2020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f43465356320000ec3c0af1ffffffff00000000800000000000000000000000000000000000000000000000310000000000000000000000f3c3655f00000000f3c3655f00000000000000000000000002000000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000009699b28feb090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a00000014000000000000000000f3c3655f00000000000000000300000058bf000007000000010200000000000002020000000000000c0000001400000002000000aa55bbfa000100"/8480, 0x2120}, {&(0x7f0000012200)="000000000000000000000000000000002c45a579db8048f0b253e5f4e554010200000000000000000000000000000000000000000000000000010000532320962c707e31e466238400"/96, 0x60, 0x2140}, {&(0x7f0000012300)="47524f5550303100c00f800030000000ec3c0af10000000000000000000000000702000000000000000100000000000001fb3cf26d0100000000000000000000ffffffffffffffffffff00"/96, 0x60, 0x100000}, {&(0x7f0000012400)="47524f5550303100c00f0002e6010000ec3c0af100000000000000000000000004020000000000000002000000000000c3353485320100000000000000000000ffffff0300"/96, 0x60, 0x200000}, {&(0x7f0000012500)="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", 0x100, 0x201000}, {&(0x7f0000012600)="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"/896, 0x380, 0x202000}, {&(0x7f0000012a00)="494e4f4445303100ec3c0af1ffff0300000000000000000000000000000000000000000000000000a481010011000000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000003020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000260a86759f02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f300"/224, 0xe0, 0x203000}, {&(0x7f0000012b00)="494e4f4445303100ec3c0af1ffff0400000000000200000000000000000000000000200000000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000004020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000570a21bb8b0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000002000002000001f30001000000000000000000e6010000000200000002000000000000", 0xe0, 0x204000}, {&(0x7f0000012c00)="494e4f4445303100ec3c0af1ffff0500000000000100000000000000000000000000100000000000a481010011000000f3c3655f00000000f3c3655f0000000005c4655f00000000000000000000000005020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000005ed7fd137d07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000045000000000000", 0xe0, 0x205000}, {&(0x7f0000012d00)="494e4f4445303100ec3c0af1ffff0600000000000100000000000000000000000000100000000000a481010011020000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000006020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000897df35e0904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000004000000000000", 0xe0, 0x206000}, {&(0x7f0000012e00)="494e4f4445303100ec3c0af1ffff0700000000008000000000000000000000000000000800000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000007020000000000000000000000000000ec3c0af10000000000000000000000000000000000000000000000000000000009d6c867400400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000080000000007e0100f3000100000000000000000030000000800000000001000000000000", 0xe0, 0x207000}, {&(0x7f0000012f00)="494e4f4445303100ec3c0af1ffff0800000000000100000000000000000000000060000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000008020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000f3a35a0ced05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000046000000000000", 0xe0, 0x208000}, {&(0x7f0000013000)="494e4f4445303100ec3c0af1ffff0900000000000100000000000000000000000060000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000009020000000000000000000000000000ec3c0af10000000000000000000000000000000000000000000000000000000053f16e311e07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000049000000000000", 0xe0, 0x209000}, {&(0x7f0000013100)="494e4f4445303100ec3c0af1ffff0a0000000000000000000000000000000000380f000000000000ed41020011000000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000a020000000000000000000000000000ec3c0af100000000000000000000000000000000000001000000000000000000ca064feabb0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000a02000000000000100001022e0000000202000000000000280f02022e2e00"/256, 0x100, 0x20a000}, {&(0x7f0000013200)="494e4f4445303100ec3c0af1ffff0b0000000000000000000000000000000000380f000000000000ed41020011000000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000b020000000000000000000000000000ec3c0af100000000000000000000000000000000000001000000000000000000d10e41ef040300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000b02000000000000100001022e0000000202000000000000280f02022e2e00"/256, 0x100, 0x20b000}, {&(0x7f0000013300)="494e4f4445303100ec3c0af1ffff0c00000000000000000000000000000000000000000000000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000c020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000d6da0ea6b4020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000001f300"/224, 0xe0, 0x20c000}, {&(0x7f0000013400)="494e4f4445303100ec3c0af1ffff0d00000000000000000000000000000000000000000000000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000d020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000e79fd22347000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000001f300"/224, 0xe0, 0x20d000}, {&(0x7f0000013500)="494e4f4445303100ec3c0af1ffff0e00000000000400000000000000000000000000400000000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000e020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000b8a5763d2d010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000004000004000001f30001000000000000000000fe03000000040000004c000000000000", 0xe0, 0x20e000}, {&(0x7f0000013600)="494e4f4445303100ec3c0af1ffff0f00000000000000000000000000000000000000000000000000a481010091040000f3c3655f00000000f3c3655f00000000f3c3655f0000000000000000000000000f020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000c4131bf3b2020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000001f300"/224, 0xe0, 0x20f000}, {&(0x7f0000013700)="494e4f4445303100ec3c0af1ffff1000000000002000000000000000000000000000000200000000a481010011010000f3c3655f00000000f3c3655f00000000f5c3655f00000000000000000000000010020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000002746e1640b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000200000000005000000000000", 0xe0, 0x210000}, {&(0x7f0000013800)="494e4f4445303100ec3c0af1ffff1100000000002000000000000000000000000000000200000000a481010011010000f3c3655f00000000f3c3655f00000000fbc3655f00000000000000000000000011020000000000000000000000000000ec3c0af10000000000000000000000000000000000000000000000000000000008dd9a7a2e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000200000000025000000000000", 0xe0, 0x211000}, {&(0x7f0000013900)="494e4f4445303100ec3c0af1ffff1200000000000000000000000000000000000000000000000000a4810100d1000000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000012020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000ad4ea9cb9e020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300f00"/224, 0xe0, 0x212000}, {&(0x7f0000013a00)="494e4f4445303100ec3c0af1ffff1300000000000000000000000000000000000000000000000000a4810100d1000000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000013020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000009c0b754e6d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300f00"/224, 0xe0, 0x213000}, {&(0x7f0000013b00)="494e4f4445303100ec3c0af1ffff1400000000000000000000000000000000000000000000000000a481010011080000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000014020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000005deba0c7e20500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70100"/224, 0xe0, 0x214000}, {&(0x7f0000013c00)="494e4f4445303100ec3c0af1ffff1500000000000000000000000000000000000000000000000000a481010011080000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000015020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000006cae7c42110700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70100"/224, 0xe0, 0x215000}, {&(0x7f0000013d00)="494e4f4445303100ec3c0af1ffff1600000000000100000000000000000000000020000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000016020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000001d47dd7f2502000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000047000000000000", 0xe0, 0x216000}, {&(0x7f0000013e00)="494e4f4445303100ec3c0af1ffff1700000000000100000000000000000000000020000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000017020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000bd15e942d600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000048000000000000", 0xe0, 0x217000}, {&(0x7f0000013f00)="494e4f4445303100ec3c0af1ffff1800000000000100000000000000000000000020000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000018020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000006cc815300706000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000100000000000000000000000000000001000000004a000000000000", 0xe0, 0x218000}, {&(0x7f0000014000)="494e4f4445303100ec3c0af1ffff1900000000000100000000000000000000000020000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000019020000000000000000000000000000ec3c0af1000000000000000000000000000000000000000000000000000000003816aee12002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000100000000000000000000000000000001000000004b000000000000", 0xe0, 0x219000}, {&(0x7f0000014100)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000002000000002c45a579db8048f0b253e5f4e55401020000000100"/96, 0x60, 0x500000}, {&(0x7f0000014200)="c03b399800000004000000000000100000002000000000010000000100000001000000000000000000000002000000002c45a579db8048f0b253e5f4e55401020000000100"/96, 0x60, 0x2500000}, {&(0x7f0000014300)="7024f50c00000000803a0900803a090010270000060000000000000005000000380f000000000000ed41030011000000f3c3655f00000000f3c3655f00000000f3c3655f00000000000000000000000001020000000000000000000000000000ec3c0af10000000000000000000000000000000000000100000000000000000026682b2a5d0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000102000000000000100001022e0000000102000000000000280f02022e2e00"/256, 0x100, 0x4600000}, {&(0x7f0000014400)="000000000000000000000000000000000000000000000000d6b0b409b40600000200"/64, 0x40, 0x4600fe0}, {&(0x7f0000014500)="000000000000000000000000000000000000000000000000b6ad528d050000000300"/64, 0x40, 0x4601fe0}, {&(0x7f0000014600)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x4602fe0}, {&(0x7f0000014700)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x4603fe0}, {&(0x7f0000014800)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x4604fe0}, {&(0x7f0000014900)="0000000000000000000000000000000000000000000000007375191502010000", 0x20, 0x4605fe0}, {&(0x7f0000014a00)="c024f50c0000000001000000010000000200"/32, 0x20, 0x4700000}, {&(0x7f0000014b00)="00000000000000000000000000000000000000000000000090aefd31bc000000", 0x20, 0x4700fe0}, {&(0x7f0000014c00)="000000000000000000000000000000000000000000000000eeffe33800000000", 0x20, 0x4701fe0}, {&(0x7f0000014d00)="c024f50c0000000001000000010000000200"/32, 0x20, 0x4800000}, {&(0x7f0000014e00)="00000000000000000000000000000000000000000000000090aefd31bc000000", 0x20, 0x4800fe0}, {&(0x7f0000014f00)="000000000000000000000000000000000000000000000000eeffe33800000000", 0x20, 0x4801fe0}, {&(0x7f0000015000)="7124f50c00000000803a0900803a0900102700000600000000000000050000000060000000000000a481010011100000f3c3655f00000000f3c3655f0000000006c4655f00000000000000000000000008020000000000000000000000000000ec3c0af100000000000000000000000000000000000000000000000000000000f3a35a0ced05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000000046000000000000", 0xe0, 0x4900000}, {&(0x7f0000015100)="000000000000000000000000000000000000000000000000e600727eb90500000200"/64, 0x40, 0x4900fe0}, {&(0x7f0000015200)="000000000000000000000000000000000000000000000000b6ad528d050000000300"/64, 0x40, 0x4901fe0}, {&(0x7f0000015300)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x4902fe0}, {&(0x7f0000015400)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x4903fe0}, {&(0x7f0000015500)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x4904fe0}, {&(0x7f0000015600)="0000000000000000000000000000000000000000000000007375191502010000", 0x20, 0x4905fe0}, {&(0x7f0000015700)="c124f50c0000000001000000010000000200"/32, 0x20, 0x4a00000}, {&(0x7f0000015800)="000000000000000000000000000000000000000000000000bc07256bbf000000", 