xdf\xd9?|\x04\xd2\f\x9f\xa7S\xe3\xf6C\x93\xb9\x19\xba(\xd7\x13\xf3\x1f\xfca\b[(\xa1\xf2\xfcN\x1c\xe6%\x8d\xf3\xc5\aw\xf7\xd4\xd2N\xa9\x94T\x1a\xea\x12\xb7\x86\x98\xeaB\xe7\x8f\xc9\x83kBQ\xd4#`\xf4m\xe9\x937\x03<\xdd\xd4\x96\xeb\xbb\xed\t\x12\x89\x993\x94\x913mSm\xab\xd7\xd1\xd7a|%3\x8eC\x01\xad\x0f,\x18\x886\t\'\xd511\x16\xe9\xfa', 0xffffffffffffffff) [ 537.608626][ T9913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.625726][ T9351] usb 2-1: can't set config #1, error -71 [ 537.644205][ T9351] usb 2-1: USB disconnect, device number 13 17:29:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x6}, 0x0) [ 537.716555][ T8688] usb 3-1: Using ep0 maxpacket: 32 17:29:38 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000200)="a4", 0x1}], 0x0, 0x0) 17:29:38 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcsa\x00', 0x0, 0x0) setns(r0, 0x0) [ 537.835695][ T8688] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 537.835742][T16816] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 537.844418][ T8688] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 537.844444][ T8688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.915767][ T9913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.940552][ T9913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.955683][T16817] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 537.982733][ T9913] usb 5-1: Product: syz 17:29:38 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8f}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000004c0)=@string={0x4, 0x3, "3017"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) 17:29:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x7}, 0x0) [ 538.057582][ T9913] usb 5-1: can't set config #1, error -71 17:29:38 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) [ 538.101776][ T9913] usb 5-1: USB disconnect, device number 11 [ 538.108149][ T8688] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.135727][T16816] usb 6-1: Using ep0 maxpacket: 16 17:29:38 executing program 4: clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) clone3(&(0x7f00000004c0)={0x40000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000100)=""/101, 0x65, &(0x7f0000000180)=""/26, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 17:29:38 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) [ 538.157472][ T8688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.195740][T16816] usb 6-1: device descriptor read/all, error -71 [ 538.202713][ T8688] usb 3-1: Product: syz [ 538.245931][ T8688] usb 3-1: can't set config #1, error -71 [ 538.261315][ T8688] usb 3-1: USB disconnect, device number 13 [ 538.336549][T16817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.367004][T16817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.462011][T16817] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 538.509957][T18019] IPVS: ftp: loaded support on port[0] = 21 [ 538.521893][T16817] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 538.696076][ T8688] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 538.704787][T16817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.735633][T16817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.755731][T16817] usb 1-1: Product: syz [ 538.759936][T16817] usb 1-1: Manufacturer: syz [ 538.764544][T16817] usb 1-1: SerialNumber: syz [ 538.818578][T17975] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 538.857509][T16817] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 538.965728][ T8688] usb 3-1: Using ep0 maxpacket: 16 [ 539.071408][ T9807] usb 1-1: USB disconnect, device number 16 [ 539.106726][ T8688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.125729][ T8688] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 539.305806][ T8688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.326200][ T8688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.355772][ T8688] usb 3-1: Product: syz [ 539.439142][ T8688] usb 3-1: SerialNumber: syz [ 539.775938][ T8688] cdc_ncm 3-1:1.0: bind() failure [ 539.805081][ T8688] cdc_ncm 3-1:1.1: bind() failure [ 539.839306][ T8688] usb 3-1: USB disconnect, device number 14 [ 539.845634][ T9807] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 540.215793][ T9807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.226833][ T9807] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.238787][ T9807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 540.259975][ T9807] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 540.465750][ T9807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.474842][ T9807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.485984][ T9807] usb 1-1: Product: syz [ 540.490302][ T9807] usb 1-1: Manufacturer: syz [ 540.495040][ T9807] usb 1-1: SerialNumber: syz [ 540.529982][T17975] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 540.547499][ T9807] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 540.575655][T16817] usb 3-1: new high-speed USB device number 15 using dummy_hcd 17:29:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000780)=ANY=[], 0x78) 17:29:40 executing program 5: clone3(0x0, 0x0) clone3(&(0x7f0000000780)={0x804200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000004c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:40 executing program 1: modify_ldt$write(0x1, &(0x7f0000000500), 0x10) 17:29:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x8}, 0x0) 17:29:40 executing program 4: clone3(&(0x7f00000004c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 540.634159][ T9351] usb 1-1: USB disconnect, device number 17 17:29:41 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9}, 0x40) [ 540.816392][T18087] IPVS: ftp: loaded support on port[0] = 21 [ 540.836936][T16817] usb 3-1: Using ep0 maxpacket: 16 17:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x9}, 0x0) [ 540.890320][T18091] IPVS: ftp: loaded support on port[0] = 21 [ 540.956726][T16817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.980006][T16817] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 541.186406][T16817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.212578][T16817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.232546][T18087] IPVS: ftp: loaded support on port[0] = 21 [ 541.247384][T16817] usb 3-1: Product: syz [ 541.259861][T16817] usb 3-1: SerialNumber: syz 17:29:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) 17:29:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000500"/120], 0x78) 17:29:41 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x105441, 0x0) r1 = getpgid(0x0) wait4(r1, 0x0, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x80, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {0x29}, &(0x7f0000000280)=""/166, 0xa6, &(0x7f0000000340)=""/55, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa, {r0}}, 0x58) r3 = getpgid(0x0) wait4(r3, 0x0, 0x0, 0x0) clone3(&(0x7f0000000780)={0x804200, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x16}, &(0x7f0000000600)=""/218, 0xda, &(0x7f0000000700)=""/30, &(0x7f0000000740)=[r1], 0x1}, 0x58) clone3(&(0x7f00000004c0)={0x40000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000100)=""/101, 0x65, &(0x7f0000000180)=""/26, &(0x7f0000000440)=[0x0, r1, r2, r3], 0x4}, 0x58) 17:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xe}, 0x0) [ 541.359255][T16817] usb 3-1: can't set config #1, error -71 [ 541.382428][T16817] usb 3-1: USB disconnect, device number 15 17:29:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000500"/120], 0x78) 17:29:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf}, 0x0) [ 541.639097][T18177] IPVS: ftp: loaded support on port[0] = 21 [ 541.668569][T18179] IPVS: ftp: loaded support on port[0] = 21 17:29:44 executing program 5: openat$full(0xffffffffffffff9c, 0x0, 0x490000, 0x0) 17:29:44 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/btrfs-control\x00', 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 17:29:44 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000007c0)={'filter\x00'}, &(0x7f0000000840)=0x78) 17:29:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x8}, {0x6}]}) 17:29:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x60}, 0x0) 17:29:44 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000001880)) 17:29:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0}, 0x0) 17:29:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x400, 0x0, 0x4}, 0xc) 17:29:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000940)) 17:29:45 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000004c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 544.809559][ T35] audit: type=1326 audit(1608830985.034:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:29:45 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="a9a9ef7e512a", 'veth0\x00'}}, 0x1e) 17:29:45 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x44400, 0x0) 17:29:45 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580)='/dev/cuse\x00', 0x2, 0x0) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000240)="930c", 0x2}, {&(0x7f0000000280)="416261c88f5e74968697db4b8b0b", 0xe}], 0x2) [ 545.117256][T18269] IPVS: ftp: loaded support on port[0] = 21 17:29:45 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb8869d1bb334b9032a4"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b772005e1e357b3c9b4fe15e11c1afd6fa1ccd9008b3345b386b733ad18197255235d7514c1fb12ed"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "552388ba771fd1d7d96cfe8a192cea35866e6b510652b20fd685fc1a1a26d2ae819350c1fb9a94cba2f580f651776b66ef4aa3a1efd30e860ebc88c6114d61b89794e19cf16bceea3ab28f9f8246574d3a0cb5abadae633f5a0c00a1d4487baab60a0aeeeae8847f8f6fe1cce74d0dc209b49f22bcd1242b07c55b056fd817457a1db3577fafaa6f1356fe5396add50d453884ff36e69b685bd72ada962a8f372597b84b8c47be51f54064da3797f25b411cab40d66beea231d43af0e59e948613"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb5c70ab945d0ca925005b7cb478d6aac7eab74aaa421af87727ba1c6b1d3a8cc3fdae9c0b5553102b0f22a998d9a3900b9b1aa55824cc03cdce0abb0066f1eea195c085d47696123d64f4597037ae03e2400e19a41255eb4b82aa894c9916bfd0e57b723d567e1c8df202c2cd45a9d9c3bca5430fd160a8abbe5d5bb15d60ca86778a27f50c9988b2e75b3c9ffb88b50755dd885aeeb1a88a3c836e5d144a917ca4b34e41"}, @INET_DIAG_REQ_BYTECODE={0xbd5, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}}, 0x0) 17:29:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x18e}, 0x0) [ 545.522277][T18304] IPVS: ftp: loaded support on port[0] = 21 [ 545.531140][ T35] audit: type=1326 audit(1608830985.754:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18251 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:29:45 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:29:45 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x30) 17:29:45 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x12, 0x0, &(0x7f0000001880)) 17:29:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x300}, 0x0) [ 545.838117][T18338] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 545.838117][T18338] program syz-executor.2 not setting count and/or reply_len properly 17:29:46 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xa, 0x0, &(0x7f0000001880)) 17:29:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0xff00, &(0x7f00000005c0)='8'}) 17:29:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x500}, 0x0) 17:29:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:29:46 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000fb], 0x0, 0x10610}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:29:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x600}, 0x0) 17:29:46 executing program 4: io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x12b}) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x3}, @request_death], 0x41, 0x0, &(0x7f00000001c0)="158035bb6816796a1b0d306d1e2f824f79d96a280b11c306cab12d7963a9d9299c2378bee4ddaccf320795a548b75e810b4d38aa1cbe2a94bb1a9cccb2bc490341"}) select(0x40, &(0x7f0000000000)={0x94d6, 0xfff, 0x8001, 0x1e, 0x5, 0x9, 0x0, 0x3}, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x2, 0xba6, 0x4, 0x3ff, 0x8}, &(0x7f0000000080)={0xfff, 0x20, 0x6, 0xffffffffde5ca69a, 0x7, 0x9, 0xee2, 0x3d}, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) 17:29:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 17:29:46 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:46 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) 17:29:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x4, 0x2, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/247, 0xf7, 0x1, 0x13}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @increfs_done], 0xac, 0x0, &(0x7f00000005c0)="382a4bbf724865e09d4b82323059e656d699dd01dc2dac68290a93b6159a0c5e2493e430336077473b93974dfa943f980b598ef97cec3261af700da175389fe29f3c793fbb2b0195387b5bf52fa7320d4401efb7ff12d9590f2d4982741b951dd3cd1ab36ee7f3306d2d0034287d44f4a15ddd676ffdce4eb7bf85fa78677397292301df42360cf0126dfe38e34af01349fe6fe56e8f306418091199f27a6ea8db28accc0e9993b6a85315fc"}) 17:29:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x99}]}) 17:29:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x700}, 0x0) 17:29:47 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) 17:29:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, 0xe8) 17:29:47 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=[&(0x7f00000000c0)='IDLETIMER\x00'], 0x0) 17:29:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x900}, 0x0) [ 547.019518][T18386] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 547.019518][T18386] program syz-executor.2 not setting count and/or reply_len properly 17:29:47 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000001880)) 17:29:47 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700)='/dev/hwrng\x00', 0x20001, 0x0) 17:29:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 17:29:48 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:48 executing program 0: io_uring_setup(0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0xe02, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xcb, 0x8}, {0x6, 0xff}]}) 17:29:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xe00}, 0x0) 17:29:48 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb8869d1bb334b9032a4"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b772005e1e357b3c9b4fe15e11c1afd6fa1ccd9008b3345b386b733ad18197255235d7514c1fb12"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb"}, @INET_DIAG_REQ_BYTECODE={0xce1, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "3e8868e3eb595125fc5e363a24906429b1a3d06d578f28258f0676d7ae483112a25b516fcdc7cf1eb8199324badc3cefd81f4e533935a565a8fdd60cf40df093b79ef7b04b2be7c74bf7148a903f4840788513fc2ad2ecc72f"}]}, 0xec4}}, 0x0) 17:29:48 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) [ 547.968769][ T35] audit: type=1326 audit(1608830988.194:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18411 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:29:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf00}, 0x0) 17:29:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:29:48 executing program 4: io_uring_setup(0xfffffffc, &(0x7f0000000440)={0x0, 0x0, 0x10}) [ 548.130652][T18421] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 548.130652][T18421] program syz-executor.2 not setting count and/or reply_len properly [ 548.284274][T18432] binder: 18424:18432 ioctl c0306201 20000100 returned -14 17:29:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3f00}, 0x0) 17:29:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 17:29:48 executing program 1: io_uring_setup(0x1, &(0x7f0000000440)) 17:29:48 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:29:49 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x6000}, 0x0) 17:29:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1ff, 0x75}]}) 17:29:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x4000000, &(0x7f00000005c0)='8'}) 17:29:49 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0) 17:29:49 executing program 0: pipe2$9p(&(0x7f0000000040), 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) [ 549.084152][T18465] binder: 18457:18465 ioctl c0306201 20000680 returned -14 17:29:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x8e01}, 0x0) 17:29:49 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppoe(r0, 0x0, 0x0) 17:29:49 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x0, 0xfffffffb}, 0xc) 17:29:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x3, 0xcb, 0x8}, {0x6, 0x0, 0x20, 0x2b1c}]}) 17:29:49 executing program 1: select(0x40, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) [ 549.267231][T18471] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 549.267231][T18471] program syz-executor.2 not setting count and/or reply_len properly [ 549.418458][ T35] audit: type=1326 audit(1608830989.634:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:29:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf000}, 0x0) 17:29:50 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 17:29:50 executing program 5: pipe2$9p(&(0x7f0000000040), 0x0) 17:29:50 executing program 1: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1ff, 0x0) 17:29:50 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x280c00, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 17:29:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x30000}, 0x0) [ 550.193301][ T35] audit: type=1326 audit(1608830990.414:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18473 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:29:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17:29:50 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 17:29:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x34000}, 0x0) 17:29:50 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 17:29:50 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x6, 0x0, &(0x7f0000001880)) [ 550.359385][T18505] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 550.359385][T18505] program syz-executor.2 not setting count and/or reply_len properly [ 550.437858][T18510] binder: 18506:18510 ioctl c0306201 0 returned -14 [ 550.501152][T18510] binder: 18506:18510 ioctl c0306201 0 returned -14 17:29:50 executing program 4: pipe2$9p(0x0, 0xc8000) 17:29:50 executing program 1: io_uring_setup(0x1, &(0x7f0000000440)={0x0, 0x0, 0x4}) 17:29:51 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 17:29:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20008001) 17:29:51 executing program 0: clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0)="b83460456ad8eeda5baea6c8d07b15") 17:29:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x400300}, 0x0) 17:29:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000140)="d2a3681deb88038dd8bdf231ef81213d6b1e93e18a43bd3dfd5e0d700e98f35c4d6431925f5ef470d5d03c34c0057c2e498a005f89181ebc56f08f995f2b7c167eeefb343fbabcbea039e344", 0x4c, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) 17:29:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x40) 17:29:51 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='xfrm0\x00'}) 17:29:51 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 17:29:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 17:29:51 executing program 1: io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x700}) 17:29:51 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000500)={0x0, "d47cc6434f75bd8a3ccab9e82ee9bb561384460b03b59295bcf0f477a9df79392357806b3343a01c4513fbe078ac80ae1d6eb2d0fdbed0ef95ccfc8cb38b1093", {0x3}}) [ 551.436608][T18542] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 551.436608][T18542] program syz-executor.2 not setting count and/or reply_len properly [ 551.554411][ T35] audit: type=1400 audit(1608830991.774:33): avc: denied { ioctl } for pid=18543 comm="syz-executor.5" path="socket:[55438]" dev="sockfs" ino=55438 ioctlcmd=0x890c scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 17:29:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) 17:29:52 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 17:29:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{}, {0x306, @dev}, 0x12, {0x2, 0x0, @loopback}, 'geneve1\x00'}) 17:29:52 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 17:29:52 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb8869d1bb334b9032a4"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b772005e1e357b3c9b4fe15e11c1afd6fa1ccd9008b3345b386b733ad18197255235d7514c1fb12"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "552388ba771fd1d7d96cfe8a192cea35866e6b510652b20fd685fc1a1a26d2ae819350c1fb9a94cba2f580f651776b66ef4aa3a1efd30e860ebc88c6114d61b89794e19cf16bceea3ab28f9f8246574d3a0cb5abadae633f5a0c00a1d4487baab60a0aeeeae8847f8f6fe1cce74d0dc209b49f22bcd1242b07c55b056fd817457a1db3577fafaa6f1356fe5396add50d453884ff36e69b685bd72ada962a8f372597b84b8c47be51f54064da3797f25b411cab40d66beea231d43af0e59e948613"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb5c70ab945d0ca925005b7cb478d6aac7eab74aaa421af87727ba1c6b1d3a8cc3fdae9c0b5553102b0f22a998d9a3900b9b1aa55824cc03cdce0abb0066f1eea195c085d47696123d64f4597037ae03e2400e19a41255eb4b82aa894c9916bfd0e57b723d567e1c8df202c2cd45a9d9c3bca5430fd160a8abbe5d5bb15d60ca86778a27f50c9988b2e75b3c9ffb88b50755dd885aeeb1a88a3c836e5d144a917ca4b34e41"}, @INET_DIAG_REQ_BYTECODE={0xbd5, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}}, 