0x20, 0x4a00fe0}, {&(0x7f0000015900)="000000000000000000000000000000000000000000000000eeffe33800000000", 0x20, 0x4a01fe0}, {&(0x7f0000015a00)="c124f50c0000000001000000010000000200"/32, 0x20, 0x4b00000}, {&(0x7f0000015b00)="000000000000000000000000000000000000000000000000bc07256bbf000000", 0x20, 0x4b00fe0}, {&(0x7f0000015c00)="000000000000000000000000000000000000000000000000eeffe33800000000", 0x20, 0x4b01fe0}, {&(0x7f0000015d00)="47524f555030310000010004fe030000ec3c0af10000000000000000000000000e02000000000000004c00000000000069b423c23201000000000000000000000300"/96, 0x60, 0x4c00000}, {&(0x7f0000015e00)="494e4f4445303100ec3c0af10000010000000000000000000000000000000000380f000000000000ed4102000100000006c4655f0000000006c4655f0000000006c4655f000000000000000000000000014c0000000000000000000000000000ec3c0af100000000000000000000000000000000000001000000000000000000c5a36db0fa04000000000000000000000000000000000000004c0000000000000000000000000000000000000000000000000000000000000000000000000000380f000000000000014c000000000000100001022e0000000102000000000000280f02022e2e00"/256, 0x100, 0x4c01000}], 0x0, &(0x7f0000015f00)) [ 480.289220][T11832] loop3: detected capacity change from 0 to 264192 20:21:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000014c0)={'bond0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "443f179897e2ec1f4248518b354b6f1b69b08647a83b1c32415b079bc502b868", "dad31a0e619a32b5ad32b0b331238c990b5c71fa5e3cb322adc892dcaa61d239", "cd32f2a545b6dd606b0ca0890f03cfbf33040b5f9246b04cf2df09c27eba06cf", "2edf8a37f7dc4ac61318e95991558abd044fba227db415febcb28c4a2b2c3e6e", "9352eadf0534fb53f756a9f644df4752cebbe63dcde3ad95d367c967c3d95863", "8f469bd5e3a71cf6f6567aca"}}) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x78) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27) [ 480.351303][T11832] (syz-executor.3,11832,1):ocfs2_parse_options:1476 ERROR: Invalid heartbeat mount options 20:21:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) [ 480.488159][T11832] (syz-executor.3,11832,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 480.695284][T11841] __nla_validate_parse: 1 callbacks suppressed [ 480.695302][T11841] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.4'. 20:21:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) wait4(0x0, 0x0, 0x0, &(0x7f0000000300)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000100)=0x80000001) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 20:21:27 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x63, 0xa, 0xa, 0xff00, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:21:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) wait4(0x0, 0x0, 0x0, &(0x7f0000000300)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000100)=0x80000001) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 20:21:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) wait4(0x0, 0x0, 0x0, &(0x7f0000000300)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000100)=0x80000001) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 20:21:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x63, 0xa, 0xa, 0xff00, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 481.313587][T11851] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 20:21:27 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x63, 0xa, 0xa, 0xff00, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:21:27 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x63, 0xa, 0xa, 0xff00, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000100)=""/196, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 481.553041][T11864] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.4'. 20:21:27 executing program 3: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:28 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:28 executing program 1: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:28 executing program 1: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) [ 482.356899][T11876] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 482.379062][T11877] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.3'. 20:21:28 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:28 executing program 1: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000340)="1b3e63d4", 0x4, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 20:21:28 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) [ 482.467089][T11892] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.4'. 20:21:28 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:28 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:28 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:29 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:29 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:29 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) [ 483.180018][T11906] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.215946][T11907] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.2'. 20:21:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:29 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) 20:21:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) [ 483.357058][T11924] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.4'. 20:21:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:29 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff7f, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/37, 0x25, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="480500001400", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) 20:21:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) [ 484.498028][T11943] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 484.522426][T11945] netlink: 1312 bytes leftover after parsing attributes in process `syz-executor.2'. 20:21:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffffef) pselect6(0x40, &(0x7f0000006000), 0x0, &(0x7f0000006340)={0x3f}, &(0x7f0000006380), 0x0) 20:21:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) [ 486.002693][T11972] loop2: detected capacity change from 0 to 4096 [ 486.041875][T11972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 20:21:33 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 20:21:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) 20:21:34 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="63726561746f723d45b5539b2c756d61736b3d30303030303030303030303030303030303030303031312c6e6f626172726965722c6e6f626172726965722c666f726365"]) 20:21:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) [ 488.179038][T11972] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 20:21:34 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="63726561746f723d45b5539b2c756d61736b3d30303030303030303030303030303030303030303031312c6e6f626172726965722c6e6f626172726965722c666f726365"]) [ 488.229840][T11996] hfsplus: unable to find HFS+ superblock [ 488.286354][T12004] hfsplus: unable to find HFS+ superblock 20:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 20:21:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe2$9p(0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x101) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd5bdf", 0x3}], 0x1, 0x0, 0x0, 0x0) [ 488.567529][T12013] loop2: detected capacity change from 0 to 4096 20:21:34 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="63726561746f723d45b5539b2c756d61736b3d30303030303030303030303030303030303030303031312c6e6f626172726965722c6e6f626172726965722c666f726365"]) 20:21:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) [ 488.634783][T12013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 489.169783][T12028] hfsplus: unable to find HFS+ superblock [ 489.205484][T12013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="63726561746f723d45b5539b2c756d61736b3d30303030303030303030303030303030303030303031312c6e6f626172726965722c6e6f626172726965722c666f726365"]) 20:21:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:35 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 489.351742][T12033] loop4: detected capacity change from 0 to 4096 [ 489.403907][T12034] hfsplus: unable to find HFS+ superblock [ 489.437951][T12033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 20:21:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:35 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) [ 489.528146][T12042] loop2: detected capacity change from 0 to 264192 [ 489.567456][T12042] FAT-fs (loop2): bogus number of reserved sectors [ 489.599060][T12042] FAT-fs (loop2): Can't find a valid FAT filesystem [ 489.615804][T12033] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) [ 489.962534][T12060] loop4: detected capacity change from 0 to 4096 [ 490.049093][T12060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.380950][T12060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) [ 490.503531][T12065] loop2: detected capacity change from 0 to 4096 20:21:36 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 490.569162][T12070] loop4: detected capacity change from 0 to 4096 [ 490.583946][T12065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 20:21:36 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) [ 490.663620][T12070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 20:21:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) [ 490.831101][T12065] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:37 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:38 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:38 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:38 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) 20:21:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) [ 493.177392][T12137] loop3: detected capacity change from 0 to 4096 [ 493.228498][T12137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 20:21:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4) r0 = getpid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x80000001, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)=""/71, 0x47}], 0x1, &(0x7f0000002180)=""/204, 0xcc}, 0x108}, {{0x0, 0x0, 0x0}, 0x401}, {{&(0x7f0000002500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002580)=""/252, 0xfc}], 0x1, &(0x7f00000026c0)=""/157, 0x9d}, 0x40}, {{&(0x7f0000002780)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/108, 0x6c}, {&(0x7f0000002900)=""/103, 0x67}], 0x2, &(0x7f00000029c0)=""/53, 0x35}, 0x7f}], 0x4, 0x2040, &(0x7f0000002b00)) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='GPL\x00', 0x346, 0x8a, &(0x7f00000003c0)=""/138, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x40}, 0x10, 0x143ba, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}, 0x80) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2811fdff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000440), 0x7ff, r2}, 0x38) [ 493.409915][T12137] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:39 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000000580)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000000480)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x8000, &(0x7f0000013500)) 20:21:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) [ 493.591372][T12146] loop3: detected capacity change from 0 to 4096 [ 493.595422][T12144] loop5: detected capacity change from 0 to 2816 [ 493.609873][T12144] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 493.627016][T12146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 493.732084][T12146] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters 20:21:39 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:39 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000000580)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000000480)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="0a010300ed000100c6e7d0016000000000000000040000000100000400000000000003000000000000000000a53c000002000000000000000801000000000000080100000000000000000000000000000010e4070913122c1643092d0010e4070913122c170936350010e4070913122c1643092d0010e4070913122c1709363501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000000000000000000000000000008010000010103008500010033d418006000000001000a0000020000600000000000000000000000000000000101030087000100e81d1c0060000000010002060002000061000000000000001000000000000866696c6530010103009e0001001ffd1c0060000000010000060002000067000000000000001300000000000866696c6531010103000900010097f01c0060000000010000060002000068000000000000001400000000000866696c65320101030028000100c3e31c0060000000010000060002000068000000000000001500000000000866696c653301010300e4000100b7a72000600000000100000a000200007b000000000000001600000000000866696c652e636f6c64", 