0x24000810) 17:29:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x1000000}, 0x0) 17:29:52 executing program 5: socket(0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:29:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x2000000}, 0x0) 17:29:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 17:29:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000006c0)={'filter\x00', 0x4}, 0x68) [ 552.360961][T18577] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 552.360961][T18577] program syz-executor.2 not setting count and/or reply_len properly 17:29:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 17:29:52 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 17:29:52 executing program 0: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) 17:29:53 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 17:29:53 executing program 4: r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/237, 0xed}, {0x0}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2, 0x0) 17:29:53 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001500)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0) 17:29:53 executing program 1: statx(0xffffffffffffff9c, 0x0, 0x800, 0x0, 0x0) 17:29:53 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 17:29:53 executing program 0: timerfd_create(0xa, 0x0) 17:29:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20) 17:29:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:29:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x4000000}, 0x0) [ 553.414910][T18610] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 553.414910][T18610] program syz-executor.2 not setting count and/or reply_len properly 17:29:53 executing program 0: socket(0xa, 0x6, 0x6) 17:29:53 executing program 4: fsopen(&(0x7f0000000100)='romfs\x00', 0x0) 17:29:54 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:54 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x341900) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 17:29:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x5000000}, 0x0) [ 554.382488][T18641] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 554.382488][T18641] program syz-executor.2 not setting count and/or reply_len properly 17:29:56 executing program 5: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x2e180) 17:29:56 executing program 4: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) 17:29:56 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000140)={0x0, [0xc]}) 17:29:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) gettid() bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80040) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) ftruncate(0xffffffffffffffff, 0x200005) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) 17:29:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x6000000}, 0x0) 17:29:56 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 17:29:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x400, 0x100, 0x4}, 0xc) [ 555.993664][T18659] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 555.993664][T18659] program syz-executor.2 not setting count and/or reply_len properly 17:29:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x7000000}, 0x0) 17:29:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x11, 0x63, 0x0, 0x0) 17:29:56 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x19, 0x0, &(0x7f0000001880)) 17:29:56 executing program 4: process_vm_readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/230, 0xe6}], 0x1, &(0x7f0000002500)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) 17:29:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x8000000}, 0x0) 17:29:56 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000140)={0x0, [0xc]}) 17:29:56 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xb, 0x0, &(0x7f0000001880)) 17:29:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) gettid() bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80040) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) ftruncate(0xffffffffffffffff, 0x200005) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) 17:29:58 executing program 0: clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) socketpair(0x2a, 0x0, 0x0, 0x0) 17:29:58 executing program 5: r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/237, 0xed}, {0x0}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/87, 0x57}, {0x0}], 0x2, 0x0) 17:29:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) 17:29:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x9000000}, 0x0) 17:29:58 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xc3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:29:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xe000000}, 0x0) 17:29:58 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x80200, 0x0) [ 557.995373][T18708] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 557.995373][T18708] program syz-executor.2 not setting count and/or reply_len properly 17:29:58 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:29:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:29:58 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 17:29:59 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='{$\x00', 0x0, 0x0) 17:29:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf000000}, 0x0) 17:29:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x50, 0x0, &(0x7f00000005c0)="382a4bbf724865e09d4b82323059e656d699dd01dc2dac68290a93b6159a0c5e2493e430336077473b93974dfa943f980b598ef97cec3261af700da175389fe29f3c793fbb2b0195387b5bf52fa7320d"}) 17:29:59 executing program 4: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:29:59 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb8869d1bb334b9032a4"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b772005e1e357b3c9b4fe15e11c1afd6fa1ccd9008b3345b386b733ad18197255235d7514c1fb12edb8c5"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "552388ba771fd1d7d96cfe8a192cea35866e6b510652b20fd685fc1a1a26d2ae819350c1fb9a94cba2f580f651776b66ef4aa3a1efd30e860ebc88c6114d61b89794e19cf16bceea3ab28f9f8246574d3a0cb5abadae633f5a0c00a1d4487baab60a0aeeeae8847f8f6fe1cce74d0dc209b49f22bcd1242b07c55b056fd817457a1db3577fafaa6f1356fe5396add50d453884ff36e69b685bd72ada962a8f372597b84b8c47be51f54064da3797f25b411cab40d66beea231d43af0e59e948613"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb5c70ab945d0ca925005b7cb478d6aac7eab74aaa421af87727ba1c6b1d3a8cc3fdae9c0b5553102b0f22a998d9a3900b9b1aa55824cc03cdce0abb0066f1eea195c085d47696123d64f4597037ae03e2400e19a41255eb4b82aa894c9916bfd0e57b723d567e1c8df202c2cd45a9d9c3bca5430fd160a8abbe5d5bb15d60ca86778a27f50c9988b2e75b3c9ffb88b50755dd885aeeb1a88a3c836e5d144a917ca4b34e41"}, @INET_DIAG_REQ_BYTECODE={0xbd8, 0x1, "2c3ae0ebc0b0439e8437942f04a0f3885ed1eb81f0a364b3124ff0bc2472771757651356054656b83916d66105f4e7a0a81cac8ca024b650637e9b3a8e9fc975d8903129658ad27d23eb86ab1faa336392cff073e34fb4d9181b30a08d969b5dfc05caf2b9adc18eb94034dd311f37d8732ecf163f0bbd2c8d9acdc22b26d0fe873738fc64ca889d978898c4b2c65557b1f216e62ef990b91920def0859345288937b6b3f6b8493f4b9567ea16d0f2e38a64993869ae796bab6407fb2108a6a367bfe96e5278cc3338f112e72fe882b81ebd1440b30749e4fea46e2fb97be621c3abc1821e0c6bc4e7776872ed9aebdc2241e00241629234089d14e8e5498410325cc63c33aebe3c2b4ee452e6f607b8967948a3f47450665b555bbf37c9fcf8f736e930fb0d57bb32c2f95fd07b71cbad053a209c3ecb56ef20b23fbcdd1ec236d2abe4b238dd02dcaa3cec2fcf03a3ad6f838d6b823512548eda28ddf3e4234931637687162b1ad6f2c56c5a786cb60aa153daee1c74fdaaeeaab27e4ce439f56a030076a3761757b9a6ce731d8da3e0d5288fde148d23a9978f49e4aaf256efca9ba838f40af7e56894480a9d1c5b4381021323a24ca64cf4bb684693856aba352b84f0b458bb85a4dc2fb53e73c4def383e61def842186481c2109d9805c5cafc8b05a595f6db101723c3a747c4c13b14c5643a3e0e25af9b5cc67460a228b252420105b06a489f3e897926e961e27f12dabb8a6eb14ba48dcd655a9c34c61703c0548388321c604001a1d927a5a59c2bd61ba23036354ba74e0bb0d1b6d54620c90fd2498b90797abefc22b3b320dc84f509700794362af01c2121b7e30de8d5b433eae21b94ae8bedec9d07c42f534b3531aebc93e6ac6afeadfd28fc31b1df8592145d4ae14804fafa765ed8c56a2f7a3252df3d995f2f3346d3d92653312fe8e1ab192b10f3043aff4170d8425df3d7ff8eccd2312150921dfa5fa19610e74bcc0e53006e680d1ed887e6bf998894b6a8fade0e65553660856863cfafc16f0e8b0a68c1baa1f0ccee75f31314f7296f6a9ea12788e90f2f7cf7f9c0583ca64430e8ce32b78c2e4cc9d592a9586245d8ece8ac6b10891ef0a9f3911fdde1060802484d92405cd300bbed862e10a75b0f00c911d82c63434ba9603b33d051a44db6d26e7eadbbd2d627aa6e93daf34654ef29058a1561c7f9038473b6d8fd40483ff553ca5914702e8b81ad315a9273050b88e147c0fa5a8f5a7c6c97479df64af6171a6fc0163268065509d3dc8563e9498ec9bc4cec6bf0c8dc528235f0287a9db022fcf84d1de230371e13fd5b79f69114fc3e63fe95920a3d93b56b68856c4952407a316d882639a4b5c04bab4e963d834e2daf49133503a6db861649c8ac10d06c537a0fc22da25e3291dd024a6cefd3ec935b33a69f078d9b520fbeb1bceebb4e2f8e123d9fd94ecdbe08786dd88e55b322f20332b2b6022c4e4cab2a84e4227464c55e5c1a54812fdf0f161f77e6fa8a6606d22ee3ae53f34be91d2260a496cffce8438716e2e1250c7ef5170877f4d0942e4918994a985c87563d35476a9f934e2953fb311ffcf65625ebd7fbd29eb6af7ee6e1e57927c673485e62c78893bb0db8010c0c5872220223637401fd364d5fbb67644e18d80bef1a0d5e73cb930a6a35b7ab58237c8f836ecaf521eaa5546927f8694f13e81a1bfcc31fbde1832090dcefec822f1201b308a69dc70b05f62716ac6c26135290e7722b30e0ba9ade2f65b4340dab527fa0e045b3fb0ee00e05a2a94309017b8495d2fceb3c07f8fefd965f6ea5d08865edaff396a13bbb8d7f40eeb45b8a28e053deffc429d6d156119b0f221b3a9cb1b5d6e151d38fb230d9ca0bced172b850df906e14aa824fbc4508079f1d6991770843127c9cff55ce58d5f763041eecb18d49153947f1363798105c85d26eed31b4f99c161230070aa3d738449534b10cc4373bf3da342030f6fc41e7add2ff45e71aa35d73909a7be760fb4ca56c93b5f253d7a13ad46bb4eb0b8e4d8bf8877be6d260523dacc12d2fdbfdb0aeeca7335870af1325274e7fbd8da816f4d0b12974be7fd82b36c2caf19b377f46fe9bb94950fef183de1565c64d5914627b2d367d7ce6047a6f84571b1bc1b4fcda0de4b5a118b051bb31ed0642c08b73402f8f71f14cf38c41043752fc2be178d3643dc156355fe0037c25cedcc904edf03ff92bff1d95f1bd24ff055aae4425b21612d7ff9f9d72a3ec05aad98c29613fa54a2dd1eacb047e6ee31788ae96a6ab04f376c6f4df6b483d755c7b03874c42dcaac9f5a6fdc7ada469399b530f3bd48b3b7e502410fa44b47bc0022342991664800bda56a3dad4ce8647c92b3585f1c64b3ef43d04020a5097542af8123f9681a024e77ad0293fb4ffd33414179814551ec21417a7ccdd300f4673c72ed09bd2fd594458aae5c3ddedee946f8d901c972461c3113750bef1c083029743c7b9109ddcacd500feca1b75212da1973d4a870c507acb69d00d79fe8cd2b729d87959814370964aaaf71f9b150ebc1faf6b6a4b8c4500fad50f71951442e8be108ae5274677e3fc6ae609a34c6b38ef284091277b57300e409c8b5464b99ebbff7821b7032db39a9c62b1e1b8441c953aecb44b1d2acd16d30d6d6c7976e744673f00f2937a5da60b16c5bcc63b2f6f0175332079b9c9d0c49903c60448bd6e49d89641026fb1f790ac758e35dbc104b54167342079fef1261a81139e4f68389f2768de9e5160ca0367d8a97d4b9dfc211c580ee94a20c2d16f674d103fc9f68675460a085e2a29e7d3d7e3e68ec86c6381a89734953822ef05f4c4ea308c0d509f627e3f152084d7fb2ad9217e5f4ca06b7f12e1b45e0fe56a7f0670bf7b2d9fb4b66ddeb0dd0906912a99ca7a8366168facb201f283cb61e966dd18bd15a0e06084def9fc1d3c31a7da63305bb22facac342e78457977da804bcfe0958fab6a45770e94515baa6dd4e3a660367e9b95fd6cd7581bee0545de4fc82488df9fd55a7c263c5a2e4967d734c068a5685027cb6cd248d8ca3da9874c84998f401d5f316e6f2f974fcb8df9980920b28cd3105feb6e40a1fd34ab8cb21067c20532346a9b95161b44f37f950da89c4cd61ee3a41aef959330cc0240ed251480d2da3f0db712049037e86075c890e8633ef5cb11b0c46a2c7f147e9c4fa7e609c15172c811b4718b3912f7ad8c3c9e0566120f16eaa1727c29329f28828f0429908ed3320ba40a6c84873f9a6a424a94d70341f4c38881e66899d636a0711d91a95401e97d05f65a9d698f3fc75561883aa5bd8784f6a21b337deb33685d65d79f89e8cd4a10db5d467831f5f57cfd923cbce5e151c7796fbb2bb7e7c3707927504704ff7ea057ee66890c656964c6e0988f0b3f96087b4d550358e97c5913415378eb0cf2b35a3cd53523b33a88ffc27e685de058d9b65f959058194dfcc2bf6e8c5b4206fe9c043c99976d6e6a648457302ee8b5a8cfd33217f0ed01871f83913d4de496be59f3393be2d7fda36033efd44f723e20cbce710c81644bdcd995c178de6152b3342c241fc0e42a8583b71e86a2ea0c423e608c6f2d88c12a8c064e053977e578f2d3462caa67c1ffda9215b19b3b30f4ee3b2f55e6a6e77a72048b5d7897fedbe6bc10406dbe1a86ffd60e0cd5aa80b19b3e8d7c7f8404b195fd858b452005c41bc2a00b69161c99dbb5143fe557e03bc5395d2bd2b10c762c68cfdc619c5f20885668c1cce2719dfafc9d66c6a1a180a2dba9c87273328211ec8188ef901e9004987996ab234cacb4c56100252f3b7af8c3b4afb56f732b2e7f6dd8bdd4eefd3b020a03654bcfbe23315af479b8296f1a7a098267e72592e344242c8a9b1ef202ee2c99ef35ad6a2c77e3b908bac6ef872430e2c33f6c8722a0513f15add15db81b9a0ef6197d6c8f6668e1d8c9dfa3553150cf9c7304924788e952f13e8f125d7363fbf43b316d67521531b944578b0c33af586d879ce680ad7c54cf524d459526239fdbaf37cfddb10a566f296c68f855d08eecbd65f090c12780d4f76f023cc441852a0bc0a2b70c0f94a22fc1784035053f33fba510b36c43f771f0fbfa9859b09cc63d03470af36c01c12514e116e0e04ef86d539f3fa4509f5043b797db3045390849c8a41a4c924f007496b0ab380664ca0380b274445f59dd6f4006c83f3bf695aaec60bd6b2c43ca0fac685cf63db1eb38bc38e583885fe3f868714d70f305e7d"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}}, 0x24000810) 17:29:59 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 559.160315][T18752] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 559.160315][T18752] program syz-executor.2 not setting count and/or reply_len properly 17:29:59 executing program 5: fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) 17:29:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3f000000}, 0x0) 17:29:59 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x501, 0x0) 17:29:59 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:29:59 executing program 4: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:29:59 executing program 5: io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x7]}) [ 559.530891][T18767] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 559.530891][T18767] program syz-executor.0 not setting count and/or reply_len properly 17:29:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x60000000}, 0x0) 17:29:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x64, 0x0, &(0x7f0000000040)) 17:29:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) [ 559.677232][T18769] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 559.677232][T18769] program syz-executor.0 not setting count and/or reply_len properly 17:30:00 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x3c8, 0x108, 0x0, 0x0, 0x0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd78, 0x0, @empty, 0x4e22}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 'ip6_vti0\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x7, 0x1, 0x2]}, {0x0, [0x1, 0x7], 0x3, 0x1}}}}, {{@ip={@private=0xa010102, @rand_addr=0x64010101, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'dummy0\x00', {0x8000}}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'team0\x00', 'sit0\x00', {0xff}, {0xff}, 0x4, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 17:30:00 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x515001, 0x0) [ 559.983938][T18781] x_tables: duplicate underflow at hook 1 [ 560.006733][T18783] x_tables: duplicate underflow at hook 1 17:30:00 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x8e010000}, 0x0) 17:30:00 executing program 1: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) 17:30:00 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x0, 0x0, 0x0, {0x1f, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb8869d1bb334b9032a4"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b772005e1e357b3c9b4fe15e11c1afd6fa1ccd9008b3345b386b733ad18197255235d7514c1fb12"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "552388ba771fd1d7d96cfe8a192cea35866e6b510652b20fd685fc1a1a26d2ae819350c1fb9a94cba2f580f651776b66ef4aa3a1efd30e860ebc88c6114d61b89794e19cf16bceea3ab28f9f8246574d3a0cb5abadae633f5a0c00a1d4487baab60a0aeeeae8847f8f6fe1cce74d0dc209b49f22bcd1242b07c55b056fd817457a1db3577fafaa6f1356fe5396add50d453884ff36e69b685bd72ada962a8f372597b84b8c47be51f54064da3797f25b411cab40d66beea231d43af0e59e948613"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb5c70ab945d0ca925005b7cb478d6aac7eab74aaa421af87727ba1c6b1d3a8cc3fdae9c0b5553102b0f22a998d9a3900b9b1aa55824cc03cdce0abb0066f1eea195c085d47696123d64f4597037ae03e2400e19a41255eb4b82aa894c9916bfd0e57b723d567e1c8df202c2cd45a9d9c3bca5430fd160a8abbe5d5bb15d60ca86778a27f50c9988b2e75b3c9ffb88b50755dd885aeeb1a88a3c836e5d144a917ca4b34e416660"}, @INET_DIAG_REQ_BYTECODE={0xbd8, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xec4}, 0x1, 0x0, 0x0, 0x24000010}, 0x24000810) 17:30:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"930974c4bb5f5fb37caf71cf580c8ebd"}}}}, 0x90) 17:30:00 executing program 0: open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x327b02, 0x0) 17:30:00 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x10, 0x0) 17:30:00 executing program 1: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0xff}]}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) 17:30:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x9effffff}, 0x0) [ 560.283616][T18798] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 560.283616][T18798] program syz-executor.2 not setting count and/or reply_len properly 17:30:00 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000080)='F', 0x1, 0x0, &(0x7f0000001080), 0x10) 17:30:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0xb, 0x0, 0x0) [ 560.570339][ T35] audit: type=1326 audit(1608831000.784:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18803 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:30:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 17:30:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:30:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x368, 0x368, 0x280, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x0, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'geneve1\x00', 'macvlan1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x0, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x219) 17:30:01 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0xfffffffd}, 0x8) 17:30:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x88, 0x63, 0x0, 0x0) 17:30:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xfffff000}, 0x0) [ 561.166801][T18831] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 561.166801][T18831] program syz-executor.2 not setting count and/or reply_len properly [ 561.285259][ T35] audit: type=1326 audit(1608831001.504:35): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18803 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 17:30:01 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x10) 17:30:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 17:30:01 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 17:30:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 17:30:01 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000740)) 17:30:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xffffff9e}, 0x0) 17:30:02 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x450805, 0x0) [ 562.269795][T18854] kvm: pic: single mode not supported 17:30:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 17:30:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000180)=[@enter_looper, @dead_binder_done], 0x1, 0x0, &(0x7f0000000040)="94"}) 17:30:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:03 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f00000001c0)=""/185, 0xb9) 17:30:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 17:30:03 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xec4, 0x14, 0x100, 0x70bd2a, 0x0, {0x1f, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "802b13fabf83ac43dd2bdc5334"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "d295091ebea70f809ce8c0df985da93d9d1f6a2e409874eb88"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "f276aee23a5a313decd99a3153ec025a5bae5f44add8584108023deb2948fd341e5980d042216ab271a3a11b1285ea70fb52157b28a9ad14460fc8d4f66ec760a854cd540181d8f6bdc315fec1b423e105e35c1c507f37e9f2e27a36be2c814966b1b7365a5672daba2c9b754785e31a8f95cbf356ecf723700e829e188471be4fdb7433efcd5f517aab18f9136b67ce585a3abe631307b30450182c814573efaffaee5150e225e227330b1fdb5bbfb5f86b7720"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "d61baca44e10fc62c73b1c346a7ea01ac4021df6d53160636b5a2a2b0c01b1f167d2e14df157e2afc39a0c0007b11ff82b009718a99151c511672c4f7469191788161bf7cb5c70ab945d0ca925005b7cb478d6aac7eab74a"}, @INET_DIAG_REQ_BYTECODE={0xce1, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "3e8868e3eb595125fc5e363a24906429b1a3d06d578f28258f0676d7ae483112a25b516fcdc7cf1eb8199324badc3cefd81f4e533935a565a8fdd60cf40df093b79ef7b04b2be7c74bf7148a903f4840788513fc2ad2ecc72ff543a6c7149463ba81666bb1cedb23c03b0ad61a19503e3e8aadc1f2e952bb3938d811"}]}, 0xec4}}, 0x24000810) [ 562.271928][T18854] kvm: pic: single mode not supported [ 563.032944][T18885] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 563.032944][T18885] program syz-executor.2 not setting count and/or reply_len properly 17:30:03 executing program 4: linkat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 17:30:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000000000}, 0x0) 17:30:03 executing program 1: socketpair(0x2b, 0x0, 0x0, &(0x7f00000013c0)) 17:30:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x3, 0xcb, 0x8}]}) 17:30:03 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 17:30:03 executing program 5: socket$caif_stream(0x2c, 0x1, 0x0) 17:30:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 17:30:03 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x0) 17:30:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x80045432, 0x0) 17:30:03 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') 17:30:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0) 17:30:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:04 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}}) 17:30:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x50002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xc0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0, 0x0, &(0x7f0000001340)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000001380), &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 17:30:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 17:30:04 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xd, 0x0, &(0x7f0000001880)) [ 563.978363][T18922] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 563.978363][T18922] program syz-executor.2 not setting count and/or reply_len properly 17:30:04 executing program 4: fanotify_mark(0xffffffffffffffff, 0xd0, 0x0, 0xffffffffffffffff, 0x0) 17:30:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9) 17:30:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17:30:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 17:30:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 17:30:05 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:05 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:30:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 17:30:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x200000000000000}, 0x0) 17:30:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_mcast\x00') openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x50002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xc0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0, 0x0, &(0x7f0000001340)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000001380), &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 17:30:05 executing program 4: fsopen(&(0x7f0000000080)='reiserfs\x00', 0x0) 17:30:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 17:30:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x300000000000000}, 0x0) 17:30:05 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00>\x00\xa6\x83\xb8u^\x81-g\"\x0fb\xae>\x18\x17\xd6\x81\xcd\x19Y\x1e}\x99\xbapj\'\xe4\xe9\xb1\x18e\r\xd0\xc00\xcc\xf9\x95B\xaf\xb1\xbe\b\xd7\xfa\xd3`X#em\xd3\xfa\x8dL\x04>\x1c.\xd0\xbfa9E\xa0\x04\xe2#\x1ek$*\xf0\n\xc3mE\xa8O\x1c\x02\xcc\xa1\x83\xe6\x96\xf1E\xce\xdf\xf4B\x8bi\xa2\xb3\x1f \xa5\xea\x86z\x94XQ)k/B', &(0x7f0000000280), 0x0) 17:30:05 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 17:30:05 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x7, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 17:30:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1000000001, 0x0, 0x0, 0x8, 0x80000000fb, 0x0, 0x40000000a, 0x0, 0x400000000000000, 0x0, 0x0, 0x1000000000], 0x0, 0x10}) perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64d, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xda1, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffdb8, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 17:30:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 17:30:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 17:30:06 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x14}}, 0x0) 17:30:07 executing program 0: socket(0x3a, 0x0, 0x0) 17:30:07 executing program 5: socket(0x29, 0x80005, 0x33df) 17:30:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x500000000000000}, 0x0) 17:30:07 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:30:07 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:08 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f0000001880)) 17:30:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 17:30:08 executing program 4: process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/237, 0xed}, {0x0}], 0x2, 0x0, 0x0, 0x0) 17:30:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x600000000000000}, 0x0) 17:30:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:30:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 568.193332][T19040] binder: 19036:19040 ioctl c0306201 0 returned -14 17:30:08 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x10d, 0x8, 0x0, 0x0) 17:30:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x700000000000000}, 0x0) 17:30:08 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x1000000, 0x8, 0x0, 0x0) 17:30:08 executing program 0: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) 17:30:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:08 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 17:30:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09631040020000000000000000000000000000000e630c4000000000000000000000000006630440"], 0x0, 0x0, 0x0}) 17:30:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x800000000000000}, 0x0) 17:30:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 568.832376][T19068] binder: 19060:19068 unknown command 0 17:30:09 executing program 0: io_uring_setup(0x7420, &(0x7f0000000040)={0x0, 0xa79e, 0x8}) [ 568.878047][T19068] binder: 19060:19068 ioctl c0306201 20000100 returned -22 17:30:09 executing program 4: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa00) 17:30:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x900000000000000}, 0x0) 17:30:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 568.970636][T19072] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 568.970636][T19072] program syz-executor.2 not setting count and/or reply_len properly 17:30:09 executing program 5: io_uring_setup(0xc, &(0x7f0000000440)={0x0, 0x0, 0x2}) 17:30:09 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x10d, 0x8, 0x0, &(0x7f0000001880)) 17:30:09 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xe00000000000000}, 0x0) 17:30:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) 17:30:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:09 executing program 5: r0 = socket$inet(0x2, 0x803, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) 17:30:09 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="4b0000000f"]}) 17:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 569.712149][T19115] binder: 19106:19115 unknown command 0 [ 569.744262][T19115] binder: 19106:19115 ioctl c0306201 20000100 returned -22 17:30:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x88, 0x63, 0x0, &(0x7f0000000040)) 17:30:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) [ 569.821224][T19118] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 569.821224][T19118] program syz-executor.2 not setting count and/or reply_len properly 17:30:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) getpriority(0x0, 0xffffffffffffffff) 17:30:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000001600)='#\'}\xc6\x7f:hH,\xe7\xe0K\x82k:Po%n1!\x00\x00\xba\x00\x89\x00\x98\x12T|\x89\xb9Zx\xe3:\x8f\x00\xf69\xbb\x14/h6\xe8\xdf6\xd5\xf0\x83\xde\x8bP]:\xe9~\xe6\xe6R\x12\xc7\xe0\x13\xc7B\x82>s\x03\xad\xdc\xce\x1a\x04\x06b\x03DW\xf8q\xd5$*\x02\x8c\x80K\xb0L\x1d\xaf0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x802000406) 17:30:10 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010001fff000004000000000000000ac1", @ANYRES32=r4, @ANYBLOB="0000000027a800001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r4, @ANYBLOB="e3b6"], 0x20}}, 0x0) 17:30:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3f00000000000000}, 0x0) 17:30:10 executing program 0: getpid() r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) mlockall(0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)) creat(&(0x7f0000000100)='./bus\x00', 0x0) 17:30:10 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000001600)='#\'}\xc6\x7f:hH,\xe7\xe0K\x82k:Po%n1!\x00\x00\xba\x00\x89\x00\x98\x12T|\x89\xb9Zx\xe3:\x8f\x00\xf69\xbb\x14/h6\xe8\xdf6\xd5\xf0\x83\xde\x8bP]:\xe9~\xe6\xe6R\x12\xc7\xe0\x13\xc7B\x82>s\x03\xad\xdc\xce\x1a\x04\x06b\x03DW\xf8q\xd5$*\x02\x8c\x80K\xb0L\x1d\xaf0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x802000406) 17:30:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x6000000000000000}, 0x0) 17:30:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 570.571580][T19158] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 570.571580][T19158] program syz-executor.2 not setting count and/or reply_len properly 17:30:11 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x8e01000000000000}, 0x0) 17:30:11 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 17:30:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010001fff000004000000000000000ac1", @ANYRES32=r4, @ANYBLOB="0000000027a800001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r4, @ANYBLOB="e3b6"], 0x20}}, 0x0) 17:30:11 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) [ 571.527221][T19195] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 571.527221][T19195] program syz-executor.2 not setting count and/or reply_len properly 17:30:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x2, 0x0, 0x4) 17:30:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000001600)='#\'}\xc6\x7f:hH,\xe7\xe0K\x82k:Po%n1!\x00\x00\xba\x00\x89\x00\x98\x12T|\x89\xb9Zx\xe3:\x8f\x00\xf69\xbb\x14/h6\xe8\xdf6\xd5\xf0\x83\xde\x8bP]:\xe9~\xe6\xe6R\x12\xc7\xe0\x13\xc7B\x82>s\x03\xad\xdc\xce\x1a\x04\x06b\x03DW\xf8q\xd5$*\x02\x8c\x80K\xb0L\x1d\xaf0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x802000406) 17:30:13 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 17:30:13 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010001fff000004000000000000000ac1", @ANYRES32=r4, @ANYBLOB="0000000027a800001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r4, @ANYBLOB="e3b6"], 0x20}}, 0x0) 17:30:13 executing program 0: add_key$keyring(&(0x7f0000000a80)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 573.507731][T19215] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 573.507731][T19215] program syz-executor.2 not setting count and/or reply_len properly 17:30:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) 17:30:13 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:13 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2040400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 17:30:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 17:30:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) [ 573.911410][T19235] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 573.911410][T19235] program syz-executor.2 not setting count and/or reply_len properly 17:30:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4002d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000001600)='#\'}\xc6\x7f:hH,\xe7\xe0K\x82k:Po%n1!\x00\x00\xba\x00\x89\x00\x98\x12T|\x89\xb9Zx\xe3:\x8f\x00\xf69\xbb\x14/h6\xe8\xdf6\xd5\xf0\x83\xde\x8bP]:\xe9~\xe6\xe6R\x12\xc7\xe0\x13\xc7B\x82>s\x03\xad\xdc\xce\x1a\x04\x06b\x03DW\xf8q\xd5$*\x02\x8c\x80K\xb0L\x1d\xaf0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x802000406) 17:30:14 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 17:30:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010001fff000004000000000000000ac1", @ANYRES32=r4, @ANYBLOB="0000000027a800001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r4, @ANYBLOB="e3b6"], 0x20}}, 0x0) 17:30:14 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:14 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:14 executing program 0: add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc3='e8dab99234bb312e'}, 0x0, 0x0, 0xfffffffffffffffa) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) syz_open_dev$dri(&(0x7f0000000540)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004880)='ns/uts\x00') 17:30:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) [ 574.377544][T19262] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 574.377544][T19262] program syz-executor.2 not setting count and/or reply_len properly 17:30:14 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x5}, 0x0) 17:30:15 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x6}, 0x0) 17:30:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x7}, 0x0) 17:30:17 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:17 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x16800, &(0x7f00000000c0)=ANY=[]) 17:30:17 executing program 4: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 17:30:17 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) [ 577.364983][T19304] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 577.364983][T19304] program syz-executor.2 not setting count and/or reply_len properly 17:30:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x8}, 0x0) 17:30:17 executing program 1: syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000140)=""/126, 0x7e) 17:30:17 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000240)) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) syz_genetlink_get_family_id$devlink(&(0x7f0000000c40)='devlink\x00') 17:30:17 executing program 4: getrusage(0x0, &(0x7f0000000880)) 17:30:17 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x40) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0101028c590288ffd4ff5bffff00f7fffdff00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c000800"/72, 0x48}], 0x1) 17:30:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x9}, 0x0) 17:30:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+'}, 0x16, 0x0) close(0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) execve(0x0, 0x0, 0x0) msgget(0x2, 0x0) [ 577.810807][T19333] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 577.810807][T19333] program syz-executor.2 not setting count and/or reply_len properly 17:30:18 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000c40)='devlink\x00') [ 577.852593][T19336] binder: 19332:19336 ioctl c0306201 0 returned -14 17:30:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xe}, 0x0) 17:30:18 executing program 5: perf_event_open$cgroup(&(0x7f0000003280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:30:18 executing program 2: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2040400) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2223, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) [ 578.169489][T19349] binder: 19345:19349 ioctl c0306201 0 returned -14 17:30:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x8000, 0x0, "efe677b75a829688"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 578.226195][T19355] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 578.226195][T19355] program syz-executor.2 not setting count and/or reply_len properly 17:30:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf}, 0x0) 17:30:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 578.302040][ T35] audit: type=1804 audit(1608831018.524:36): pid=19356 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090554372/syzkaller.hX0xCW/437/file0" dev="sda1" ino=16367 res=1 errno=0 [ 578.408649][ T35] audit: type=1804 audit(1608831018.574:37): pid=19356 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090554372/syzkaller.hX0xCW/437/file0" dev="sda1" ino=16367 res=1 errno=0 17:30:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2040400) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2223, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 17:30:18 executing program 2: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 578.551617][T19368] binder: 19364:19368 ioctl c0306201 0 returned -14 17:30:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 17:30:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x60}, 0x0) 17:30:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 578.683464][ T35] audit: type=1804 audit(1608831018.904:38): pid=19373 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090554372/syzkaller.hX0xCW/438/file0" dev="sda1" ino=16384 res=1 errno=0 [ 578.765637][T19374] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 578.765637][T19374] program syz-executor.2 not setting count and/or reply_len properly 17:30:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2040400) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2223, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 17:30:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0) [ 578.942956][ T35] audit: type=1804 audit(1608831019.164:39): pid=19385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090554372/syzkaller.hX0xCW/439/file0" dev="sda1" ino=15747 res=1 errno=0 17:30:19 executing program 2: r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:19 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x8000, 0x0, "efe677b75a829688"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 17:30:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2040400) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2223, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 17:30:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x18e}, 0x0) [ 579.216493][T19399] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 579.216493][T19399] program syz-executor.2 not setting count and/or reply_len properly [ 579.288834][ T35] audit: type=1804 audit(1608831019.514:40): pid=19402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir090554372/syzkaller.hX0xCW/440/file0" dev="sda1" ino=16383 res=1 errno=0 17:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:19 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f00000005c0)="9c61a52c171fea14ffabcdb2e9dc027ab675b112788e64cf99606e0f8eee5d73839fac69c6803f55425d080a6076761c55e028cf5462b46b9aeb94ae7e77a008cbd7fce1a3ed5a93d885b8b68c14c8d95c331aa7d169218a5b12c7c67ef1baeaa707646a2797f17e5ee6aab85fcea191e39370b3d3c562690da171ee1374bc98c018abf900f2e9f9a8d0", 