0x1e0, 0xb0000}], 0x8000, &(0x7f0000013500)) 20:21:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x19) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 20:21:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x58}}, 0x0) 20:21:39 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 493.880486][T12152] loop5: detected capacity change from 0 to 2816 [ 493.907200][T12152] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount 20:21:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x58}}, 0x0) 20:21:39 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000000580)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000000480)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x8000, &(0x7f0000013500)) [ 493.963423][T12158] loop3: detected capacity change from 0 to 4096 20:21:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x58}}, 0x0) [ 494.022356][T12158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 494.094625][T12168] loop5: detected capacity change from 0 to 2816 20:21:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x58}}, 0x0) [ 494.135865][T12158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 26 vs 25 free clusters [ 494.179446][T12168] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount 20:21:40 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x300, 0x0, &(0x7f0000000580)) 20:21:40 executing program 4: r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 20:21:40 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000000580)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000000480)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x8000, &(0x7f0000013500)) [ 494.445631][T12181] loop5: detected capacity change from 0 to 2816 [ 494.468570][T12181] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount 20:21:40 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x300, 0x0, &(0x7f0000000580)) 20:21:40 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:40 executing program 4: r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 20:21:40 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:40 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fallocate(r0, 0x30, 0x3, 0xd5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0xcea8, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000002}) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f00000002c0)=""/176) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) 20:21:40 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:21:40 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x300, 0x0, &(0x7f0000000580)) 20:21:40 executing program 4: r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 20:21:40 executing program 3: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x300, 0x0, &(0x7f0000000580)) 20:21:40 executing program 4: r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 20:21:40 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:21:40 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:40 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:21:41 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:41 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 20:21:41 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:21:41 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:41 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:41 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:41 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:42 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:42 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:42 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:42 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:42 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:42 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:43 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:43 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:43 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:43 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:43 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:43 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) 20:21:43 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000002002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 20:21:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r1, 0x47e1, 0xb592, 0x2, &(0x7f00000001c0)={[0x404152b1]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1c8, 0x1c8, 0xffffffff, 0x1c8, 0x1c8, 0x5c8, 0x5c8, 0xffffffff, 0x5c8, 0x5c8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @icmp_id}}}, {{@ipv6={@private2, @remote, [], [], 'wg2\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 20:21:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r1, 0x47e1, 0xb592, 0x2, &(0x7f00000001c0)={[0x404152b1]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1c8, 0x1c8, 0xffffffff, 0x1c8, 0x1c8, 0x5c8, 0x5c8, 0xffffffff, 0x5c8, 0x5c8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @icmp_id}}}, {{@ipv6={@private2, @remote, [], [], 'wg2\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 20:21:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1c8, 0x1c8, 0xffffffff, 0x1c8, 0x1c8, 0x5c8, 0x5c8, 0xffffffff, 0x5c8, 0x5c8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @icmp_id}}}, {{@ipv6={@private2, @remote, [], [], 'wg2\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 20:21:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1c8, 0x1c8, 0xffffffff, 0x1c8, 0x1c8, 0x5c8, 0x5c8, 0xffffffff, 0x5c8, 0x5c8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @icmp_id}}}, {{@ipv6={@private2, @remote, [], [], 'wg2\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@remote, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 20:21:44 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0xffffffffffffff53, 0x0, 0x0, 0x0) 20:21:44 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080001801f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 20:21:44 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0xffffffffffffff53, 0x0, 0x0, 0x0) 20:21:44 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) [ 498.807096][T12288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.882689][T12288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.911122][T12288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:21:44 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) 20:21:44 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0xffffffffffffff53, 0x0, 0x0, 0x0) 20:21:44 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080001801f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) [ 498.923587][T12288] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 499.044922][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.064755][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.093674][T12297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.119083][T12297] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 20:21:45 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) 20:21:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:45 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendto(r2, &(0x7f0000000180)='+', 0xffffffffffffff53, 0x0, 0x0, 0x0) 20:21:45 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080001801f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 20:21:45 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x0) 20:21:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r1, 0x47e1, 0xb592, 0x2, &(0x7f00000001c0)={[0x404152b1]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 499.565614][T12308] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.640440][T12308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 20:21:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 499.711703][T12308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.743074][T12308] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 20:21:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 20:21:45 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080001801f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 20:21:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) [ 500.071085][T12327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:21:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) [ 500.133108][T12327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.163795][T12327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.214038][T12327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 20:21:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r1, 0x47e1, 0xb592, 0x2, &(0x7f00000001c0)={[0x404152b1]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0xa, 0x47) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 20:21:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 501.182821][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.189353][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 20:21:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 20:21:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 20:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@gettaction={0x2c, 0x31, 0x901, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 20:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@gettaction={0x2c, 0x31, 0x901, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 20:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@gettaction={0x2c, 0x31, 0x901, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 20:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@gettaction={0x2c, 0x31, 0x901, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 20:21:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:21:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:21:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:21:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:21:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote}}) 20:21:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 20:21:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0xb00, &(0x7f00000005c0)={0x0, 0x8b89, 0x0, 0x0, 0x42}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_uring_enter(r6, 0x0, 0x3b8, 0x2, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x7b, 0x2}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) getpid() io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 20:21:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:21:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 20:21:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 20:21:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:21:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 504.492062][ T3656] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 504.520927][ T3656] hid-generic: probe of 0000:0000:0000.0009 failed with error -22 20:21:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:21:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 504.647281][ T14] hid-generic 0000:0000:0000.000A: item fetching failed at offset 0/1 [ 504.675113][ T14] hid-generic: probe of 0000:0000:0000.000A failed with error -22 20:21:50 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:21:50 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 504.760290][ T26] hid-generic 0000:0000:0000.000B: item fetching failed at offset 0/1 [ 504.800029][ T26] hid-generic: probe of 0000:0000:0000.000B failed with error -22 [ 504.805685][ T3652] hid-generic 0000:0000:0000.000C: item fetching failed at offset 0/1 [ 504.821520][ T3656] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 504.840180][ T3652] hid-generic: probe of 0000:0000:0000.000C failed with error -22 [ 505.201884][ T3656] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.213438][ T3656] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.224331][ T3656] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 505.233882][ T3656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:21:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:51 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) [ 505.733811][ T3656] wacom 0003:056A:0331.000D: unknown main item tag 0x0 [ 505.742494][ T3656] wacom 0003:056A:0331.000D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 505.936164][ T3656] usb 5-1: USB disconnect, device number 16 20:21:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 20:21:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 20:21:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:52 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'z'}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:21:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 506.471762][ T14] hid-generic 0000:0000:0000.000E: item fetching failed at offset 0/1 [ 506.488289][ T14] hid-generic: probe of 0000:0000:0000.000E failed with error -22 20:21:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 20:21:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) [ 506.851565][ T3656] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 506.859244][ T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 506.911552][ T3652] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 507.251897][ T3656] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.263074][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.281603][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.310354][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.334230][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.344897][ T3656] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:21:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 507.373312][ T3652] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 507.400313][ T3656] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 507.410178][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 507.413522][ T3652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.427399][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.436851][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:21:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) [ 507.937096][ T22] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 507.944990][ T3656] wacom 0003:056A:0331.0010: unknown main item tag 0x0 [ 507.953490][ T3652] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 507.966765][ T22] wacom 0003:056A:0331.000F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 507.982932][ T3656] wacom 0003:056A:0331.0010: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 20:21:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 508.032364][ T3652] wacom 0003:056A:0331.0011: hidraw2: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 508.194269][ T26] usb 5-1: USB disconnect, device number 17 [ 508.204167][ T3656] usb 2-1: USB disconnect, device number 11 [ 508.343201][ T3652] usb 6-1: USB disconnect, device number 16 20:21:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 509.051580][ T3652] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 509.061490][ T3656] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 509.071580][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 509.441815][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.453307][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.471610][ T3656] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 20:21:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 509.500433][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.512802][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.553235][ T3652] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 509.562933][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 509.577560][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.585738][ T3652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:21:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 509.600193][ T3656] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.677650][ T3656] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 509.757100][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:21:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) [ 510.074659][ T3652] wacom 0003:056A:0331.0013: unknown main item tag 0x0 [ 510.082092][ T14] wacom 0003:056A:0331.0012: unknown main item tag 0x0 [ 510.108421][ T14] wacom 0003:056A:0331.0012: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 510.123706][ T3652] wacom 0003:056A:0331.0013: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 510.282891][ T3656] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 510.315555][ T3656] wacom 0003:056A:0331.0014: hidraw2: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 510.383116][ T3652] usb 6-1: USB disconnect, device number 17 [ 510.424538][ T3651] usb 5-1: USB disconnect, device number 18 [ 510.495632][ T3656] usb 2-1: USB disconnect, device number 12 20:21:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) 20:21:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:21:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) [ 511.201472][ T3652] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 511.211710][ T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 511.251471][ T3656] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 511.341937][ T3651] usb 2-1: new high-speed USB device number 13 using dummy_hcd 20:21:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_clone(0x0, &(0x7f0000000280)="abb4b581fe8d", 0x6, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x0, 0x440800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000a00)={{}, 0x8, 0x2, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x401, 0x0, 'syz1\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x80]}) 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) [ 511.581849][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.593009][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.605109][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.614944][ T3652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) [ 511.625305][ T3652] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 511.641006][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 511.651696][ T3656] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 511.666186][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.683143][ T3652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.691214][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.703615][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) [ 511.733403][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 511.749612][ T3651] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.763315][ T3651] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.774693][ T3656] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) [ 511.784148][ T3651] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 511.794889][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.803221][ T3651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.826541][ T3656] usb 1-1: config 0 descriptor?? 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) 20:21:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000340)=0x5) [ 512.203236][ T14] wacom 0003:056A:0331.0015: unknown main item tag 0x0 [ 512.212556][ T3652] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 512.220500][ T14] wacom 0003:056A:0331.0015: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 512.232128][ T3652] wacom 0003:056A:0331.0016: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 512.313635][ T3651] wacom 0003:056A:0331.0017: unknown main item tag 0x0 [ 512.322950][ T3656] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 512.331741][ T3651] wacom 0003:056A:0331.0017: hidraw2: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 512.343639][ T3656] appleir 0003:05AC:8243.0018: hiddev0,hidraw3: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 512.423149][ T3652] usb 5-1: USB disconnect, device number 19 [ 512.439933][ T14] usb 6-1: USB disconnect, device number 18 [ 512.526888][ T3651] usb 2-1: USB disconnect, device number 13 [ 512.582867][ T3656] usb 1-1: USB disconnect, device number 16 20:21:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:21:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:21:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3007}) 20:21:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:21:58 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3007}) 20:21:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3007}) [ 513.401564][ T3656] usb 1-1: new high-speed USB device number 17 using dummy_hcd 20:21:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:21:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) [ 513.791612][ T3656] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 513.805365][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.824279][ T3656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.834910][ T3656] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 513.854570][ T3656] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 513.863709][ T3656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.873674][ T3656] usb 1-1: config 0 descriptor?? [ 514.352631][ T3656] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 514.361916][ T3656] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 514.634252][ T3651] usb 1-1: USB disconnect, device number 17 20:22:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:22:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:22:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3007}) 20:22:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4040000, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f00000000c0)) 20:22:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:22:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 515.542123][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 515.841492][ T3651] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 515.922167][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 515.933155][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.944908][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.954864][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 20:22:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) [ 515.968105][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 515.977211][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.987579][ T14] usb 3-1: config 0 descriptor?? 20:22:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) [ 516.212044][ T3651] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 516.223267][ T3651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.238376][ T3651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.248488][ T3651] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 516.261596][ T3651] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 516.270671][ T3651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.280036][ T3651] usb 1-1: config 0 descriptor?? [ 516.472961][ T14] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 516.482417][ T14] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 516.754962][ T14] usb 3-1: USB disconnect, device number 9 [ 516.765750][ T3651] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 516.777248][ T3651] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.0-1/input0 [ 517.042912][ T3651] usb 1-1: USB disconnect, device number 18 20:22:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x83, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x40000000000007b, 0x0, 0x0) shutdown(r3, 0x0) 20:22:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:22:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:22:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 519.241596][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 519.249287][ T5051] usb 1-1: new high-speed USB device number 19 using dummy_hcd 20:22:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:07 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) [ 521.902217][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 521.997375][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.097169][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.115997][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 522.151330][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 522.161327][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.175446][ T14] usb 3-1: config 0 descriptor?? 