0x8a, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f00000008c0)="c1514273681cd4fe52c9457f730bca4211495bc08cd20fd00e64b34d8a48b6642e02f26697a7068372d5ff319f98a3bf2cc31a08ec9eac2654aad4c36d97c9e8457dd8e45615dedde5f7cbd465cab5b10efa9c9409bf3dfd9988edb2ed892b721974a2fb90ea80def19a49f4edec2e5b666e7c0abe42f85266cc50f2bb2437092996a06463120429e99c6b69d1796b8bfb788fd08d2ae5966fa81b0705b24234cf6e7daed343200aeea19dad2772ebbaf3070bf67bdf8f8ade2a95a043e575cbc8acc58fabc5e55262552738778112880e55828b384647a437bb1dcb43764a85252bd090bde2dd3f378b0b1a7d53e843f36e5c1c974c283373ad4ef9646e9f01edcccf9b63f1ad8c3261bdcca2553ca6bca35ea6f42e1fc9ea0357b312ae6e100940d204c3b94486e9ccf5f0221e38fbbbf7d64cb598162a747327d92caca11e6039337d6b73656a5086f03e483b712e53e9c8152ae57a8586be76608566b332f07cfa49533b4428939fb2a47663279a985a5bbe22118280f1c08d6deb496705073f3410ad24ad65f0c99e9177e13a9dcda728f437bc2e5ea72405fa5dbfb656249cd3232699c8bbc525495a27df752804c3ff75ef06d3cd4c751c0665cd5bb77cf0e5e1428f561a273fcfc1b862d08acb747a777888c85f08d7073ab105e6e1216ec4911927a3bb28d6678792c4b5a0c78234daf03458f99517b3da6ee00853ddde020b9b0eed30ff4baa2f9c51c832da7284852878ba86e9657b659e0c76c702cf6a2525e5e80971f267c2daa9a0ed6eefea8b63915ad5697d3ca9c4e780a2085c68c5602a54aeea8c1e21da1f969ac631ec3ec9f1736d33fcbad7fbee99337f965d3031ffe3cc4ecb3eea6c4fa8c47c4b3d871c630c528c46ed3ced2cc8569d8bc0f2652994f556f1f12c058e0894c9224720ae594b0210c48d0c2841c97f1ba68b7e0a169a145573f86ac41270c551c031dde364966244b3d736e453518f9da7be8f5f70e5c46896690af39428c225f8faa3243be1bde777328be6f06cf9216bd8dd8a7cb1b2fc7440d9b31c91e159b03e51bcfebe136344de6d3ad4f9850e4430071e113f469b32c5db4d5a9bfb5be9d57dea2a98cb5b94ebed15121d91df9f01304b0dca1cdc109ef3e6b094841d845ba36b6c8a20c58fbeab38252ec5183e80a86d41d091617597bafdac2b741165790011885ec85c3986838f7920836696cd4f2f777da6cef1c95c2c389556d7de3d515f51c8cecfa67e5099db5fb2054f50004060e9f61f82370f5a2628834d73d8768b7b5309687dcb1dd8a6ad69cefca0b29314c39c880003d5479a701d69e4bbb664849b20d3ccd47dd1774561414b098518288c2901f6574d9a0cedeae9f865e1a0e2f1d685f50355535a9930015908a7c8d2a1d1868509aa6d208e3aa14960109ab9db59d6016e9e996a73b57e2dd465ea84ba8338ac9e054daffdfd480dba200ef1df8cbcb8392ba8a91117eb40ca170c4145c00a2a55a450e69ce805591779b8136dd3f4e44b50f9cc91b5f3e11674cb0f28b2f72d165070edc5f6484c1971ddc63a66a91450069a05ff09521370140efeb95d13076922d458acfbf6eb1bf5c7e9fe660b4a566868a300972542036237485a3ac1376859fa39c8cda2f0dab4919a3653745c2cfcf7dbc931e0b63938a1e02a3e96879ea63d6f41749aba3b69a40781f69943d8ffc4e1ceefb3c615edb54851eaec11b741cc7a3cc2ac7fd226e9257b1970ee32457a62628a76aaebca0a35d847c8762109e45bef6353497ab70014d4b296149231eb379fa9e02cc86a2634cd31cccf6c32b1092fc575b00ab7c981e6fe3610e383589e3e9aa4069d1a90f3b6472226c22cbfd16b3710e6e4ee53edfe2d383db63b94bcdfbe54de37a1f669c66a4734bdfe6d8baeeb653132d27389228bf6d59b50256973d33a795438821c0dd5986ff09d6035015bf227905b3fa7c914f1fff57f34f1e98c9af81b67029205da77aa3e3d18fd281d1c81e66fcfc16820c97fe3a07e29ffe10c229848f5622b97c90b1629a8224fda9659b74ac1ffa887781c0a2e1f5ef3a80a670a6ae021ad50e763a005375937a5cef118743e7e1621906b62501c2c2c4111fd7f1286d21c9a9ca8fe8d6ba2e6b0fe4e2177465e3e40c59494fab091c4bd5ff3fc0dcbc4b05db29aeadacc5b54098d9ce32ceec255a1fda04d3eaaf76a71107f3522e055abe8f58e5d7d8f458928930ae83efc82ca3b3c267b158759026d91188eadc0f5bf85b341e7245b22f68107b4eed25ad1c39c6cb5d35669e1402d183a961d572e0d5b3895dae8002367bbe1f499622a61a8c98ed29a9846714ded9bbd3f9d9c8468d43f47a34565d1daefe6b271d37b7066f9bfc2fb370aaab21bfe33f6b17ef7735f4de0d0538e431f472d2693750f2fc8d5ac1911b12fa82ca1ed076ec5497a5cbb8fe13ede86cc59e993265dd154de88b99b3ecb09a838f15de8d25350bd99b8d758f8c45c8ae5f9cf31ecb111acbc2690f6c8a4f56935d3c6673787c357719cd4c8643ad16af1055f789b5da0144cbb4aa08a99afbb9a4b08cfa289987440ac41b2b5e21ab8e6b917f0e3a61e485b6f1cd728d4d8e0f1d0ffd37fd4f373d5ca92b25e2f607076bc55b60bcf8ec195a756994573d35bfbccd7adcf1f150628028f6cd9e8846099a6b6dd22f2609f3e2d436b1b1833863fbe0cc27f0e2a55e0a9cbf050fe5969b2a95dd380ab928b9ab1a011f5833702458f2fce1d53683d41daad2e7dc168c2b895184c3105693aa1836a34e831f6bc011759c0825e16921c0561449cb671e731031fc97e62ad6d128e4ebb846073d07058f4e2af8d60645ab90063d97be406d1550ddece41231226b981573c99428589c606f1ca35a674d854ef9c0df24d18b80f6a201e8148c2fff814f1d2925a305d990fc782063dc2c29da3ad408fd108f2401af9e817c8178b613dad1505fe46e527cb1470f52cf164f50bc5d5b5407bc6a2ce4ef5f61b51b2168f274659dff135341c49b3199b5372f259f0841f402faf04597491fb0ed75bc90030b917927bcb0ab7361345d2b64a2622d2c999a77910685116aabd0bac1f1ce6f16b6585b36b1f3a76612d6c874a2064e2f919df5af9c696e3bdefae3900dd466302d42a4a03e5ae52e34e5d9847fcbbff0fd1311924bdf84e5ae489783ae69333de34fde3351e9fdc081bfe32d5e7cd955ec9c645ab603ea6538208d0ca5378c25f11868eb8ec5440d480c01b85850762288f2786a5d1f42c853f44d63dad0008aebe22f6445afd718fe3cbc31fbb88f62fb1192689472c3624535a1c4a7b38e2794a380af95028ed4d39d461cf62b935717290e440b458b7c581a2e918f4ecd369cb1e754f8d0905d5b84d8cee87def36118c3d0f794acb7a6532ee80fbc93e48a33dada7bb8d4fcfd29704e849d7cb512d3d07835e3fb9adc318e2d2567fe4aa6a27999490f3bd1eb9e31e076b2ce4420ccd6fc6fc1d64646f0ee012ea0baaa55cc75da26d0746502d2f6d73b90491f4b8734c4f0b9c3d14444ed9bc58b68d717435770d7307f775d843a692105d6e432389eaf8c92f21f889ba699e476f9c31896cc0bd4da2e5cfabcc049ab7782f584c8d33e23d13985463eba619ef0baf0931e4c299dff92768b9cd160db9ef19cbf1fa653fa63247bd33d51dd516d760c57a382897f7e29dcc384b7b4d54bdf115e5d500960072ef72f714bfa1b51baf6cfb4f819ab46a622ec6cf57a3d0790f9c6b7e3d784b9ae27871e7b4d850378b086bc48216a075b2ebde416f085b36ad4745b3ccd1b95b1bd13c540fbafc14a91bb1119b6a000f76b900823f223302cd400e61d403b185d31c806efe3f706da159d00be0c308b0a895fe14461f488913ec995fb24df8044056111a952a03cc10337de0200cea8f0d61716fa38c2e75d3171bfbc68d929472a3469315a8507f6424ab7eb0acfc709544cf422f1b94958f2ddf8f0c5d16bbeeb4ba9f5c027f1db84c9ae12d724d2231dd4a4d6025e5aefcac1c53771e6954dec5b14140c476fd2d0d1bd03db729a402c96d26f26c51f02d5d61de82de9bd257d5ecc5481084d0d3e22e4eb09f6b4480277ef8cd18022b3e286f63a9deaa0732c62314232283d103fb8e8ae2832812a3d0b53e19a090dfaa8629fe3d268973d7f821700616bbd95e31ead65351d4482fff6e827105e69f6bc034bf65a6af8b8bdec32f13be70f04969f1e5b6dcd441e33ea1693de6bd5fa3c2e61d1b5a0dc42b1dc8dc9541e876d1b71a47076ddb47c422fd15f2df01df1d4d6075738e3ca42cc08a544209fc03204d4eb58067715fa32c8664aa80d544c170e20b35bcba50d4f453bf6519173f3aebe52d3169646d1c1bd428131517111270bfe720391e8a36861c23f9c8ec732070d19360fa1660dab71957e36121d530409706d906e65b9c8c73d6b539dbee31b6ba229bc0817191f391f16fff98b439206f6230fda2f3a8f4132512ac13b134601d320d79c7c16ffc834921ed119dacf5e5f3ba88c56fdfe7a5c3033078019514be4286250927300043accd6ac4acef3406eb7c63d4c3bb17041e34261185fc570fb64a1a0111ba52ae2ad2e437809ca4e82f6e0267b6ba651656318e1e38680f876823bbcfc0a0096f37d4e07885be177ad718c0c8f71900870cd0eef3aaface5f0bdf739db35d2d52b986751cc9532eaf12b931fd546c338b84a41aee769ea17cc2de4e6d62e6c308a9ceada22b1bc44ba77b297db4b33d26794216d127448050efe41ab81beba7f5cfa0283ebf9a3c6ca810f38e8904214a3ef043e095f9dbcf47a3c5777b906bdea2e249df5b0c0145b68fb28c60365c92fe03df1d5100d4019cd47e1fe4d", 0xd80) 17:30:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) 17:30:19 executing program 4: pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={[0x100000000]}, 0x8}) 17:30:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 579.779424][T19422] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 579.779424][T19422] program syz-executor.2 not setting count and/or reply_len properly 17:30:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x500}, 0x0) 17:30:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x8000, 0x0, "efe677b75a829688"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 17:30:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x600}, 0x0) [ 580.174584][T19436] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 580.174584][T19436] program syz-executor.2 not setting count and/or reply_len properly 17:30:20 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000001780)) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x8000, 0x27, "efe677b75a829688"}) 17:30:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) 17:30:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) [ 580.556858][T19454] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 580.556858][T19454] program syz-executor.2 not setting count and/or reply_len properly 17:30:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x51, 0x0) 17:30:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x900}, 0x0) 17:30:21 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) dup2(r2, r1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x8000, 0x0, "efe677b75a829688"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 17:30:21 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xe00}, 0x0) 17:30:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:21 executing program 4: pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x100000000]}, 0x8}) [ 581.005647][T19470] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 581.005647][T19470] program syz-executor.2 not setting count and/or reply_len properly 17:30:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) 17:30:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/126, 0x7e) 17:30:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) 17:30:21 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) dup(0xffffffffffffffff) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x38432, &(0x7f0000000840)) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, 0x0, 0x0) 17:30:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) [ 581.666046][T19494] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 581.666046][T19494] program syz-executor.2 not setting count and/or reply_len properly 17:30:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x51d}], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3b4a", 0xf895}], 0x1) 17:30:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:22 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3f00}, 0x0) 17:30:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x6000}, 0x0) [ 582.039584][T19507] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 582.039584][T19507] program syz-executor.2 not setting count and/or reply_len properly [ 582.671628][T19493] EXT4-fs (sda1): re-mounted. Opts: [ 582.672952][T19521] EXT4-fs (sda1): re-mounted. Opts: 17:30:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000640)) 17:30:23 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/126, 0x7e) 17:30:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x8e01}, 0x0) 17:30:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x9, 0x0, 0x0) 17:30:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x51d}], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3b4a", 0xf895}], 0x1) 17:30:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 17:30:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 17:30:23 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x280c0, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8}, &(0x7f0000001100), 0x0) [ 583.128255][T19535] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 583.128255][T19535] program syz-executor.2 not setting count and/or reply_len properly 17:30:23 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:23 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000380)) 17:30:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) [ 583.468569][T19551] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 583.468569][T19551] program syz-executor.2 not setting count and/or reply_len properly [ 583.801052][T19552] ISOFS: Unable to identify CD-ROM format. [ 583.951938][T19552] ISOFS: Unable to identify CD-ROM format. 17:30:24 executing program 0: semop(0x0, &(0x7f0000000000)=[{}], 0x1) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 17:30:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0) 17:30:24 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 17:30:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0x51d}], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3b4a", 0xf895}], 0x1) 17:30:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/route\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 17:30:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0) [ 584.199695][T19576] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 584.199695][T19576] program syz-executor.2 not setting count and/or reply_len properly 17:30:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}}, 0x0) bind(r0, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x0, 0x100}, 0x80) 17:30:24 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) rmdir(&(0x7f0000000200)='./file0\x00') 17:30:24 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0) 17:30:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/189, 0xbd}, 0x0) execve(0x0, 0x0, 0x0) 17:30:25 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup(r0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, 0x0, 0x0) 17:30:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000380)=[{&(0x7f0000000180)="bc77f64e6e6e8ff17fb7c21f307cd2d7011b34c5868d969766e47747a074aa83a8d6fecce7c7efc4c69af62d0d2d9292f0ae30fdd8c069294856b0a5d03f3142549148bfb7ecd680017ac7351c50e020c21ab9b142631b06c36f4e", 0x5b}, {&(0x7f0000000200)="8982b51447600333f1255891b3d0ca3eff900d61ea69f15c3bf22cd1d341ade1b624c0ade63e421962e5743b5351833390d5c6afc4abea2b7a5f767546aeabd3277650c1f6f1bda4e8608c11c6e4d7e7a4f9384caa6bd57f289556ce9f8b4a86fa4ee454192c7ad7abb3903bef930aa9dc294a74b3c72e8b63c6494ccfa9621a67f0c7722d379f55dfbc77f3412d4dbf04095a398da3090b625c10e1fd", 0x9d}, {&(0x7f00000002c0)="21a52c8561d1a984c100bf3be7a7330e16f319633e0765cf875180761717374e89994308bdb327b8cef076d2cf68031f6fde98b927cdb8ab6b65c9a45d21e54f5e09725b4d007cbd2d94a84df6b1b8d9fc2ee8778afa56d034667d19e59dbf24c946c208bb75ae33e3a5226a1159127e799d455604c7137593", 0x79}], 0x3}, 0x0) 17:30:25 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) 17:30:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="d3fd1bd88e1a75451e3173e71cd67d33dd2c1dd30be985d66f3f5afeecd0de04c648801325348cecfb81abef37d4bc0894ba39cc9742517204e52ebd35d0878fc418c074d234030696057d310292b3f5e2f2a1d5d62f7d5f183c01043d56b6d530bf2558796ad5c853f572667ec15b71fd1bf75f1f3ce21dc638f873a90e2e05d6133b2102b4655fceccc8f2f83aadf4ec82e6d97d1f0330f59b07f29f809e0747ae679280faa4444ff304e3f9f40d476d770abccb7570a3289f23acb85aa9d09ab82abc2591a9acafb810a669355cc0378d9bcc77504aeab7013ae716933736490153eb4e1341cad14f76a3263c6d6d713a884b282dff961c56b954334cad9b9953c24bcc154c768ce26c56e84c1b79bae2d7b2f891a3f3519dff74aaa092c76bd19de24e5d64f49ccf84075c001f464178dcc109df5cca15c6710bf01b584790c1f2887264dd4fdfb1a663cad8f8653753977b908dd50bc84e49274d808b6b0c389a4c91fed08d02a13ecaadd0582b930df2aa4ec0d729cebc482fa6a19e34dc2671b0822be105d2dd479f2e2f5fbae8bc50b595f7c74fcea414c1312102d8383b05fe36bb40339d8a03f5569b6bfa68cc183e510b6b65d917a96da07b9c2a9e915cb01eaa1fc70f508f42f4e03654d619cda02fdd31fec8a9301c2490f857488c4a09295c9a6b520f46e128591b09703dc7bf14a7f3024c359186661f0b77b5b5178821a7f77ca624cc09ea59ca7b774c6e6e17af1c6c43ca0a85957394579819d07d12f7d490e29e08ac0e54dc6fb5b79f0c0ff0135e89795619a84948a3a4a05b35b67ddd23ec359a80d35f9f954e05b6d3075e0ba3454056cb430d2ecb62532c259606d2f43d3c3565fdcab368982a0ba53516d540cd5d9f2b9b8cd51f74142118dedbadd2aa79ac7f0463a933ef16f208f3d39de5ea009a7d70b6bf23d3a93023ea99fe5d544bd51653e516e5cada11dc2eb41a59709f8e404b0c719cb98d2491a927d4bf5b4c7e272efced994695f07cec01c8e6ff08c4395122e60c67123bcf55943d00cb919b2857d184e5da2e66c8282c8d8f075902e662c76062b7d8cf47bab8eb42f550188b7a746779eebf72e3fe914a201ccad1856393296534a2089400c15ccc24537173baf233cbe433e547ce5de18b921d861f3f458a267108a2ed1f50bbe5ae001c7d5615b6b9de2ceb8362b613f97aa689cdcc80fb39e8115183e854d59785b2963f185e86e8ae3a0524b739fa24913cb1df0690921f39350c59029a0b710f5265fc2bbbd3179750d52af73aa5c3981b859c9b5caa39f5e19f646dd0237d9790636556681cf6776a25c1b0bfa5c7ac9e722397de50221d6426a3daff411dfaaf6a3c11a43704a9ac3873528050a27ba37b25c9cd30cac0b74573a7cd069ac447a7f368b1ddcfc8b8c7d1c71ce40ba4df52cd4959a9bc21df2d9c8369602b190a4f5881cec2c82ed0172153261ec45a9fbdb906179e050a4a6f918d1d595a70ab0dc66699e8ff7e0142387131c0247555709504b3497b582f3c0fa468c9339bd8feae785a4efb6338c8b7951353071a4086839c618d6c6ff6b50c2b5a33ba1e46af742697fc7285577f693205c0186290382cb2adb51f017eb8181b8bcaddc29ae9bf34e2ff48d6d9421c4a16f894eb656b0d46735e77b7f2858ca8d45e92f8339c58fc3bf2f83fabb5a7c3797468bded5ca77284337f4aa38fbbc782b4e204e20370ee4a47e84d280a5cbab03f0e7a9ada05c9e6c3ab19cac4164e0053fb1c27237f8973001fe0b2c0384645b3f19b5fc518a927d4b078f9dcb26ac57a39577af6a6b25f3e739732bb5c509ec2d1caa84b9b64", 0x51d}], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee80a9b0729f69b3b4a", 0xf895}], 0x1) 17:30:25 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0x18, 0x3}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)="19", 0x1}, {&(0x7f00000000c0)='M', 0x1}], 0x2, &(0x7f0000000180)=[{0x10}], 0x10}, 0x0) 17:30:25 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 17:30:25 executing program 4: open(&(0x7f0000000240)='./file0\x00', 0x18e82, 0x0) 17:30:25 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) [ 585.351916][T19624] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 585.351916][T19624] program syz-executor.2 not setting count and/or reply_len properly 17:30:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/110, 0x6e}, 0x0) 17:30:25 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000380)=[{&(0x7f0000000180)="bc", 0x1}, {0x0}, {&(0x7f00000002c0)='!', 0x1}], 0x3}, 0x0) 17:30:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 17:30:25 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 585.685804][T19635] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 585.685804][T19635] program syz-executor.2 not setting count and/or reply_len properly 17:30:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 17:30:26 executing program 4: renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17:30:26 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 17:30:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write(r0, &(0x7f0000000700)="5790fee2289b3d706928a24891089300e833de13ac1825f7fac36cd0865c5449687633e6f4e5e9a07af74f122b4342996caa61cd86421354e2daca2536f3fe5b4ff7e891e35699a7dffbbc3026ccd2a20683a38bfa53a2fb2d292c79c578015f003b5e4f71993bf600861943ec85dff545ec90b848bca417bd095f9a9e1fa3a9f03a825f5c0a3b3446885d1c6930fcfa35", 0x91) 17:30:26 executing program 4: mknod$loop(&(0x7f0000000380)='.\x00', 0x0, 0x1) [ 585.997306][T19648] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 585.997306][T19648] program syz-executor.2 not setting count and/or reply_len properly 17:30:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 17:30:26 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffff0001}) 17:30:26 executing program 5: semget(0x2, 0x1, 0x282) 17:30:26 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:26 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 17:30:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 17:30:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000180)="bc77f64e6e6e8ff17fb7c21f307cd2d7011b34c5868d969766e47747a074aa83a8d6fecce7c7efc4c69af62d0d2d9292f0ae30fdd8c069294856b0a5d03f3142549148bfb7ecd680017ac7351c50e020c21ab9b142631b06c36f4e", 0x5b}, {&(0x7f0000000200)="8982b51447600333f1255891b3d0ca3eff900d61ea69f15c3bf22cd1d341ade1b624c0ade63e421962e5743b5351833390d5c6afc4ab", 0x36}, {&(0x7f0000000500)="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", 0xf70}], 0x3}, 0x0) [ 586.772107][T19675] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 586.772107][T19675] program syz-executor.2 not setting count and/or reply_len properly 17:30:27 executing program 5: setitimer(0x0, &(0x7f00000001c0)={{0xffffffffffffff00}, {0x81}}, 0x0) 17:30:27 executing program 4: socket$inet6(0x18, 0x2, 0x0) 17:30:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 17:30:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 17:30:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:27 executing program 4: pipe2(&(0x7f0000000440), 0x0) pipe2(&(0x7f0000000440), 0x0) 17:30:27 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40) [ 587.170943][T19692] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 587.170943][T19692] program syz-executor.2 not setting count and/or reply_len properly 17:30:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x8000000}, 0x0) 17:30:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x18, 0x2}, 0xc) 17:30:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f00000004c0)="4d1635194c009b5ea4651ca229b0c1b42e7fce2d0a6c4c00f159348f7ba1a2d2c994e577dfe2fb07716ed869dc2e6df7537b3414d4e2630ab57d214b971cae13ba8e4db0c63e9cba2e8987c75efe2c147150884fd9a1cf9d66056f1814589131aed3af14c53d169a70b59cdcdffaf63618bfeb89f8e9093e28ad25be894af86748ae984f50830a9047ceff1cba317bd921", 0x91, 0xc, 0x0, 0x0) 17:30:27 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 17:30:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="0e4be9b811a215896b813e44d4b3b3659661d5c0d828cfdf22831607876c611f2a30862277ab81b2ebcb6f69d4316623f2af64f6442b5fd761664356691f60f3e86cf386ab5bbba3d65f362f22cd57abda1c2eb76c396805176cbca076241a6d6ffa7725db71cf9ca1993ad8181ea51da1f396df6f4f4e0dc8e2609f89fae1071c16ebcd1233241d289403f68b448385b7", 0x91}, {&(0x7f0000000000)="9f", 0x1}], 0x3}, 0x0) 17:30:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 17:30:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:27 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) getpeername$inet6(r0, 0x0, 0x0) 17:30:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) dup2(r1, r0) 17:30:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002ac0)={&(0x7f0000000040)=@in={0x2, 0x3}, 0xc, &(0x7f0000002640)=[{&(0x7f0000000080)="bbd8624b6c4532e3035e62304a547a679d3fbb6fbc89fa99ed3a4821f896bb4174605b94e148333c78b65057130faf93672cc78bea4af94b97a5678904262b2f5932a7282a50e56150fc5733ddb0ed30f8cb5b85e4b15d8e9fc41b7eda11cf9d78c47aac681b0f170e9b51c9cc54cd1dae3a93185aee3f1843f6d3e614f5344d8d572d4876ed800c", 0x88}, {&(0x7f0000000140)="9656b1bc0951362eb68570b824b75e334d39c49dd4a9135581647cf42f541f95463da0c4c61f6c72e103fcc1cfcebb64cb49170c7015969b2e77fb2224bc7a90ac9f801f0d7a9d2176b61f", 0x4b}, {&(0x7f00000001c0)="973cf0b27c5ca47b651c6f5c2a6dceeeb2af5e8d2f8af7dfed584065d1d0abe7202d06ffe9e7b3375ebcf0a319a4afe8e5dfc45b180cbd83a8dcc525b872279d4e480c7d5735aa56f3e58405acec6c21267869686d9668d0795a4aa782a8a855d42cbf97e7df2a455350eb1ff9e0917f58926dfcbf89a0830a65de3eab6e4a982c9a1e87096efb184f1f1408739b4f3a5781bbe4c48ea4d2a28122782e29", 0x9e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:30:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xe000000}, 0x0) [ 587.628480][T19715] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 587.628480][T19715] program syz-executor.2 not setting count and/or reply_len properly 17:30:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 17:30:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0x0) 17:30:28 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 17:30:28 executing program 5: mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0) 17:30:28 executing program 4: socket(0x0, 0x2ead159430e51ff4, 0x0) 17:30:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) [ 588.134760][T19741] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 588.134760][T19741] program syz-executor.2 not setting count and/or reply_len properly 17:30:28 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x1) 17:30:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002ac0)={&(0x7f0000000040)=@in={0x2, 0x3}, 0xc, &(0x7f0000002640)=[{&(0x7f0000000080)="bbd8624b6c4532e3035e62304a547a679d3fbb6fbc89fa99ed3a4821f896bb4174605b94e148333c78b65057130faf93672cc78bea4af94b97a5678904262b2f5932a7282a50e56150fc5733ddb0ed30f8cb5b85e4b15d8e9fc41b7eda11cf9d78c47aac681b0f170e9b51c9cc54cd1dae3a93185aee3f1843f6d3e614f5344d8d572d4876ed800c", 0x88}, {&(0x7f0000000140)="9656b1bc0951362eb6", 0x9}, {0x0}], 0x3}, 0xc) 