20:22:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:22:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 20:22:08 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r0) 20:22:08 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:08 executing program 1: setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000280)) 20:22:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 522.521689][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 522.527893][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 522.538562][ T14] usb 3-1: USB disconnect, device number 10 20:22:08 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r0) 20:22:08 executing program 1: setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000280)) 20:22:08 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) 20:22:09 executing program 1: setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000280)) 20:22:09 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r0) 20:22:10 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) [ 524.441506][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 524.821712][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 524.832597][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.843611][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.853605][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 524.866657][ T14] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 524.875715][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.888515][ T14] usb 3-1: config 0 descriptor?? [ 525.372400][ T14] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 525.385816][ T14] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 525.674233][ T14] usb 3-1: USB disconnect, device number 11 20:22:12 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c) 20:22:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0xa0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 20:22:12 executing program 1: setreuid(0x0, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000280)) 20:22:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r0) 20:22:12 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) 20:22:12 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) 20:22:12 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) 20:22:12 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0xa0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 20:22:12 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) [ 526.233647][T12710] xt_l2tp: invalid flags combination: c 20:22:12 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) 20:22:12 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) r0 = gettid() tkill(r0, 0x15) r1 = gettid() tkill(r1, 0x12) [ 526.310736][T12722] xt_l2tp: invalid flags combination: c 20:22:12 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c) 20:22:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32323330373039383000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000daf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000641e8ebf641e8ebf00000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020daf4655fdaf4655fdaf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000daf4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000904a5ec200000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000046b58a6000000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3232333037303938302f66696c65302f66696c65300000000000000000000000000000000000000000000029d1c2e100000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="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", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) 20:22:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0xa0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 20:22:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x1f}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 20:22:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x2, 0x17fc0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 20:22:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x1f}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 20:22:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 526.553228][T12734] xt_l2tp: invalid flags combination: c 20:22:12 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:12 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0xa0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 20:22:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x1f}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 20:22:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 20:22:12 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c) 20:22:13 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 527.118544][T12751] xt_l2tp: invalid flags combination: c 20:22:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x1f}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 20:22:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}}) 20:22:13 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x2, 0x17fc0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 20:22:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:13 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:13 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c) 20:22:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:13 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) 20:22:14 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x2, 0x17fc0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 20:22:15 executing program 0: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:15 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3f) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 20:22:15 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:15 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:15 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3f) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 20:22:15 executing program 0: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:15 executing program 0: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:15 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3f) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 20:22:15 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3f) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 20:22:15 executing program 0: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:15 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2b3, 0x0, 0x9b23, 0x0, 0x2], 0x5}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 20:22:16 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_delete(0x0) 20:22:16 executing program 3: r0 = socket(0x2, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r0, 0x84, 0x6, 0x0, 0x0) 20:22:16 executing program 5: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x25, &(0x7f0000000040)=0x7, 0xfe95) 20:22:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x2, 0x17fc0000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 20:22:16 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev2(r0, &(0x7f0000002500)=[{&(0x7f0000000100)='i', 0x1}], 0x1, 0x0, 0x0, 0x35) 20:22:16 executing program 5: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:16 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_delete(0x0) 20:22:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x25, &(0x7f0000000040)=0x7, 0xfe95) 20:22:16 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev2(r0, &(0x7f0000002500)=[{&(0x7f0000000100)='i', 0x1}], 0x1, 0x0, 0x0, 0x35) 20:22:16 executing program 3: r0 = socket(0x2, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r0, 0x84, 0x6, 0x0, 0x0) 20:22:16 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_delete(0x0) 20:22:16 executing program 5: prctl$PR_SET_MM_MAP(0xf, 0x20000000, 0x0, 0xffffffffffffff36) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 20:22:17 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev2(r0, &(0x7f0000002500)=[{&(0x7f0000000100)='i', 0x1}], 0x1, 0x0, 0x0, 0x35) 20:22:17 executing program 3: r0 = socket(0x2, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r0, 0x84, 0x6, 0x0, 0x0) 20:22:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x25, &(0x7f0000000040)=0x7, 0xfe95) 20:22:17 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_delete(0x0) 20:22:17 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, 0x0, 0x0) 20:22:17 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d05, &(0x7f0000000100)) 20:22:17 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev2(r0, &(0x7f0000002500)=[{&(0x7f0000000100)='i', 0x1}], 0x1, 0x0, 0x0, 0x35) 20:22:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x25, &(0x7f0000000040)=0x7, 0xfe95) 20:22:17 executing program 3: r0 = socket(0x2, 0x1, 0x84) setsockopt$PNPIPE_ENCAP(r0, 0x84, 0x6, 0x0, 0x0) 20:22:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:17 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, 0x0, 0x0) 20:22:17 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d05, &(0x7f0000000100)) 20:22:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:17 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:17 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, 0x0, 0x0) 20:22:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:17 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d05, &(0x7f0000000100)) 20:22:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:17 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d05, &(0x7f0000000100)) 20:22:17 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, 0x0, 0x0) 20:22:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:18 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:18 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) 20:22:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:22:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:18 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) 20:22:18 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:19 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) 20:22:19 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:19 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:19 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:20 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) 20:22:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:20 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:20 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:20 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="1800000000300002000000000000000004000000ffffffff2500feff0000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x3, 0x4) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)="d7", 0x1) 20:22:21 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) 20:22:21 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x34, &(0x7f0000000200)=[{&(0x7f0000010000)="ebb8da4eab5c3b6f006bd86f64f991d526109c395c91f89ba9af8cb6d547ba4905f3dc6f78ad47d2bbc125707524c592000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d0000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000000000000000000000000000000000000450900000000000003000000000100000000000000000000010000000000007200000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000005014446708b14da3a9eaa1c7d1ce68d405f3dc6f78ad47d2bbc125707524c59200"/320, 0x140, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000005014446708b14da3a9eaa1c7d1ce68d400"/128, 0x80, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000c0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000b05000000000000600000000000000000000010000000000d00000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000005050000000000004000000000000000010100000000000040000000000000000605000000000000400000000000000000050000000000004000000000000000070500000000000040000000000000000805000000000000400000000000000000000010000000000800000000000000100"/640, 0x280, 0x10b20}, {&(0x7f0000010700)="e3f1ccb02ba26a64c4059c99a4ddf091876f711650f9a9bb0c3c2a91fcd250e005f3dc6f78ad47d2bbc125707524c59200001000000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec0300000000000000030000000000000004000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e0000500000000001000000000000e40000500000000000990e0000500000000001000000000000e40000690000000000490e00005000"/224, 0xe0, 0x100000}, {&(0x7f0000010800)="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"/576, 0x240, 0x100ea0}, {&(0x7f0000010b00)="0000000000000000000000000000000019000000000002000000000000000000010000000000050000000000000000000100000001000010000001000100010000000000000000006900000000005014446708b14da3a9eaa1c7d1ce68d4000019000000000002000000000000000000010000000000050000000000000000000100000001000010000001000100010000000000000000005000000000005014446708b14da3a9eaa1c7d1ce68d4000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000005014446708b14da3a9eaa1c7d1ce68d40100000000000000000000010000000000007200000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000005014446708b14da3a9eaa1c7d1ce68d405f3dc6f78ad47d2bbc125707524c5927efd693ff787b6a98423143d48697896cd9b85aec15b96db92b2a677b91e31dc05f3dc6f78ad47d2bbc125707524c59200201000000000000000000000000001ef9ffe9cbb9640bbadc1054f433643ec0100000000000000030000000000000002000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e00005000"/512, 0x200, 0x101ea0}, {&(0x7f0000010d00)="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", 0x140, 0x102f40}, {&(0x7f0000010f00)="000000000000000000000000000000000300000000000000000100000000000000001000000000000000400000000000ef9ffe9cbb9640bbadc1054f433643ec4af9ecdb4a455f075d4608ec9aa5faaeba6d1937e656abdc1256ad02bc1163b705f3dc6f78ad47d2bbc125707524c59200401000000000000000000000000001ef9ffe9cbb9640bbadc1054f433643ec01000000000000000500000000000000", 0xa0, 0x103fc0}, {&(0x7f0000011000)="a002af74ebcb1522abbd51cfac5ddb3f4bf7cf2d4640e4d2d6b0fd9025a7624c05f3dc6f78ad47d2bbc125707524c59200501000000000000000000000000001ef9ffe9cbb9640bbadc1054f433643ec01000000000000000700000000000000", 0x60, 0x105000}, {&(0x7f0000011100)="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", 0x1c0, 0x106000}, {&(0x7f0000011300)="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"/416, 0x1a0, 0x106f00}, {&(0x7f0000011500)="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"/288, 0x120, 0x107fa0}, {&(0x7f0000011700)="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", 0x100, 0x108f00}, {&(0x7f0000011800)="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", 0x160, 0x500000}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x500560}, {&(0x7f0000011b00)="00000000000000000000000400000000000000000000000000000000a050000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x500720}, {&(0x7f0000011c00)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x500840}, {&(0x7f0000011d00)="00000600000000000000000000000000000000b0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x5008e0}, {&(0x7f0000011e00)="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"/320, 0x140, 0x5009e0}, {&(0x7f0000012000)="000000000000000000000600000000000000000100000000000000d05000000000000000000000000000003000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000106000000000000009a0dbbc6fb274183859bb340ac9b952b000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000005bbc645f000000002d7a91175abc645f00"/224, 0xe0, 0x500b60}, {&(0x7f0000012100)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x500c80}, {&(0x7f0000012200)="000000000000000000000000000000000000060000000000000000000000000000000000510000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x500d20}, {&(0x7f0000012300)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x500e40}, {&(0x7f0000012400)="000000000000000000070000000000000000000000000000000010500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700000000000000", 0x60, 0x500ee0}, {&(0x7f0000012500)="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", 0x1c0, 0x501000}, {&(0x7f0000012700)="0000010000000000000500000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00700000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000010000000000000007000000000000000200000000000000b0020000000000000000c000000000000000010000000000000500000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000004000000000000000200000000000000b00300000000000000001000000000000000010000000000000200000000000000df1b11b82c7e610195198fd2bd89e734533e28bc2d6a7c0e582e23934772f5b005f3dc6f78ad47d2bbc125707524c59200205000000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec050000000000000002000000000000000b000000000000100000000000c00000400000000000830f0000180000000010100000000000a90000000000000000620f0000210000000000500000000000a90000000000000000410f0000210000000000500000000000c00000190000000000290f0000180000000010500000000000a90000000000000000080f0000210000000020500000000000a90000000000000000e70e0000210000000070500000000000a90000000000000000c60e0000210000000080500000000000a90000000000000000a50e0000210000000090500000000000a90000000000000000840e00002100000000a0500000000000a90000000000000000630e0000210000000000690000000000c000001900000000004b0e0000180000000000690000000000c000001900000000004b0e0000180000000000690000000000c000001900000000002a0e0000180000000000500000000000c00000190000000000f30e000018", 0x380, 0x501e40}, {&(0x7f0000012b00)="0000000000000000000000000000000000000000000000010000000000000500000000000000010000000000000004000000000000000000010000000000000500000000000000010000000000000004000000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b00700000000000000010000000000000004000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000005000000000000000200000000000000b00100000000000000007000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00300000000000000001000000000000000010000000000000200000000000000", 0x1a0, 0x502e60}, {&(0x7f0000012d00)="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"/576, 0x240, 0x506000}, {&(0x7f0000013000)="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"/1056, 0x420, 0x506ca0}, {&(0x7f0000013500)="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", 0x100, 0x507f60}, {&(0x7f0000013600)="9183dccb99c1c04cb2b3c82fda124b6061e59d9d715b111d30d266f3eeb5a68605f3dc6f78ad47d2bbc125707524c59200905000000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec0400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c00"/160, 0xa0, 0x509000}, {&(0x7f0000013700)="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", 0x140, 0x509f40}, {&(0x7f0000013900)="0000000000000000000000000000000000000000000000000500000000000000497e4e3e9131a8430ad96edf36c195e6bb8225ff0582b48441f6bc83b651e97d05f3dc6f78ad47d2bbc125707524c59200b05000000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec060000000000000007000000000000000100000000f6ffffffffffffff8000305000000000003b0f0000600000000000", 0xa0, 0x50afe0}, {&(0x7f0000013a00)="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", 0x220, 0x50bfa0}, {&(0x7f0000013d00)="0000010000000000000500000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00200000000000000010000000000000006000000000000000200000000000000b00700000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000100000000000000b20500000000000000050100000000000000000000000000000100000000c000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b003000000000000000010000000000000000100000000000002000000000000003402b404c850497a07eeb170daaa023d198720ba270b25e32ada9e35464c310105f3dc6f78ad47d2bbc125707524c59200d05000000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec060000000000000005000000000000000200000001000100000000000001000000000000000000605000000000000600000000000000020100000000000001000000000000000000e050000000000006", 0x260, 0x50ce40}, {&(0x7f0000014000)="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"/544, 0x220, 0x50e000}, {&(0x7f0000014300)="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", 0xa80, 0x50e6e0}, {&(0x7f0000014e00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x50f560}, {&(0x7f0000014f00)="00000000000000000000000400000000000000000000000000000000a050000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x50f720}, {&(0x7f0000015000)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x50f840}, {&(0x7f0000015100)="00000600000000000000000000000000000000b0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x50f8e0}, {&(0x7f0000015200)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000100000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005abc645f00000000000000005abc645f00000000000000005abc645f00000000000000005abc645f000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x50f9e0}, {&(0x7f0000015400)="000000000000000000000600000000000000000100000000000000d05000000000000000000000000000003000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000106000000000000009a0dbbc6fb274183859bb340ac9b952b000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000005bbc645f000000002d7a91175abc645f00"/224, 0xe0, 0x50fb60}, {&(0x7f0000015500)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x50fc80}, {&(0x7f0000015600)="000000000000000000000000000000000000060000000000000000000000000000000000510000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x50fd20}, {&(0x7f0000015700)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x50fe40}, {&(0x7f0000015800)="0000000000000000000600000000000000000000000000000000c0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000", 0x60, 0x50fee0}, {&(0x7f0000015900)="561208bf53163f83a812645e7437dc86c01085a846b4477f70ceb2bcf97d579505f3dc6f78ad47d2bbc125707524c59200005100000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec0600000000000000040000000000000004000000000000000000000000f90100000000000000730f0000280000000100000000000000cc0000100000000000430f0000300000000100000000000000cc0000500000000000130f0000300000000100000000000000cc0000690000000000e30e00003000"/224, 0xe0, 0x510000}, {&(0x7f0000015a00)="00000000000000000300000000000000000100000000000000006900000000000000190000000000ef9ffe9cbb9640bbadc1054f433643ec0300000000000000000100000000000000005000000000000000190000000000ef9ffe9cbb9640bbadc1054f433643ec0300000000000000000100000000000000001000000000000000400000000000ef9ffe9cbb9640bbadc1054f433643ec0000000000000000", 0xa0, 0x510f40}, {&(0x7f0000015b00)="656cb34194ec09f88abcbba8db03a1ba213287bffa25be11f15fd4d8e540fa4305f3dc6f78ad47d2bbc125707524c59200006900000000000100000000000001ef9ffe9cbb9640bbadc1054f433643ec060000000000000005000000000000001b000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c0000000001000000000000544bae790400000000cc0e0000230000000001000000000000546b826b1100000000a50e000027000000000100000000000054bf5d291700000000820e000023000000000100000000000054bcde42e5000000005f0e000023000000000100000000000054482d12f6000000003c0e00002300000001010000000000000100000000000000009c0d0000a000000001010000000000000c00010000000000008d0d00000f0000000101000000000000544bae7904000000006a0d000023000000010100000000000054482d12f600000000470d0000230000000201000000000000010000000000000000a70c0000a000000002010000000000000c0101000000000000980c00000f00000002010000000000006c0000000000000000690800002f0400000301000000000000010000000000000000c9070000a000000003010000000000000c0101000000000000ba0700000f00000003010000000000006c00000000000000007f0700003b0000000401000000000000010000000000000000df060000a000000004010000000000000c0001000000000000d00600000f00000004010000000000001822a8f12600000000a10600002f000000040100000000000018d65ba13500000000720600002f00000004010000000000006c0000000000000000530600001f0000000501000000000000010000000000000000b3050000a000000005010000000000000c0001000000000000950500001e0000000601000000000000010000000000000000f5040000a000000006010000000000000c0001000000000000e20400001300000006010000000000006c0000000000000000690400007900"/800, 0x320, 0x690000}, {&(0x7f0000015f00)="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", 0xb40, 0x6904c0}], 0x0, &(0x7f0000016b00)) 20:22:21 executing program 2: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) 20:22:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:22:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x70}}, 0x0) 20:22:22 executing program 2: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) 20:22:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x70}}, 0x0) 20:22:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:22:22 executing program 2: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:22:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x70}}, 0x0) 20:22:22 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) 20:22:22 executing program 2: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x70}}, 0x0) 20:22:22 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:22 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0), 0x4) 20:22:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r0}, 