17:30:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3f000000}, 0x0) 17:30:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffb}) 17:30:28 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6}) 17:30:28 executing program 0: setgroups(0x6, 0x0) 17:30:28 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 17:30:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0) 17:30:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 17:30:29 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x41) 17:30:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000000c0)="b588ddddc4d4cc0760637c4d5ce00bd8ecb10c80d312539b74fc72e56d71c9e497791cbc80834d4061d3aef9486e237a9b0c5819ef6ceb889d62f0ae3a7ab954cd9eba05c39099c61ddba5d6afb372468e603dd919879adf0b28db0b40298073d7ccc137b7fbb866882fc59868b2f6491605bdfaeadc0f1e643522a4c2f1c066fa4cb69e3c1e7a593463e68ca5b9afd2d0d80aa7e9fffcced9510c0c4640a53e4c1386", 0xa3}, {&(0x7f0000000180)="5a59c7370bfda391c7f17e4e4122275ce055574cf19d423e79153fbaa8c463dd1860a16900a5bdfe8e0b0524ffefaaf04575cc05fa8df2f3cf16380d0e66c5e032d63296081c3c67146d08c09de522ab476aefadd187c68dd8e07a69f568994751acdcb84b647a0efb6b710f4a8cea2bf67a473fb2e91e6e0c611be8b27296f997c0851d818724b12534a7297f8cd552ee71f762be4d666c57be6d8d9beb322b910850b9b1c7e67b96a049127f7aac", 0xaf}, {&(0x7f0000000000)="1176afce5be69ca6f3774b63037843e886072fab0ab35b85f50a619b0394ee21fb16873e2069134853ca35a30b26815a", 0x30}, {&(0x7f00000023c0)="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", 0xe7f}], 0x4}, 0x0) 17:30:29 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xa, &(0x7f0000000040)=[{&(0x7f0000000180)="bc77f64e6e6e8ff1bc2c84529da2a6d7011b34c5868d969766e47747a084aa83a8d6fecce7c7efc4c69af62d0d2d9292f0ae30fdd8c069294856b0a5d03f3142549148bfb7ecd680017ac7351c50e020c217b9b142631b06c36f4e", 0x88}, {&(0x7f0000000140)="8982b51447600333f1255891b3d0ca3eff900d61ea69f15c3bf22cd1d341adffb624c0ade63e421962e5743b5351833390d5c6afc4ab", 0x36}], 0x10000134}, 0x40d) 17:30:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x8e010000}, 0x0) [ 589.069736][T19774] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 589.069736][T19774] program syz-executor.2 not setting count and/or reply_len properly 17:30:29 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x68adaf44d974cca2, 0x0) 17:30:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 17:30:29 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0x18, 0x3}, 0xc, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)='M', 0x1}], 0x2}, 0x0) 17:30:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0x10, 0x1}], 0x10}, 0x0) 17:30:29 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) 17:30:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 17:30:30 executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) getsockname$inet(r0, 0x0, 0x0) 17:30:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 17:30:30 executing program 4: select(0x40, &(0x7f0000000000)={0x4}, 0x0, 0x0, 0x0) [ 589.830221][T19802] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 589.830221][T19802] program syz-executor.2 not setting count and/or reply_len properly 17:30:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 17:30:30 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 17:30:30 executing program 1: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0xfffffffffffffe01) 17:30:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 17:30:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 17:30:30 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 17:30:30 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 17:30:30 executing program 5: select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x4}, &(0x7f0000000080), &(0x7f00000000c0)) 17:30:31 executing program 4: getdents(0xffffffffffffffff, 0x0, 0xffffffffffffff67) 17:30:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$sock_int(r1, 0xffff, 0x100, 0x0, 0x0) 17:30:31 executing program 5: socket$inet(0x2, 0xf3a29fcd0f74700a, 0x0) 17:30:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 17:30:31 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="85", 0x1}], 0x1}, 0x0) [ 590.811575][T19838] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 590.811575][T19838] program syz-executor.2 not setting count and/or reply_len properly 17:30:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x168, 0x1, 0x0, "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"}, {0x70, 0x0, 0x0, "685678d79d295207075bb58cf56c95ae63a83f74f950cb0e152d63b8e2e5fcb1de2678c6c5cffdce01bc474531e9fdbe05f2842d5eb45762067b6c613903704ad1a0998436b46770d8f03143c57d6ef05e53fb68ca8d91fc54"}, {0x38, 0x0, 0x0, "9b339dae5c60e2d97d15d1f0ef512442d737e9135649886760b30dfa5150b7b6e9"}], 0x210}, 0x0) 17:30:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa) 17:30:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) 17:30:31 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup(r0) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000), 0x8) 17:30:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:31 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0xffff) 17:30:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000380)=[{&(0x7f0000000180)="bc77f64e6e6e8ff17fb7c21f307cd2d7011b34c5868d969766e47747a074aa83a8d6fecce7c7efc4c69af62d0d2d9292f0ae30fdd8c069294856b0a5d03f3142549148bfb7ecd680017ac7351c50e020c21ab9b142631b06c36f4e", 0x5b}, {&(0x7f0000000200)="8982b51447600333f1255891b3d0ca3eff900d61ea69f15c3bf22cd1d341ade1b624c0ade63e421962e5743b5351833390d5c6afc4ab", 0x36}], 0x2}, 0x0) 17:30:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0) 17:30:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8) 17:30:31 executing program 5: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 17:30:31 executing program 1: select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x4}, 0x0, &(0x7f00000000c0)) 17:30:31 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 17:30:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 591.776984][T19880] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 591.776984][T19880] program syz-executor.2 not setting count and/or reply_len properly 17:30:32 executing program 4: getrlimit(0xcf1d60894fdfdc6f, 0x0) 17:30:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003d40)={&(0x7f0000001200)=@in6={0x18, 0x1}, 0xc, &(0x7f00000037c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17:30:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 17:30:32 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:32 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/189, 0xbd}, 0x0) 17:30:32 executing program 0: clock_getres(0x0, &(0x7f0000000000)) getitimer(0x2, &(0x7f0000000040)) 17:30:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 17:30:32 executing program 1: setitimer(0x0, &(0x7f00000001c0)={{0xffffffffffffff00}, {0x0, 0x1ff}}, 0x0) 17:30:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f00000037c0)=[{0x0, 0x55}], 0x1}, 0x0) 17:30:32 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfffffffffffffff7}, 0x0) 17:30:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 17:30:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000140)="e8535e5234930382b16961c6caf789ddf31074e3", 0x14, 0x0, &(0x7f0000000100)=@abs, 0x8) [ 592.680793][T19911] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 592.680793][T19911] program syz-executor.2 not setting count and/or reply_len properly 17:30:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}, {&(0x7f00000001c0)="97", 0x1}], 0x3}, 0x0) 17:30:33 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0)=""/170, 0xb5}, 0x0) 17:30:33 executing program 5: select(0x40, &(0x7f0000000000)={0x4}, 0x0, &(0x7f0000000080)={0x81f2b54}, &(0x7f00000000c0)) 17:30:33 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f00000002c0)='!', 0x1}], 0x3}, 0x0) 17:30:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 17:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 17:30:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x10, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:30:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 17:30:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)='!', 0x1}], 0x2}, 0x0) 17:30:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f00000000c0)=@in, 0xc) 17:30:33 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, 0x0, 0x0) 17:30:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 17:30:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="fd", 0x1}, {0x0}, {&(0x7f0000000600)='E', 0x1}], 0x3}, 0x0) 17:30:34 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) 17:30:34 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000001940)=0xfffffffffffffc6a) 17:30:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 17:30:34 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) recvfrom(r0, &(0x7f0000000040)=""/247, 0xf7, 0x0, 0x0, 0x0) 17:30:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write(r0, 0x0, 0x0) 17:30:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8) 17:30:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights], 0x10}, 0x0) 17:30:34 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) 17:30:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 17:30:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, 0x0}, 0x0) 17:30:34 executing program 5: clock_getres(0x0, &(0x7f0000000140)) clock_gettime(0x3, &(0x7f0000000040)) 17:30:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000000140)="9656b1bc0951362eb68570b824b75e334d39c49dd4a9135581647cf42f541f95463da0c4c61f6c72e103fcc1cfcebb64cb49170c7015969b2e77fb2224bc7a90ac9f801f0d7a9d2176b61f", 0x4b}, {&(0x7f00000001c0)="973cf0b27c5ca47b651c6f5c2a6dceeeb2af5e8d2f8af7dfed584065d1d0abe7202d06ffe9e7b3375ebcf0a319a4afe8e5dfc45b180cbd83a8dcc525b872279d4e480c7d5735", 0x46}], 0x3}, 0xc) 17:30:35 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0)={0xffffffff}, 0x8) 17:30:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0) 17:30:35 executing program 5: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)) 17:30:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040)={0x81}, 0x8) 17:30:35 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) r1 = dup(r0) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000)={0x6}, 0x8) 17:30:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 17:30:35 executing program 5: mknod(0x0, 0x0, 0xffffffff) 17:30:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 17:30:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000040)=[{&(0x7f0000000180)="bc77f64e6e6e8ff17fb7c21f307cd2d7011b34c5868d969766e47747a074aa83a8d6fecce7c7efc4c69af62d0d2d9292f0ae30fdd8c069294856b0a5d03f3142549148bfb7ecd680017ac7351c50e020c21ab9b142631b06c36f4e", 0x5b}, {&(0x7f0000000200)="8982b51447600333f1255891b3d0ca3eff900d61ea69f15c3bf22cd1d341ade1b624c0ade63e421962e5743b5351833390d5c6afc4ab", 0x36}], 0x2}, 0x0) 17:30:35 executing program 0: nanosleep(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) 17:30:35 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10}], 0x10}, 0x0) 17:30:36 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:36 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20189, &(0x7f0000000340)=@in={0x10, 0x2}, 0x10) 17:30:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 17:30:36 executing program 5: setitimer(0x0, &(0x7f00000000c0)={{0x100000001}, {0x8de}}, 0x0) 17:30:36 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f00000001c0)) 17:30:36 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 17:30:36 executing program 5: open(&(0x7f0000000240)='./file0\x00', 0x18009, 0x0) 17:30:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 17:30:36 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) 17:30:36 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000000)='|', 0x1, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, 0x0, 0x0) 17:30:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 17:30:37 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:37 executing program 0: getresgid(0x0, &(0x7f00000004c0), 0x0) 17:30:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 17:30:37 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x3, 0x4) 17:30:37 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$sock_int(r0, 0xffff, 0x1019, &(0x7f0000000080), &(0x7f0000001300)=0x4) 17:30:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 17:30:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000100)='\r', 0x1, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x8e01000000000000}, 0x0) 17:30:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 17:30:37 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000000c0), 0x4) 17:30:37 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:37 executing program 1: setitimer(0x1, &(0x7f0000000040)={{0x0, 0x10001}, {0x80}}, 0x0) 17:30:38 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 17:30:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x20100, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:38 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c}, 0x1c) 17:30:38 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xd4) open$dir(&(0x7f0000000140)='./file0\x00', 0xc0000, 0x0) 17:30:38 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 17:30:38 executing program 1: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000), 0x4) 17:30:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 17:30:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, &(0x7f0000000080)=""/52, 0x34, 0x0, 0x0, 0x0) 17:30:38 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f0000000000), 0x4) 17:30:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 17:30:38 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0xc0000, 0x0) 17:30:39 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000440)=@in6={0x1c, 0x1c}, 0x1c) 17:30:39 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfffffe55, 0x0, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c) 17:30:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 17:30:39 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 17:30:39 executing program 5: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x5, 0x0, &(0x7f0000000180)) 17:30:39 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000100)={0x0, 0xfffffff9}, 0x8) 17:30:39 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x41, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) 17:30:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 17:30:39 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 17:30:39 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) 17:30:40 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:40 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000440)=@in6={0x1c, 0x1c}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000040)) 17:30:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="79cc4aa27dee9f82786d44dbecb3e839666162e466", 0x15, 0x4, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:30:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 17:30:40 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:30:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xab, 0x4, 0x0, 0x0) 17:30:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x81, &(0x7f0000000440)=ANY=[], 0xa) 17:30:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17:30:40 executing program 1: getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r0) 17:30:40 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x50, &(0x7f0000000000)={0x0, {{0xf, 0x1c, 0x2}}}, 0x88) 17:30:40 executing program 5: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000000)={0x0, {{0x10, 0x2}}}, 0x90) 17:30:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 17:30:41 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, 0x0, 0x0) 17:30:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 17:30:41 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x8008, &(0x7f0000000000)=0x10000008, 0x47) 17:30:41 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000001180)={0x1c, 0x1c}, 0x1c) 17:30:41 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800) 17:30:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 17:30:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 17:30:41 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0xd4) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/103, 0x67) 17:30:41 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) 17:30:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 17:30:42 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:42 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x80, 0x1c}, 0x1c) 17:30:42 executing program 1: r0 = socket(0x2, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000040)={@loopback}, 0xc) 17:30:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 17:30:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 17:30:42 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3, 0x4) 17:30:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe}, 0x0) 17:30:42 executing program 5: connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000000)='|', 0x1, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:42 executing program 1: setgroups(0x29, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) 17:30:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 17:30:42 executing program 5: clock_gettime(0xe3d90624b9966df7, 0x0) 17:30:42 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:42 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) 17:30:42 executing program 0: getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000780)) 17:30:42 executing program 1: getresgid(0x0, 0x0, &(0x7f0000000500)) 17:30:42 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x0, 0x2}, 0x1c) 17:30:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 17:30:43 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 17:30:43 executing program 4: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xddde44ebe43c2132, 0xffffffffffffffff, 0x0) 17:30:43 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x1}, 0x1c) 17:30:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x8006, &(0x7f0000000080), &(0x7f0000000380)=0x8) 17:30:43 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:43 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18e}, 0x0) 17:30:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:43 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 17:30:43 executing program 1: r0 = socket(0x2, 0x3, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) 17:30:43 executing program 0: pipe2(0x0, 0x180006) 17:30:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 17:30:44 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x1c, 0x1c}, 0x1c) 17:30:44 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000000000)="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", 0xfbd, 0x0, &(0x7f0000001000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:44 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) listen(0xffffffffffffffff, 0x0) 17:30:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 17:30:44 executing program 0: msgget(0x2, 0x5d930bc12cb106e8) 17:30:44 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:44 executing program 1: getsockopt$inet_mreqsrc(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 17:30:44 executing program 5: r0 = socket(0x2, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000001640)="c3", 0x1, 0x0, &(0x7f0000001680)={0x1c, 0x1c, 0x1}, 0x1c) 17:30:44 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c) connect(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 17:30:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 17:30:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='H', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 17:30:45 executing program 0: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:30:45 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 17:30:45 executing program 5: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xc, 0x0, 0x0) 17:30:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 17:30:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) 17:30:45 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:45 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0xd, &(0x7f0000000180)=@un=@file={0xa}, 0xa) 17:30:45 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x7f, 0x4) 17:30:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 17:30:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="02a088d79fbfe601f81507e9ab18469671808aa53a87f3a35d2560b42873ca16366e49f7f22697e286a958cf66ec55dfcba4309e878baa62ccf48ac0fa7b49e7a0324f772689ba2825217a00ddbd8325dccc543fea6255eb30b1017ae7967db88f3286929023f3c4fcec25a7b1e3f1195082c18d751c17e938742fc1557f00442987b30dbdb4f89c96ba4ce1dae523415fd6733c429212cf7bba1321c6778409cb1d877082115cc60c251a24aaf7c8f6b8ea3b8a079abffcf70d516a2644092a8fd774d3fce019ebecc334538a0517a7ac60e94f89ebf049e88215edfd5d5db27559e5858fcd2e2a", 0xe8}, {&(0x7f0000000380)="bbecc79de2473d570240722a6d2c6e114b10c7a99889eb099c15c42990f9cf1188235b00b336a69655133ce9e4b3fc863e9b5586611ba1d359a3144cb0d5399187e19ff699ede32266974e75eda8e8f86423948af9ba99bbec6c2a7465a3d64279fae9bbebd147ce1914578bf0350888bcf8ae", 0x73}, {&(0x7f00000005c0)="729c13e0d6691caf6bc5d95c0e5613bf05020ae69c825494f368aa4d7ca32f8abd927ffac4400c6c133bd3c695f4a9c3d27536b086d2130c9b598994b07292e0eb46aed4877fc5d7e6c1bdb6e3b5710430d7471327a1b8d3", 0x58}, {&(0x7f0000000900)}], 0x4}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x8) 17:30:45 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x149edaa1d0026eff) 17:30:46 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000000)='|', 0x1, 0x0, &(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 17:30:46 executing program 4: mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 17:30:46 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 17:30:46 executing program 0: socket(0x2, 0x3, 0x5f) 17:30:46 executing program 4: semop(0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9) 17:30:46 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 17:30:46 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000440)="0f", 0x1, 0x0, &(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:46 executing program 5: r0 = socket(0x2, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 17:30:46 executing program 4: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000), 0x0) 17:30:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$inet(r0, 0x0, &(0x7f0000000240)) 17:30:46 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x100, &(0x7f00000000c0), 0x4) 17:30:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 17:30:47 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x200, 0x0, &(0x7f00000010c0)) 17:30:47 executing program 5: r0 = socket(0x2, 0x3, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 17:30:47 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000000000)="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", 0xfc4, 0x0, &(0x7f0000001000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8e01}, 0x0) 17:30:47 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:47 executing program 1: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000000)={0x3}, &(0x7f00000002c0)=0xffffffffffffff82) 17:30:47 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000380)="394a39dab228227d5fea0ee2054dded30dbaebd6ee5c309fe18de266b010e2494418fd24f059e4342a371f81c24b3c00e1e1d73ee021b8e68f94fbcbd884c2d21c1017532f913eba5e7c93fe3ea13c04aacf2825237c53342feea9f765966bb06e58e75acf4b5bfd5e953297476e16c3d2eb911adb6286507051a38bab3ade87b3dbbf9c1f3497860fd9522248b601cbbb6a574b72be4f8398cc5143256ef4e9c502c5982929e22def8c4715d8f738d51e04eb8ac5c76455b179ae8b1b45820577932835d0f2ba31c72d572a860e0c1ad6204d3c9bee173f8e3cba253b78029c87", 0xe1, 0x20104, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c) 17:30:47 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x548300, 0x0) 17:30:47 executing program 4: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x4a, 0x0, 0x28) 17:30:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 17:30:47 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) 17:30:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 17:30:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 17:30:47 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x400, 0x0, &(0x7f0000000080)) 17:30:48 executing program 1: getsockopt$inet_mreqsrc(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x10, 0x2}, 0x10) 17:30:48 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x2}, 0x10) 17:30:48 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 17:30:48 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x181, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 17:30:48 executing program 5: r0 = socket(0x2, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:30:48 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 17:30:48 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 17:30:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 17:30:48 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20104, &(0x7f0000000480)={0x1c, 0x1c, 0x3}, 0x1c) 17:30:48 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 17:30:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x184, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 17:30:49 executing program 0: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 17:30:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 17:30:49 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:49 executing program 1: open(0x0, 0x400, 0x0) 17:30:49 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0) 17:30:49 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x14, 0x0, &(0x7f0000000040)) 17:30:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 17:30:49 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 17:30:49 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f0000000000)="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", 0xfec, 0x0, &(0x7f0000001000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:30:49 executing program 1: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_int(r0, 0x0, 0x42, 0x0, &(0x7f0000000080)) 17:30:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 17:30:49 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 17:30:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 17:30:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="ed", 0x1, 0x20101, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 17:30:50 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:50 executing program 4: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4a, 0x0, 0x0) 17:30:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x8) 17:30:50 executing program 1: r0 = socket(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/238, 0xee}, 0xc6) 17:30:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:30:50 executing program 0: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 17:30:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), 0x4) 17:30:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000080), 0x4) 17:30:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 17:30:50 executing program 4: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0xe, 0x0, 0x0) 17:30:51 executing program 5: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x4, 0x0, 0x0) 17:30:51 executing program 1: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x4, 0x0, 0x0) 17:30:51 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 17:30:51 executing program 4: r0 = socket(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@in={0x2, 0x3}, 0xc, 0x0}, 0x401) 17:30:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:30:51 executing program 0: r0 = socket(0x2, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=ANY=[], 0xa) 17:30:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) getsockname$unix(r0, 0x0, 0x0) 17:30:51 executing program 4: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 17:30:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 17:30:51 executing program 5: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x20, 0x4) 17:30:52 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0, 0x40}], 0x1, 0x5) 17:30:52 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:30:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 17:30:52 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:52 executing program 0: open(&(0x7f0000000400)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 17:30:52 executing program 5: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 17:30:52 executing program 4: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1005, 0x0, 0x0) 17:30:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 17:30:52 executing program 1: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1008, 0x0, 0x0) 17:30:52 executing program 5: r0 = open(&(0x7f0000000400)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 17:30:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 17:30:52 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedb) 17:30:52 executing program 1: r0 = socket(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0x18, 0x3}, 0xc, 0x0}, 0x0) 17:30:52 executing program 5: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) 17:30:53 executing program 0: r0 = socket(0x1e, 0x3, 0x0) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x10}], 0x10}, 0x0) 17:30:53 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c", 0x18}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:53 executing program 4: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1002, 0x0, 0x0) 17:30:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 17:30:53 executing program 5: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x2000, 0x0, 0x0) 17:30:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) poll(&(0x7f00000000c0)=[{r1, 0x3}], 0x1, 0x0) 17:30:53 executing program 0: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 17:30:53 executing program 4: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 17:30:53 executing program 5: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1006, 0x0, 0x0) 17:30:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 17:30:53 executing program 1: r0 = socket(0x18, 0x3, 0x0) sendmsg(r0, &(0x7f0000001b00)={&(0x7f0000000000)=@in6={0x18, 0x3}, 0xc, 0x0}, 0xe) 17:30:53 executing program 4: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x10, 0x0, 0x0) 17:30:53 executing program 5: r0 = socket(0x1e, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, &(0x7f00000004c0)=[{0x10}], 0x10}, 0x0) 17:30:54 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c", 0x18}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:54 executing program 1: open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0\x00') 17:30:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 17:30:54 executing program 4: r0 = socket(0x18, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x1}, 0xc) 17:30:54 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 17:30:54 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 17:30:54 executing program 1: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1025, 0x0, 0x0) 17:30:54 executing program 4: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 17:30:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8e010000}, 0x0) 17:30:54 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) 17:30:54 executing program 0: r0 = socket(0x18, 0x3, 0x0) getsockname$unix(r0, &(0x7f0000001100)=ANY=[], &(0x7f0000001040)=0x1002) 17:30:54 executing program 1: r0 = socket(0x2, 0x3, 0x0) close(r0) 17:30:55 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c", 0x18}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:55 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 17:30:55 executing program 5: r0 = socket(0x18, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x61) 17:30:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 17:30:55 executing program 0: r0 = socket(0x2, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000080)=@file={0x0, './file1\x00'}, 0xa, 0x0}, 0x0) 17:30:55 executing program 1: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x10, 0x0, 0x0) 17:30:55 executing program 4: r0 = socket(0x18, 0x3, 0x0) bind$unix(r0, 0x0, 0xa) 17:30:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) 17:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x368, 0x368, 0x280, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'geneve1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 17:30:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 17:30:55 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000080)=@file={0x0, './file1\x00'}, 0xa, 0x0}, 0x0) 17:30:55 executing program 1: setuid(0xffffffffffffffff) socket(0x1e, 0x3, 0x0) 17:30:56 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9", 0x24}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:56 executing program 5: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 17:30:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 17:30:56 executing program 4: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) 17:30:56 executing program 0: r0 = socket(0x2, 0x3, 0x0) close(r0) close(r0) 17:30:56 executing program 1: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1005, 0x0, 0x0) 17:30:56 executing program 1: r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in6={0x18, 0x3}, 0xc) 17:30:56 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)="8aefad24cab599988ca66bb1f88c3cd68623cee70a3cbe4915abfeca5557796b58a5498cee139ebab68a50e298ebddeaf9893dae454f6df27e2dbb605e5a4f24685ed7b855f1fce6c53504f1edddc83244bc504c745225416d91c85d82314cc13667b757518decf4c592f742754e9fd585ee6711d5132d1e4fbd7e25454348eb1bab8489e4f9eab81be476946f499b7912a1577008", 0x95}, {&(0x7f0000000200)="6bb87ef05d9142dc2f48b995bdbde2a967f7328009a29ed75c6a001b4ae24daded8f8e1132275fd4d48e6f38d61cf8bb24319668fc64fa061df472f70e0240b1a4149582a9a128e83f4790945d492e25dd03757bd484bd7587af6c139311b73c5b2b7cd09c904df38100c1a9ab0cc60ba9f5ee49dd75e0a34a4f896d0679e6550d", 0x81}, {&(0x7f0000000300)="e62038bd7f7af2f92ea16dcfdd468faf9a7b4b9d5bd2c021feea5f14be70b4988003", 0x22}], 0x3) 17:30:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 17:30:56 executing program 5: r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040), 0x4) 17:30:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) 17:30:56 executing program 5: r0 = socket(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[], 0xa, 0x0, 0x0, 0x0, 0x130}, 0x0) 17:30:57 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9", 0x24}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 17:30:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000000), 0x4) 17:30:57 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000006c0)=[{0x0}], 0x1) 17:30:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0) 17:30:57 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) read(r0, 0x0, 0x0) fsync(r0) 17:30:57 executing program 1: r0 = socket(0x1e, 0x3, 0x0) getpeername(r0, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)=0x3d) 17:30:57 executing program 4: recvfrom$unix(0xffffffffffffff9c, 0x0, 0x26, 0x0, 0x0, 0xfffffe51) 17:30:57 executing program 5: r0 = socket(0x1e, 0x3, 0x0) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 17:30:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 17:30:57 executing program 0: r0 = socket(0x18, 0x3, 0x0) recvmsg(r0, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/238, 0xee}, 0x0) 17:30:57 executing program 4: r0 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1004, 0x0, 0x0) 17:30:58 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9", 0x24}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0xfffffffffffffed2) 17:30:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 17:30:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 17:30:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) open(&(0x7f0000000400)='./file0\x00', 0x200, 0x0) fcntl$dupfd(r0, 0xa, r1) 17:30:58 executing program 0: r0 = socket(0x18, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000001440)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/244, 0xf4}, {&(0x7f0000001240)=""/231, 0xfffffffffffffe31}, {&(0x7f0000001340)=""/253, 0xfd}], 0x7, &(0x7f00000014c0)=""/90, 0x5a}, 0x0) 17:30:58 executing program 5: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1006, 0x0, 0x0) 17:30:58 executing program 4: mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) munmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 17:30:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 17:30:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x2) 17:30:58 executing program 5: r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 17:30:58 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000200)='k', 0x1}], 0x2) 17:30:58 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8", 0x2a}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="a52b847ee6e94ecf6bb1361ea360c2d5b13c297567dec4a59302f2cb1027e80bce9e8ca8a7fbd041a4ca436946ffebb6f4cf611e1d6788602bbd085829a1fa561d1291d010399d09f14aef08864cad8f57ce43cac4e3f018b1162a03782b15141edf91484042bb2853acd52226c4cc7c18eb1134", 0x74}, {&(0x7f0000000140)="a3751bc57678e8880ec55703d106726b6a403d2db109ff4c0b38659be7c33b347cd9afdc946395b6c6700bb7a6e46f00adacdedf31e7eb7f3ecb7c6c8093a00487c51f9f85caaab350811e1595b21fd3f6531b832d770fe5a3b1958cd6d87f29e2f5d52ff4cec8e3533174a2", 0x6c}, {&(0x7f0000001bc0)="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", 0xde1}], 0x3}, 0x0) 17:30:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5421, &(0x7f0000000040)={'\x00', @broadcast}) 17:30:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x3) 17:30:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2002) 17:30:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{0x0, 0x2}, {&(0x7f00000009c0)=""/48, 0x30}], 0x2}, 0x0) 17:30:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x0) 17:30:59 executing program 5: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 17:30:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4) 17:30:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x1, 0x0, 0x4, 0x2, 0xc3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='\x03\x00') 17:30:59 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:30:59 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 17:30:59 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8", 0x2a}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:30:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x5) 17:30:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x5, 0x4000}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/174, 0x2c, 0xae, 0x1}, 0x20) 17:30:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="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", 0x1000}, {0x0}, {&(0x7f00000001c0)="ff", 0x1}], 0x3, &(0x7f00000015c0)=[{0x10}], 0x10}, 0x40) 17:30:59 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 17:30:59 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 17:30:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:30:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x6) 17:31:00 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 17:31:00 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40200, 0x0) 17:31:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f000000f4c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/48, 0x30}], 0x1}, 0x0) 17:31:00 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x1cf02, 0x0) 17:31:00 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8", 0x2a}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x7) 17:31:00 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 17:31:00 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xaf\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x88\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:31:00 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0/file0/file0\x00'}, 0x10) 17:31:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8) 17:31:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0x2265}]}]}}, &(0x7f00000002c0)=""/152, 0x32, 0x98, 0x1}, 0x20) 17:31:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x9) 17:31:01 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x513d00, 0x0) 17:31:01 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000140)=""/152, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:31:01 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f00000002c0)=""/174, 0x26, 0xae, 0x1}, 0x20) 17:31:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xe) 17:31:01 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43", 0x2d}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:01 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f00000002c0)=""/174, 0x1a, 0xae, 0x1}, 0x20) 17:31:01 executing program 5: socket$kcm(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f0000000400)=@phonet={0x23, 0x0, 0x0, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}, 0x80, 0x0}, 0x0) 17:31:01 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:31:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf) 17:31:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2002) 17:31:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) 17:31:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 17:31:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x60) 17:31:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x0) 17:31:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f000000f4c0)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/48, 0x30}], 0x1}, 0x0) [ 621.743953][T21185] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 17:31:02 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) close(r0) 17:31:02 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43", 0x2d}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf0) 17:31:02 executing program 1: perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:31:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)=ANY=[], 0x1090}, 0x0) 17:31:02 