0x20) 20:22:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:22:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x1, 0x101) 20:22:22 executing program 1: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x3a, 0x119, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x8, 0x0, 0x0, @binary}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x2000}, 0x0) 20:22:22 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0), 0x4) 20:22:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x3a, 0x119, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x8, 0x0, 0x0, @binary}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x2000}, 0x0) 20:22:22 executing program 1: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0), 0x4) 20:22:23 executing program 1: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x3a, 0x119, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x8, 0x0, 0x0, @binary}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x2000}, 0x0) 20:22:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x3a, 0x119, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x8, 0x0, 0x0, @binary}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x2000}, 0x0) 20:22:23 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:23 executing program 1: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0), 0x4) 20:22:23 executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x34, &(0x7f0000000200)=[{&(0x7f0000010000)="bc1437d0762ba27653db7b275db17208002fa8f8202ab8542a98e99ac6fbebbc9cf2a51c788c42a88d869e1c9e1e79ad000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000200000000010000000000000000000001000000000000720000000000001000000010000000100000000000000000000000000000000000000000000000000000000000000000f01a35b2d5e74ec3b67ec61c857f526b9cf2a51c788c42a88d869e1c9e1e79ad00"/320, 0x140, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e4000010000000000000004000000000000200000000000000000001000000000002000000000000000010000000100000001000000100000001000000000000000000100000000000f01a35b2d5e74ec3b67ec61c857f526b00"/128, 0x80, 0x10320}, {&(0x7f0000010400)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d00000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000005050000000000004000000000000000010100000000000040000000000000000605000000000000400000000000000000050000000000004000000000000000070500000000000040000000000000000805000000000000400000000000000000000010000000000800000000000000100"/640, 0x280, 0x10b20}, {&(0x7f0000010700)="af738775e61edef6e278eb2cdbf3648af7cad569e222860ccaef1a89e99e47cb9cf2a51c788c42a88d869e1c9e1e79ad00001000000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e20300000000000000030000000000000004000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e0000500000000001000000000000e40000500000000000990e0000500000000001000000000000e40000690000000000490e00005000"/224, 0xe0, 0x100000}, {&(0x7f0000010800)="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"/576, 0x240, 0x100ea0}, {&(0x7f0000010b00)="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"/512, 0x200, 0x101ea0}, {&(0x7f0000010d00)="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", 0x140, 0x102f40}, {&(0x7f0000010f00)="000000000000000000000000000000000300000000000000000100000000000000001000000000000000400000000000dde6ed250c6f4c02bc251dbb5ef582e216e6cee3099bc799b18bea43cf4342b33ed7524ad9d88cea471cf222466b3e4a9cf2a51c788c42a88d869e1c9e1e79ad00401000000000000000000000000001dde6ed250c6f4c02bc251dbb5ef582e201000000000000000500000000000000", 0xa0, 0x103fc0}, {&(0x7f0000011000)="57d83047af7e1e16037ceb97462ad4442cd028cb4bc88de12a980567dfdc124c9cf2a51c788c42a88d869e1c9e1e79ad00501000000000000000000000000001dde6ed250c6f4c02bc251dbb5ef582e201000000000000000700000000000000", 0x60, 0x105000}, {&(0x7f0000011100)="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", 0x1c0, 0x106000}, {&(0x7f0000011300)="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"/416, 0x1a0, 0x106f00}, {&(0x7f0000011500)="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"/288, 0x120, 0x107fa0}, {&(0x7f0000011700)="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", 0x100, 0x108f00}, {&(0x7f0000011800)="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", 0x160, 0x500000}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x500560}, {&(0x7f0000011b00)="00000000000000000000000400000000000000000000000000000000a050000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x500720}, {&(0x7f0000011c00)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x500840}, {&(0x7f0000011d00)="0000060000000000000000000000000000000060500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x5008e0}, {&(0x7f0000011e00)="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"/320, 0x140, 0x5009e0}, {&(0x7f0000012000)="000000000000000000000600000000000000000100000000000000d050000000000000000000000000000030000000000000000000000000000000000000000000000100000000000000000000000000000000000000000001060000000000000038bd0b4aae3e40729d19de0db8ad8e9f000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000005abc645f00000000644ea71d59bc645f00"/224, 0xe0, 0x500b60}, {&(0x7f0000012100)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x500c80}, {&(0x7f0000012200)="000000000000000000000000000000000000060000000000000000000000000000000000510000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x500d20}, {&(0x7f0000012300)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x500e40}, {&(0x7f0000012400)="000000000000000000070000000000000000000000000000000010500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700000000000000", 0x60, 0x500ee0}, {&(0x7f0000012500)="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", 0x1c0, 0x501000}, {&(0x7f0000012700)="0000010000000000000500000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00700000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000010000000000000007000000000000000200000000000000b0020000000000000000c000000000000000010000000000000500000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000004000000000000000200000000000000b00300000000000000001000000000000000010000000000000200000000000000dec35b3a5dbc719fab395d406b67273debf459925449e6da1f12099d860199df9cf2a51c788c42a88d869e1c9e1e79ad00205000000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e2050000000000000002000000000000000b000000000000100000000000c00000400000000000830f0000180000000010100000000000a90000000000000000620f0000210000000000500000000000a90000000000000000410f0000210000000000500000000000c00000190000000000290f0000180000000010500000000000a90000000000000000080f0000210000000020500000000000a90000000000000000e70e0000210000000070500000000000a90000000000000000c60e0000210000000080500000000000a90000000000000000a50e0000210000000090500000000000a90000000000000000840e00002100000000a0500000000000a90000000000000000630e0000210000000000690000000000c000001900000000004b0e0000180000000000690000000000c000001900000000004b0e0000180000000000690000000000c000001900000000002a0e0000180000000000500000000000c00000190000000000f30e000018", 0x380, 0x501e40}, {&(0x7f0000012b00)="0000000000000000000000000000000000000000000000010000000000000500000000000000010000000000000004000000000000000000010000000000000500000000000000010000000000000004000000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b00700000000000000010000000000000004000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000005000000000000000200000000000000b00100000000000000007000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00300000000000000001000000000000000010000000000000200000000000000", 0x1a0, 0x502e60}, {&(0x7f0000012d00)="4b7231e01f4892ea6e378edd767363172efbe55c48332c13f85662670b4c07c89cf2a51c788c42a88d869e1c9e1e79ad00605000000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e2060000000000000007000000000000000100000000f6ffffffffffffff8000305000000000003b0f0000600000000000", 0x80, 0x506000}, {&(0x7f0000012e00)="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"/288, 0x120, 0x506fa0}, {&(0x7f0000013000)="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", 0x100, 0x507f60}, {&(0x7f0000013100)="190b762f9ee9a96a16c2f43215dd6a03ba38308abcdbac2f2790fb0a811f48889cf2a51c788c42a88d869e1c9e1e79ad00905000000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e20400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c00"/160, 0xa0, 0x509000}, {&(0x7f0000013200)="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", 0x140, 0x509f40}, {&(0x7f0000013400)="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", 0x1e0, 0x50afe0}, {&(0x7f0000013600)="0000010000000000000500000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00700000000000000010000000000000006000000000000000100000000000000b20500000000000000050100000000000000000000000000000100000000c000000000000000010000000000000500000000000000010000000000000004000000000000000200000000000000b0030000000000000000100000000000000001000000000000020000000000000086ea456090c7a3bfa86fa9a37025d83517997f0425cf86f5512fcff1860388949cf2a51c788c42a88d869e1c9e1e79ad00c05000000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e20600000000000000050000000000000012000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c0000000001000000000000544bae790400000000cc0e0000230000000001000000000000546b826b1100000000a50e000027000000000100000000000054bf5d291700000000820e000023000000000100000000000054bcde42e5000000005f0e000023000000000100000000000054482d12f6000000003c0e0000230000000001000000000000600200000000000000190e0000230000000001000000000000600300000000000000f60d0000230000000001000000000000600400000000000000d30d0000230000000001000000000000600500000000000000b00d0000230000000001000000000000600600000000000000890d0000270000000101000000000000010000000000000000e90c0000a000000001010000000000000c0001000000000000da0c00000f0000000101000000000000544bae790400000000b70c000023000000010100000000000054482d12f600000000940c0000230000000101000000000000600200000000000000710c00002300000001010000000000006003000000000000004e0c00002300"/1024, 0x400, 0x50be40}, {&(0x7f0000013a00)="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", 0x400, 0x50cca0}, {&(0x7f0000013e00)="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"/544, 0x220, 0x50e000}, {&(0x7f0000014100)="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", 0xa80, 0x50e6e0}, {&(0x7f0000014c00)="0000000000000000000000000000000000000000040000000000000000010000000000000090500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x50f560}, {&(0x7f0000014d00)="00000000000000000000000400000000000000000000000000000000a050000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x50f720}, {&(0x7f0000014e00)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x50f840}, {&(0x7f0000014f00)="0000060000000000000000000000000000000060500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x50f8e0}, {&(0x7f0000015000)="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"/320, 0x140, 0x50f9e0}, {&(0x7f0000015200)="000000000000000000000600000000000000000100000000000000d050000000000000000000000000000030000000000000000000000000000000000000000000000100000000000000000000000000000000000000000001060000000000000038bd0b4aae3e40729d19de0db8ad8e9f000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000005abc645f00000000644ea71d59bc645f00"/224, 0xe0, 0x50fb60}, {&(0x7f0000015300)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x50fc80}, {&(0x7f0000015400)="000000000000000000000000000000000000060000000000000000000000000000000000510000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x50fd20}, {&(0x7f0000015500)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x50fe40}, {&(0x7f0000015600)="0000000000000000000600000000000000000000000000000000b0500000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000", 0x60, 0x50fee0}, {&(0x7f0000015700)="8a4f34d0ecafb6a593aad8d3cc61730ae2ef5cf1dcc828fa3e8a7372169c02049cf2a51c788c42a88d869e1c9e1e79ad00005100000000000100000000000001dde6ed250c6f4c02bc251dbb5ef582e20600000000000000040000000000000004000000000000000000000000f90100000000000000730f0000280000000100000000000000cc0000100000000000430f0000300000000100000000000000cc0000500000000000130f0000300000000100000000000000cc0000690000000000e30e00003000"/224, 0xe0, 0x510000}, {&(0x7f0000015800)="00000000000000000300000000000000000100000000000000006900000000000000190000000000dde6ed250c6f4c02bc251dbb5ef582e20300000000000000000100000000000000005000000000000000190000000000dde6ed250c6f4c02bc251dbb5ef582e20300000000000000000100000000000000001000000000000000400000000000dde6ed250c6f4c02bc251dbb5ef582e20000000000000000", 0xa0, 0x510f40}, {&(0x7f0000015900)="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", 0x320, 0x690000}, {&(0x7f0000015d00)="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", 0xb80, 0x690480}], 0x0, &(0x7f0000016900)) 20:22:23 executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @dest_unreach={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2}, 0x0) 20:22:23 executing program 1: mq_open(&(0x7f0000000280)='\vo\xa9\x8eN\xc5\x8c\x9bn\xc8w\xba\xb01S\x1c\x91\xb5\x01\x1a\a\xbc\x01\xb3\x1eKe\x11\xd6\xf3\xe6\x80\xce\xd8\x80\x1dJQ\xb2D\xcfx\x02\xfc\x14\xfc\xde\x02\x90\xac\xe2S,\r\x8d8\x8d\x1az\xdc\xecs\x13!