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x80000000}, 0x8) 17:31:02 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x2c, 0x0, 0xc, 0xc, 0x8, [@enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/174, 0x2c, 0xae, 0x1}, 0x20) 17:31:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/174, 0x26, 0xae, 0x8}, 0x20) 17:31:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x18e) 17:31:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)={0xa, 0x157, 0x9, 0x36}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 17:31:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0xdfa65d2fa91ac80, 0x0}, 0x12142) 17:31:02 executing program 4: perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:31:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x300) 17:31:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xca040, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000040)={'\x00', @broadcast}) 17:31:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24800000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 17:31:03 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/103, 0x67}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x13) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x2, 0x70, 0x9, 0xdc, 0x2, 0xfb, 0x0, 0x4, 0x1, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5008, 0x1, @perf_config_ext={0x27a5, 0x401}, 0x8, 0xffffffff, 0x100, 0x2, 0x10000000, 0x8, 0x800}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) 17:31:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x500) 17:31:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43", 0x2d}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/174, 0x2a, 0xae, 0x1}, 0x20) 17:31:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, 0x0) 17:31:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x600) 17:31:03 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 17:31:03 executing program 5: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x5, 0x940) 17:31:03 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x2461}, [@mbim_extended={0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}}]}}, 0x0) 17:31:03 executing program 4: syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x0, 0x940) 17:31:04 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b4", 0x2e}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x700) 17:31:04 executing program 0: syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x5, 0x0) 17:31:04 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x42}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 17:31:04 executing program 5: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x400000) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000000c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 624.067570][ T9807] usb 2-1: new high-speed USB device number 14 using dummy_hcd 17:31:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x900) 17:31:04 executing program 0: syz_open_dev$evdev(&(0x7f0000001680)='/dev/input/event#\x00', 0x0, 0x1) 17:31:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xe00) [ 624.297137][T16816] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 624.316509][ T9351] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 624.535842][T16816] usb 5-1: Using ep0 maxpacket: 16 17:31:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf00) [ 624.587131][ T9807] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 624.608092][ T9807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:31:04 executing program 0: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 624.642356][ T9807] usb 2-1: Product: syz [ 624.656445][T16816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.676751][ T9807] usb 2-1: Manufacturer: syz [ 624.691711][T16816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.710841][ T9807] usb 2-1: SerialNumber: syz [ 624.768879][T16816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.798363][ T9807] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 624.834281][T16816] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 624.849464][ T9351] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 624.878813][ T9351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.888257][T16816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 624.899506][ T9351] usb 6-1: Product: syz [ 624.904029][ T9351] usb 6-1: Manufacturer: syz [ 624.911565][ T9351] usb 6-1: SerialNumber: syz [ 624.928090][T16816] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 624.986810][ T9351] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 625.196415][ T3849] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 625.196475][T16816] usb 5-1: string descriptor 0 read error: -22 [ 625.225190][T16816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.235399][T16816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.525833][T16816] cdc_ncm 5-1:1.0: bind() failure [ 625.534654][T16816] cdc_ncm 5-1:1.1: bind() failure [ 625.558690][T16816] usb 5-1: USB disconnect, device number 12 [ 625.585868][T16817] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 625.597578][ T9351] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 625.766495][ T3849] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 625.793791][T21257] udc-core: couldn't find an available UDC or it's busy [ 625.794922][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.815479][T21257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 625.887191][ T3849] usb 1-1: Product: syz [ 625.891085][ T9037] usb 2-1: USB disconnect, device number 14 [ 625.911426][ T3849] usb 1-1: Manufacturer: syz [ 625.926110][ T3849] usb 1-1: SerialNumber: syz [ 625.955971][ T8688] usb 6-1: USB disconnect, device number 16 [ 626.046827][ T3849] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 626.275641][T16816] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 626.515721][T16816] usb 5-1: Using ep0 maxpacket: 16 [ 626.635945][T16816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.646976][T16816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.658732][T16816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.669647][T16816] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.680486][T16816] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 626.690879][T16816] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 626.702220][ T9351] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 626.709378][T16817] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 626.717124][T16817] ath9k_htc: Failed to initialize the device [ 626.724475][ T9037] usb 2-1: ath9k_htc: USB layer deinitialized [ 626.736827][ T3849] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.745718][ T9351] ath9k_htc: Failed to initialize the device [ 626.752006][ T8688] usb 6-1: ath9k_htc: USB layer deinitialized [ 626.950336][T16490] usb 1-1: USB disconnect, device number 18 [ 626.956352][T16816] usb 5-1: string descriptor 0 read error: -22 [ 626.962631][T16816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 17:31:07 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:31:07 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b4", 0x2e}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:07 executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000001940)='/dev/usb/hiddev#\x00', 0x0, 0x1814c0) 17:31:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x3f00) 17:31:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x5, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) [ 627.010524][T16816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.095951][T16816] usb 5-1: can't set config #1, error -71 [ 627.140073][T16816] usb 5-1: USB disconnect, device number 13 17:31:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x6000) 17:31:07 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000b80)='/dev/input/event#\x00', 0x0, 0x0) 17:31:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8e01) 17:31:07 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x8) 17:31:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000016c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) [ 627.638393][ T9037] usb 2-1: new high-speed USB device number 15 using dummy_hcd 17:31:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf000) 17:31:08 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}}) [ 627.815945][ T3849] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 627.822945][ T3849] ath9k_htc: Failed to initialize the device [ 627.846055][T16490] usb 1-1: ath9k_htc: USB layer deinitialized [ 627.895833][ T9037] usb 2-1: Using ep0 maxpacket: 16 [ 628.016425][ T9037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.035169][ T9037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.055354][ T9037] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.071487][ T9037] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.088611][ T9037] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 628.100516][ T9037] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 628.205744][ T9785] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 628.266446][ T9037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.280344][ T9037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.299497][ T9037] usb 2-1: Product: syz [ 628.310150][ T9037] usb 2-1: Manufacturer: syz [ 628.321428][ T9037] usb 2-1: SerialNumber: syz [ 628.465686][ T9785] usb 5-1: Using ep0 maxpacket: 16 [ 628.625838][ T9037] cdc_ncm 2-1:1.0: bind() failure [ 628.645735][ T9037] cdc_ncm 2-1:1.1: bind() failure [ 628.665742][ T9037] usb 2-1: USB disconnect, device number 15 [ 628.685699][ T9785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.726330][ T9785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.765943][ T9785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.815766][ T9785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.846558][ T9785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 628.871414][ T9785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 629.075928][ T9785] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.085024][ T9785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.093306][ T9785] usb 5-1: Product: syz [ 629.098096][ T9785] usb 5-1: Manufacturer: syz [ 629.103064][ T9785] usb 5-1: SerialNumber: syz [ 629.375633][ T9037] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 629.395851][ T9785] cdc_ncm 5-1:1.0: bind() failure [ 629.404639][ T9785] cdc_ncm 5-1:1.1: bind() failure [ 629.428938][ T9785] usb 5-1: USB disconnect, device number 14 [ 629.615595][ T9037] usb 2-1: Using ep0 maxpacket: 16 [ 629.735722][ T9037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.746771][ T9037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.759078][ T9037] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 629.769453][ T9037] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 629.779876][ T9037] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 629.790876][ T9037] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 629.955713][ T9037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.964903][ T9037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.973331][ T9037] usb 2-1: Product: syz [ 629.979007][ T9037] usb 2-1: Manufacturer: syz [ 629.983718][ T9037] usb 2-1: SerialNumber: syz 17:31:10 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b4", 0x2e}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:10 executing program 5: syz_open_dev$evdev(&(0x7f0000000740)='/dev/input/event#\x00', 0x97b, 0x200000) 17:31:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x30000) 17:31:10 executing program 1: syz_open_dev$evdev(&(0x7f0000000d40)='/dev/input/event#\x00', 0x0, 0x0) 17:31:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x1}}}}}}}]}}, 0x0) [ 630.155642][ T9785] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 630.216231][ T9037] cdc_ncm 2-1:1.0: bind() failure [ 630.263770][ T9037] cdc_ncm 2-1:1.1: bind() failure 17:31:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x754000) [ 630.314518][ T9037] usb 2-1: USB disconnect, device number 16 17:31:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x34000) [ 630.405859][ T9785] usb 5-1: Using ep0 maxpacket: 16 17:31:10 executing program 1: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0xf485a35f5d02e853, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = memfd_create(&(0x7f00000001c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xe0z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137/J\xcb\x8a\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x203) ioprio_get$uid(0x0, 0x0) write(r0, &(0x7f0000000000)="16", 0x1) fcntl$addseals(r0, 0x409, 0x8) 17:31:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003be) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) [ 630.606598][ T9785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:31:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x400300) [ 630.648675][ T9785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.702636][ T9785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 630.715838][T16490] usb 1-1: new high-speed USB device number 19 using dummy_hcd 17:31:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) [ 630.748834][ T9785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 630.783548][ T9785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 630.818204][ T9785] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:31:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xe0z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137/J\xcb\x8a\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x203) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r2, 0x309, 0x0, 0x0, {0x2f}}, 0x14}, 0x1, 0xa0028000}, 0x0) write(r0, 0x0, 0x0) [ 630.965775][T16490] usb 1-1: Using ep0 maxpacket: 16 [ 630.986389][ T9785] usb 5-1: string descriptor 0 read error: -71 [ 630.994392][ T9785] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.044512][ T9785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.076888][ T35] audit: type=1800 audit(1608831071.304:41): pid=21474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16374 res=0 errno=0 17:31:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 17:31:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf0ffff) [ 631.116421][T16490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.141409][T16490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.154333][ T9785] usb 5-1: can't set config #1, error -71 [ 631.173933][ T9785] usb 5-1: USB disconnect, device number 15 [ 631.194066][T16490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 17:31:11 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3ed, 0x4}, 0x10}}, 0x0) [ 631.223148][T16490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 631.240200][T16490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 631.435722][T16490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.456830][T16490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.464110][T21495] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 631.464110][T21495] program syz-executor.2 not setting count and/or reply_len properly [ 631.524965][T16490] usb 1-1: Product: syz [ 631.541037][T16490] usb 1-1: Manufacturer: syz [ 631.565731][T16490] usb 1-1: SerialNumber: syz [ 631.875758][T16490] cdc_ncm 1-1:1.0: bind() failure [ 631.904237][T16490] cdc_ncm 1-1:1.1: bind() failure [ 631.939278][T16490] usb 1-1: USB disconnect, device number 19 [ 632.625858][T16490] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 632.895584][T16490] usb 1-1: Using ep0 maxpacket: 16 [ 633.045750][T16490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.057454][T16490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.070066][T16490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 633.080567][T16490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 633.091053][T16490] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:31:13 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) 17:31:13 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_gettime(0x3, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x7ffffffff000}}, 0x20, 0x0, 0x0) 17:31:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x1000000) 17:31:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) 17:31:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) 17:31:13 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 633.336263][T16490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.361825][T16490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.408393][T16490] usb 1-1: Product: syz [ 633.435459][T16490] usb 1-1: Manufacturer: syz 17:31:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) openat$dir(0xffffffffffffff9c, 0x0, 0x410481, 0x0) [ 633.475988][T16490] usb 1-1: can't set config #1, error -71 [ 633.503511][T16490] usb 1-1: USB disconnect, device number 20 17:31:13 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) sendmsg$sock(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}, 0x804) [ 633.518162][T21545] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 633.518162][T21545] program syz-executor.2 not setting count and/or reply_len properly 17:31:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x2000000) 17:31:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x5d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @local, @remote}}}], 0x20}, 0x0) 17:31:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:31:14 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000800)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 17:31:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:31:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x3000000) 17:31:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) openat$dir(0xffffffffffffff9c, 0x0, 0x410481, 0x0) 17:31:14 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 17:31:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000018c0)={&(0x7f0000000080)={0x2, 0x4e22, @private}, 0x10, 0x0}, 0x0) 17:31:14 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) 17:31:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x9, 0xff01, 0x1ff}, 0x40) 17:31:15 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 17:31:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x5000000) [ 634.940734][T21593] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 634.940734][T21593] program syz-executor.2 not setting count and/or reply_len properly 17:31:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) openat$dir(0xffffffffffffff9c, 0x0, 0x410481, 0x0) 17:31:15 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 17:31:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x9, 0x200, 0x1ff}, 0x40) 17:31:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x6000000) 17:31:15 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01004a"], &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20) 17:31:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x7000000) 17:31:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) openat$dir(0xffffffffffffff9c, 0x0, 0x410481, 0x0) [ 635.765419][T21614] BPF:No data [ 635.790072][T21616] BPF:No data 17:31:16 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0xfe0f}}) 17:31:16 executing program 1: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r4], 0x24}}, 0x0) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="260000002e00033e"], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x84ffde, 0x0) 17:31:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000000) 17:31:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x1a, 0x0, &(0x7f0000000040)) [ 636.378678][T21633] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:16 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001340)=[{0x0}, {&(0x7f00000001c0)="dd", 0x1}], 0x2}}], 0x1, 0x0) 17:31:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000000040)) 17:31:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x9000000) [ 636.499879][T21637] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 636.499879][T21637] program syz-executor.2 not setting count and/or reply_len properly 17:31:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xf3, 0x4) 17:31:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xe000000) 17:31:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x12000) 17:31:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) 17:31:17 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000029c0)=""/4100, 0x1004}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f0000003a00)=""/4067, 0xfe3}], 0x3}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="86991aa80706"], 0x14}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x860, 0x0, 0x4b6ae4f95a5de35b) 17:31:17 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a3afa4", 0x38, 0x3a, 0x0, @empty, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a94cf5", 0x0, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], "3088d2652683fccd"}}}}}}}, 0x0) 17:31:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf000000) 17:31:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000008085"], &(0x7f0000000240)='GPL\x00', 0x0, 0xff000000, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:31:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x1bdd307, 0x0) 17:31:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000013c0)={'batadv_slave_0\x00'}) [ 637.359452][T21670] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 637.390439][T21670] netlink: 42791 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:17 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020002000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000008e0a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x0, 0x6000000000000000, 0x10c, 0x0, &(0x7f00000008c0)="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"}, 0x48) unshare(0x6c060000) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000c917982f733be1894594b6cdae96e4860e6be44f65bf243395cd4863c065e52710fb6548ac58f2bde08af0e2e599d835d88c7a3cace4fe7bde9792953437cb7eb47b00fc67f463e090c5c17760a09532b0a7383b598e481a81750ee1ff883e81b6", @ANYBLOB="080027bd7000fddbdf2504000000080002000300000008000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0xf9ea}, 0x100) 17:31:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x3f000000) [ 637.430536][T21670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 637.462560][T21673] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 637.462560][T21673] program syz-executor.2 not setting count and/or reply_len properly [ 637.539251][T21676] netlink: 30955 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.665298][T21683] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 17:31:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 17:31:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private}, {0x2, 0x0, @loopback}, 0x145}) 17:31:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x60000000) [ 637.789736][T21685] IPVS: ftp: loaded support on port[0] = 21 17:31:18 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) listen(r0, 0x0) 17:31:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x1600bd7b, 0x0, &(0x7f0000000040)) 17:31:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8e010000) [ 638.433810][T21685] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 638.578759][T21721] IPVS: ftp: loaded support on port[0] = 21 17:31:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) [ 638.783351][T21735] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 638.783351][T21735] program syz-executor.2 not setting count and/or reply_len properly 17:31:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=ANY=[@ANYBLOB=' ']}) 17:31:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'vlan0\x00'}) 17:31:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020002000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000008e0a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x0, 0x6000000000000000, 0x10c, 0x0, &(0x7f00000008c0)="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"}, 0x48) unshare(0x6c060000) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000c917982f733be1894594b6cdae96e4860e6be44f65bf243395cd4863c065e52710fb6548ac58f2bde08af0e2e599d835d88c7a3cace4fe7bde9792953437cb7eb47b00fc67f463e090c5c17760a09532b0a7383b598e481a81750ee1ff883e81b6", @ANYBLOB="080027bd7000fddbdf2504000000080002000300000008000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0xf9ea}, 0x100) 17:31:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x9, 0x200, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x1e]}, 0x40) 17:31:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x9effffff) 17:31:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003a80)=[{{&(0x7f0000000800)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x4c}, @ssrr={0x89, 0x3, 0xbb}]}}}], 0x18}}], 0x1, 0x0) 17:31:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)=""/157, &(0x7f00000000c0)=0x9d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x40, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xf4, 0x3f, 0x1, 0x10, @loopback, @private0, 0x20, 0x80, 0x3, 0x116}}) bind$packet(r2, &(0x7f0000000400)={0x11, 0x9, r3, 0x1, 0x9, 0x6, @random}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x3, 0xcf, [], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/207}, &(0x7f0000000380)=0x78) [ 640.850400][T21778] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 640.850400][T21778] program syz-executor.2 not setting count and/or reply_len properly 17:31:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x3ff, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xe, 0xfffffefffbfbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 17:31:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf0ffffff) 17:31:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='GPL\x00', 0x4, 0x9f, &(0x7f0000000080)=""/159, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_genetlink_get_family_id$team(0x0) [ 641.094776][T21783] IPVS: ftp: loaded support on port[0] = 21 [ 641.449666][T21806] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:31:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ip={@remote, @private, 0x0, 0x0, '\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 17:31:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xfffff000) 17:31:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 17:31:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020002000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000008e0a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x0, 0x6000000000000000, 0x10c, 0x0, &(0x7f00000008c0)="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"}, 0x48) unshare(0x6c060000) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000c917982f733be1894594b6cdae96e4860e6be44f65bf243395cd4863c065e52710fb6548ac58f2bde08af0e2e599d835d88c7a3cace4fe7bde9792953437cb7eb47b00fc67f463e090c5c17760a09532b0a7383b598e481a81750ee1ff883e81b6", @ANYBLOB="080027bd7000fddbdf2504000000080002000300000008000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0xf9ea}, 0x100) 17:31:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r0, 0x0, 0x0, 0x80400) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {}, 0x40}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x10, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000008085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:31:23 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x5eec, 0x0) 17:31:23 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xffffff7f) 17:31:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, &(0x7f00000002c0)=""/247, 0x32, 0xf7, 0x1}, 0x20) [ 643.004035][T21845] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 643.004035][T21845] program syz-executor.2 not setting count and/or reply_len properly 17:31:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) [ 643.083288][T21849] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.5'. 17:31:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xffffff9e) [ 643.263797][T21852] IPVS: ftp: loaded support on port[0] = 21 17:31:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @loopback}, @generic={0x0, "508b0abc1cace6f396da0be5da7b"}, @sco={0x1f, @none}}) 17:31:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000680)) 17:31:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xfffffff0) 17:31:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {0x2}, [@SEG6_ATTR_DSTLEN]}, 0x38}}, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 643.981199][T21889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 644.038132][T21890] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020002000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000008e0a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x0, 0x6000000000000000, 0x10c, 0x0, &(0x7f00000008c0)="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"}, 0x48) unshare(0x6c060000) socket$inet6(0x10, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000c917982f733be1894594b6cdae96e4860e6be44f65bf243395cd4863c065e52710fb6548ac58f2bde08af0e2e599d835d88c7a3cace4fe7bde9792953437cb7eb47b00fc67f463e090c5c17760a09532b0a7383b598e481a81750ee1ff883e81b6", @ANYBLOB="080027bd7000fddbdf2504000000080002000300000008000100ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0xf9ea}, 0x100) 17:31:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x5eec, 0x0) 17:31:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x3000000000000) 17:31:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x3, 0x4) 17:31:25 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x3}, 0x40) 17:31:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @llc={0x1a, 0x301, 0x1f, 0x6, 0x81, 0x26, @random="f3bfebbbda89"}, @ethernet={0x1, @local}, @xdp={0x2c, 0x1, 0x0, 0x11}, 0x3720, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='ip6tnl0\x00', 0xff, 0x0, 0x8}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x90, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x35}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x60}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x8c}}, 0x8000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x88, 0x0, 0x0, 0x7) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r7, 0x4, 0x3f, 0x3, 0x1f, 0x1, @mcast2, @dev={0xfe, 0x80, [], 0x2c}, 0x700, 0x10, 0x20, 0x9}}) 17:31:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40030000000000) [ 645.216051][T21907] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 645.216051][T21907] program syz-executor.2 not setting count and/or reply_len properly [ 645.239314][T21908] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.5'. [ 645.401699][T21912] IPVS: ftp: loaded support on port[0] = 21 17:31:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1}, 0x40) 17:31:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xf0ffffffffffff) 17:31:26 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000206000000000000000000000000000016000300686173683a6e65742c706f72742c6e65740000000500040000000000090002"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x10, 0x1}, @window, @window={0x3, 0x1f, 0x1}], 0x3) r0 = socket$inet6(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 17:31:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x5eec, 0x0) [ 646.213964][T21956] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 646.263928][T21956] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.364934][T21958] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 646.373736][T21961] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.5'. [ 646.388160][T21958] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x100000000000000) 17:31:27 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000006b00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000040)='{', 0x1}, {&(0x7f00000001c0)="dd", 0x1}, {&(0x7f0000000240)="e2", 0x1}], 0x3, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}, {{&(0x7f0000001400)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x8004) 17:31:27 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000206000000000000000000000000000016000300686173683a6e65742c706f72742c6e65740000000500040000000000090002"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x10, 0x1}, @window, @window={0x3, 0x1f, 0x1}], 0x3) r0 = socket$inet6(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 17:31:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x5eec, 0x0) [ 647.418054][T21979] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 647.426693][T21979] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.477237][T21981] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.5'. 17:31:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x200000000000000) [ 647.522295][T21983] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 647.522295][T21983] program syz-executor.2 not setting count and/or reply_len properly 17:31:27 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000206000000000000000000000000000016000300686173683a6e65742c706f72742c6e65740000000500040000000000090002"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x10, 0x1}, @window, @window={0x3, 0x1f, 0x1}], 0x3) r0 = socket$inet6(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 647.778316][T21990] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:31:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000680)) [ 647.831222][T21990] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x4020940d, 0x0) 17:31:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x300000000000000) 17:31:28 executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000206000000000000000000000000000016000300686173683a6e65742c706f72742c6e65740000000500040000000000090002"], 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x10, 0x1}, @window, @window={0x3, 0x1f, 0x1}], 0x3) r0 = socket$inet6(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 17:31:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r0, 0xffffffffffffffff) 17:31:28 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) [ 648.253777][T22005] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 17:31:28 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x400000000000000) [ 648.334319][T22005] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x227d, 0x0) 17:31:28 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x100000000}, &(0x7f0000000100)) 17:31:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000940)={'sit0\x00', 0x0}) 17:31:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x500000000000000) 17:31:28 executing program 0: bpf$MAP_CREATE(0x9, &(0x7f0000000000), 0x20000040) 17:31:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x32]}}}}]}) [ 648.670910][T22021] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 648.670910][T22021] program syz-executor.2 not setting count and/or reply_len properly 17:31:29 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x441, 0x0) [ 648.937945][T22031] tmpfs: Bad value for 'mpol' [ 648.963693][T22031] tmpfs: Bad value for 'mpol' 17:31:29 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) 17:31:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x600000000000000) 17:31:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x806}, 0x40) 17:31:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xfffff000) openat$vfio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000000)="ae88bf78241000005a90f57f07702aeff0f64ebbee07962c225c08000000000000f4c4b9202b1bdd2ac8bb8c43b460", 0x2f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17:31:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2282, 0x0) 17:31:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=@raw=[@alu={0x9}, @map], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xdd, &(0x7f0000000100)=""/221, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:31:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x700000000000000) 17:31:29 executing program 0: socket$inet6(0xa, 0x3, 0x8) 17:31:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 17:31:29 executing program 1: clock_gettime(0x5, &(0x7f0000000a40)) 17:31:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x800000000000000) 17:31:29 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000031401"], 0xd8}}, 0x0) 17:31:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404d3e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 649.775065][T22060] sg_write: data in/out 4096/1 bytes for SCSI command 0x20-- guessing data in; [ 649.775065][T22060] program syz-executor.2 not setting count and/or reply_len properly [ 649.911766][T22067] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.5'. 17:31:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x227b, 0x0) 17:31:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2289, 0x0) [ 649.965063][T22069] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 650.054082][T22070] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 650.296280][ T9785] ================================================================================ [ 650.306081][ T9785] UBSAN: shift-out-of-bounds in ./include/net/sch_generic.h:1193:7 [ 650.313996][ T9785] shift exponent 129 is too large for 32-bit type 'int' [ 650.321152][ T9785] CPU: 1 PID: 9785 Comm: kworker/1:4 Not tainted 5.10.0-syzkaller #0 [ 650.329386][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.339458][ T9785] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 650.345558][ T9785] Call Trace: [ 650.348893][ T9785] dump_stack+0x107/0x163 [ 650.353271][ T9785] ubsan_epilogue+0xb/0x5a [ 650.357727][ T9785] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 650.364522][ T9785] ? ktime_get+0x1bf/0x1e0 [ 650.368964][ T9785] ? llcp_sock_recvmsg.cold+0x6d/0xb2 [ 650.374365][ T9785] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 650.380106][ T9785] ? ktime_get+0x167/0x1e0 [ 650.384547][ T9785] cbq_dequeue.cold+0x186/0x18b [ 650.389438][ T9785] ? dev_watchdog+0xc60/0xc60 [ 650.394165][ T9785] __qdisc_run+0x1ab/0x1610 [ 650.398714][ T9785] __dev_queue_xmit+0x1abb/0x2ec0 [ 650.403780][ T9785] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 650.409096][ T9785] ? __ip6_finish_output+0x4be/0xb80 [ 650.414417][ T9785] ? mark_held_locks+0x9f/0xe0 [ 650.419204][ T9785] ? rcu_read_lock_bh_held+0x25/0x60 [ 650.424633][ T9785] ? ip6_finish_output2+0xdce/0x1710 [ 650.429953][ T9785] ip6_finish_output2+0x8cc/0x1710 [ 650.435193][ T9785] __ip6_finish_output+0x4be/0xb80 [ 650.440342][ T9785] ? ip6_dst_hoplimit+0x430/0x430 [ 650.445394][ T9785] ip6_finish_output+0x35/0x200 [ 650.450279][ T9785] ip6_output+0x1db/0x520 [ 650.454650][ T9785] ip6_local_out+0xaf/0x1a0 [ 650.459184][ T9785] udp_tunnel6_xmit_skb+0x6a6/0xba0 [ 650.464426][ T9785] send6+0x51a/0xd10 [ 650.468362][ T9785] ? send4+0xe60/0xe60 [ 650.472479][ T9785] ? wg_socket_send_skb_to_peer+0xb1/0x220 [ 650.478311][ T9785] wg_socket_send_skb_to_peer+0xf5/0x220 [ 650.483974][ T9785] wg_packet_tx_worker+0x2f9/0xa20 [ 650.489123][ T9785] process_one_work+0x98d/0x1630 [ 650.494099][ T9785] ? pwq_dec_nr_in_flight+0x320/0x320 [ 650.499500][ T9785] ? rwlock_bug.part.0+0x90/0x90 [ 650.504458][ T9785] ? _raw_spin_lock_irq+0x41/0x50 [ 650.509528][ T9785] worker_thread+0x64c/0x1120 [ 650.514244][ T9785] ? __kthread_parkme+0x13f/0x1e0 [ 650.519292][ T9785] ? process_one_work+0x1630/0x1630 [ 650.524531][ T9785] kthread+0x3b1/0x4a0 [ 650.528627][ T9785] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 650.534554][ T9785] ret_from_fork+0x1f/0x30 [ 650.539186][ T9785] ================================================================================ [ 650.548511][ T9785] Kernel panic - not syncing: panic_on_warn set ... [ 650.555133][ T9785] CPU: 1 PID: 9785 Comm: kworker/1:4 Not tainted 5.10.0-syzkaller #0 [ 650.563213][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.573371][ T9785] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 650.579616][ T9785] Call Trace: [ 650.582906][ T9785] dump_stack+0x107/0x163 [ 650.587264][ T9785] panic+0x343/0x77f [ 650.591181][ T9785] ? __warn_printk+0xf3/0xf3 [ 650.595811][ T9785] ? ubsan_epilogue+0x3e/0x5a [ 650.600523][ T9785] ubsan_epilogue+0x54/0x5a [ 650.605056][ T9785] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 650.611857][ T9785] ? ktime_get+0x1bf/0x1e0 [ 650.616298][ T9785] ? llcp_sock_recvmsg.cold+0x6d/0xb2 [ 650.621720][ T9785] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 650.627489][ T9785] ? ktime_get+0x167/0x1e0 [ 650.631976][ T9785] cbq_dequeue.cold+0x186/0x18b [ 650.636867][ T9785] ? dev_watchdog+0xc60/0xc60 [ 650.641591][ T9785] __qdisc_run+0x1ab/0x1610 [ 650.646192][ T9785] __dev_queue_xmit+0x1abb/0x2ec0 [ 650.651261][ T9785] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 650.656578][ T9785] ? __ip6_finish_output+0x4be/0xb80 [ 650.661900][ T9785] ? mark_held_locks+0x9f/0xe0 [ 650.666689][ T9785] ? rcu_read_lock_bh_held+0x25/0x60 [ 650.672006][ T9785] ? ip6_finish_output2+0xdce/0x1710 [ 650.677324][ T9785] ip6_finish_output2+0x8cc/0x1710 [ 650.682488][ T9785] __ip6_finish_output+0x4be/0xb80 [ 650.687630][ T9785] ? ip6_dst_hoplimit+0x430/0x430 [ 650.692693][ T9785] ip6_finish_output+0x35/0x200 [ 650.697576][ T9785] ip6_output+0x1db/0x520 [ 650.701944][ T9785] ip6_local_out+0xaf/0x1a0 [ 650.706476][ T9785] udp_tunnel6_xmit_skb+0x6a6/0xba0 [ 650.711717][ T9785] send6+0x51a/0xd10 [ 650.715650][ T9785] ? send4+0xe60/0xe60 [ 650.719795][ T9785] ? wg_socket_send_skb_to_peer+0xb1/0x220 [ 650.725718][ T9785] wg_socket_send_skb_to_peer+0xf5/0x220 [ 650.731390][ T9785] wg_packet_tx_worker+0x2f9/0xa20 [ 650.736536][ T9785] process_one_work+0x98d/0x1630 [ 650.741519][ T9785] ? pwq_dec_nr_in_flight+0x320/0x320 [ 650.746946][ T9785] ? rwlock_bug.part.0+0x90/0x90 [ 650.751913][ T9785] ? _raw_spin_lock_irq+0x41/0x50 [ 650.756979][ T9785] worker_thread+0x64c/0x1120 [ 650.761706][ T9785] ? __kthread_parkme+0x13f/0x1e0 [ 650.766767][ T9785] ? process_one_work+0x1630/0x1630 [ 650.772011][ T9785] kthread+0x3b1/0x4a0 [ 650.776092][ T9785] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 650.782002][ T9785] ret_from_fork+0x1f/0x30 [ 650.787136][ T9785] Kernel Offset: disabled [ 650.791681][ T9785] Rebooting in 86400 seconds..