\xfd\x03\xc6\xf99A\xd7\xbd\xbf\x91\xe9\x80\r\xfa\x16\xedF\x82rg~h\x0e\xbcEM\x97l\x82\xee\xf5\xaevEXe\f?(~\x9c\xe2d\x91\xc0=.E\x973\\[k\x81G\\\xda\xb1\xfe\xe5\xc3s\\\v\x8d\xd8B\x87\x12\xfe\xfax\x01\xd10\x00\x00\x00_P\xec\xc4\xa4\\O\xe1\xf6\"y<\xc1}<\x83\x83\x9dV\xd0\v\xd6me\n\xe7\x8cLAZ\x92\xbdj0\x03\xa9\x1a&\x83\x12\xce\xdfL \x84\xb3\xddIn\xc5|Y\xa5cc\xbc&\xa3\x8b\r\xbe\xf80\nt\xbf\xbdS7\xfdz\xd3\xfbkbs\xb9\xca\"\xc8\x99z\xd5Go|\xddk\xc9\xf3`\x80E\x99\x95\xad\x13\x9c\x8dP{\xb7r/\xf5\xb0^\xb0\x02\xde\xd9\xb9\\\xb9\xa8W\xba\xb04\x95%\xb9B[\xc5%\xa7\x8a\xf9X*\xc1\x9d\x93\xd4\v:\xe8\x01\x1e\x0e!a,\xf6C \x8e#\xa0-N16Q\'\xa0\x1fAd\xb4~L\xf6T\x973h\x89\xcd\xef\xda\\\x04\x03{\x1fEl v#\xc3\x93\xda\xf7\x01\x04\xfeW\xce\x95\x9f\xf9\xdb\xf2\x9d\xdb\x81\xaa \x1b\x80\xbe\xe7\\F\xe7\xa6\xf0N\xd4;\xb4Rb\xeb\"\")\xf8<\x1e\xd5r\xffM]\xb3\xfb\x97\xc1f\v\xa4\xa0n\xa9\xa8\xfc\xba\\,z\xec~\x00\v\xde&\xa7,\xac\xe2\xcc!\x88O\xa0\xe9}\xe5\xec\xec\xd7+\az\xe1+\xcc\x1c\xc13e/\xaf\x01\x81cs\xe5q\xc8\x9do&\xb9\x92\xb2\xe8\x05\xdd\x16\xd5:b\x99\x83W\xfd\xee4\x8a\xe1\t\xe1\xe9\xf2\xcci\xb3\xd0\xb9R\xd3l\a\x03p\xa8;\x7f\'o\xca\x1e\x82\f\xc5\xd8]\xed\x04J~\xc2\x0f\x14\x94\f\xb3\x0e/\xbbW\xa2\xfeA\x12Em\x7f\"X\x12\xa3\x9a\x1bD\xcc=\xcbU+\xff\xadW\xffl}\xb4\x84\xd8\xa6\xb0\xbd@\xd5u\xc7@\xae\xaf\x9f\xdf\xf8\x1ep\xcc\xcbk\xfd\xe8L-1\xed\x8c_|\xe9Z\xfdz\xac\xe6\xfb\xda\'\xa8S|\xf6\xdb\xe6\xe9|\xb3\x9f\x8c\x16z\xf0\x9d\r\xa8\x10\xdc\xd4\x9d9G\xee\xc9\xa2\xb3\x1dw\x96\x1cU/^Y\xbe-\xa3\xb9\xd6\x8e\xf33\xb3L\xb0\xd7\xdb }\x0e\xe4\x1fVR%\xd2\x12b\xa1\xe7A\xdf\x99~\x8a\xc3?\xa3\x88\xff*a\x13\xbd+)\xe8\xb2\x1fc\xd3\xb0\xfd\xed7\xe6\xdc\xbe\xec\x9e\x1bw$\x19\xde659\x05|6\xfe\x1c\xf6\x9dn\x1f^\x06\\\x9f~\x04\x19;\x06`\x9a\x12t:-\x96\xbb\vBr\xb7\x965p\x1e\xb1/\x98W\xc8\x9bm\b\x89\x8d\xe3\xde\x1c\xec\xab\x01\xd0\x172\x84\x99[!\xc2\x19\x11\x81\xbb0\xac%d\xbd\x19\xff\xf5/\\\x05\xef\xd8\xc4g\x8a\xfd\x04w\xfd\xa2\xa9\x84\xad\xa8h\x18\xed\xf61', 0x841, 0x38, 0x0) [ 537.509793][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 537.509810][ T27] audit: type=1800 audit(1650918143.341:428): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 537.554804][ T27] audit: type=1800 audit(1650918143.351:429): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 537.599376][ T27] audit: type=1804 audit(1650918143.431:430): pid=13069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3007481986/syzkaller.QUPDiw/489/bus" dev="sda1" ino=1165 res=1 errno=0 20:22:24 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="b2", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/35, 0x23) 20:22:24 executing program 2: clock_getres(0x2, &(0x7f0000000000)) 20:22:24 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 20:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) 20:22:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@deltaction={0x28, 0x31, 0x4b5d93b27a01edf9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) 20:22:24 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@deltaction={0x28, 0x31, 0x4b5d93b27a01edf9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) 20:22:24 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) [ 538.243737][ T27] audit: type=1800 audit(1650918144.081:431): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 20:22:24 executing program 2: clock_getres(0x2, &(0x7f0000000000)) [ 538.303770][ T27] audit: type=1800 audit(1650918144.131:432): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 538.309047][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.340961][T13082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:22:24 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 20:22:24 executing program 2: clock_getres(0x2, &(0x7f0000000000)) [ 538.356670][ T27] audit: type=1804 audit(1650918144.191:433): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3007481986/syzkaller.QUPDiw/490/bus" dev="sda1" ino=1178 res=1 errno=0 20:22:24 executing program 2: clock_getres(0x2, &(0x7f0000000000)) [ 538.402514][T13082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:22:24 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:24 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 20:22:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@deltaction={0x28, 0x31, 0x4b5d93b27a01edf9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) 20:22:24 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) 20:22:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) 20:22:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@deltaction={0x28, 0x31, 0x4b5d93b27a01edf9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) 20:22:25 executing program 0: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 539.130190][ T27] audit: type=1800 audit(1650918144.961:434): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 539.147200][T13111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.180614][T13111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.207110][ T27] audit: type=1800 audit(1650918145.001:435): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 539.229728][ T27] audit: type=1800 audit(1650918145.011:436): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1165 res=0 errno=0 [ 539.254627][ T27] audit: type=1800 audit(1650918145.011:437): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 20:22:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'bond0\x00', @ifru_flags}) 20:22:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) [ 539.292020][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.299654][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.384105][T13121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:22:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'bond0\x00', @ifru_flags}) [ 539.439326][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:22:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'bond0\x00', @ifru_flags}) [ 539.485323][T13138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:22:25 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:25 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000040)={'bond0\x00', @ifru_flags}) 20:22:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) 20:22:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) 20:22:25 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:25 executing program 0: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x87e, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000000000000000000001"], 0x68) [ 539.927990][T13154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.962817][T13154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:22:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x87e, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000000000000000000001"], 0x68) [ 539.984219][T13157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.995288][T13157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.017854][T13165] dlm: no locking on control device 20:22:25 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x87e, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000000000000000000001"], 0x68) [ 540.123060][T13176] dlm: no locking on control device 20:22:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000480)={@val, @val={0x9, 0x0, 0x1100}, @ipv6=@tipc_packet={0x0, 0x6, "b10161", 0x20, 0x6, 0x0, @empty, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0xfdef) [ 540.166504][T13182] dlm: no locking on control device 20:22:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x87e, 0x0) write$nbd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000000000000000000001"], 0x68) [ 540.214990][T13184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 540.254615][T13184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.261790][T13192] dlm: no locking on control device 20:22:26 executing program 2: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="8078f01cca0fcad74e563432382aab31c9a99049041b1cd6721ec10227c52b56bedf951e32f65011ee510a7d904cfb85da3273a3a529cddff5314623ebb514fe4731bcf0a65885f615e4f73ec793a308b14bf843090950fbb909d418a3f056158897fe38e1818ba783f8331bbca8aacc39f56c2545010d61525c37e5f4369a373b5ed7126cda3c1f5a8b1aa01ec87f0a1957444fa749e6dae7bd5467e7d123207a07cc11e6b3a2e437287f10f0149f82a855c7c459a8eb9f991357625ffcc2056d9fff761fd1a1fa"}) 20:22:26 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:26 executing program 0: open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000000a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r5, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) 20:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 20:22:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="8078f01cca0fcad74e563432382aab31c9a99049041b1cd6721ec10227c52b56bedf951e32f65011ee510a7d904cfb85da3273a3a529cddff5314623ebb514fe4731bcf0a65885f615e4f73ec793a308b14bf843090950fbb909d418a3f056158897fe38e1818ba783f8331bbca8aacc39f56c2545010d61525c37e5f4369a373b5ed7126cda3c1f5a8b1aa01ec87f0a1957444fa749e6dae7bd5467e7d123207a07cc11e6b3a2e437287f10f0149f82a855c7c459a8eb9f991357625ffcc2056d9fff761fd1a1fa"}) 20:22:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="8078f01cca0fcad74e563432382aab31c9a99049041b1cd6721ec10227c52b56bedf951e32f65011ee510a7d904cfb85da3273a3a529cddff5314623ebb514fe4731bcf0a65885f615e4f73ec793a308b14bf843090950fbb909d418a3f056158897fe38e1818ba783f8331bbca8aacc39f56c2545010d61525c37e5f4369a373b5ed7126cda3c1f5a8b1aa01ec87f0a1957444fa749e6dae7bd5467e7d123207a07cc11e6b3a2e437287f10f0149f82a855c7c459a8eb9f991357625ffcc2056d9fff761fd1a1fa"}) 20:22:26 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="8078f01cca0fcad74e563432382aab31c9a99049041b1cd6721ec10227c52b56bedf951e32f65011ee510a7d904cfb85da3273a3a529cddff5314623ebb514fe4731bcf0a65885f615e4f73ec793a308b14bf843090950fbb909d418a3f056158897fe38e1818ba783f8331bbca8aacc39f56c2545010d61525c37e5f4369a373b5ed7126cda3c1f5a8b1aa01ec87f0a1957444fa749e6dae7bd5467e7d123207a07cc11e6b3a2e437287f10f0149f82a855c7c459a8eb9f991357625ffcc2056d9fff761fd1a1fa"}) 20:22:26 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 20:22:26 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 540.973707][ T3651] usb 2-1: new high-speed USB device number 14 using dummy_hcd 20:22:26 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 541.221591][ T3651] usb 2-1: Using ep0 maxpacket: 8 20:22:27 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 20:22:27 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 541.351681][ T3651] usb 2-1: config index 0 descriptor too short (expected 18337, got 18) [ 541.379279][ T3651] usb 2-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 541.404148][ T3651] usb 2-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 541.427047][ T3651] usb 2-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 541.601581][ T3651] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 541.610806][ T3651] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 541.619467][ T3651] usb 2-1: Product: syz [ 541.623817][ T3651] usb 2-1: Manufacturer: syz [ 541.628612][ T3651] usb 2-1: SerialNumber: syz [ 541.972589][ T3651] usb 2-1: USB disconnect, device number 14 20:22:28 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f6c7300005f11cbfd830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70733f0000000500830000000000080001007063690011000200303030060030303a31302e30000000000d0087006c325f64720180730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f6406000000000000000500830001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:28 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:28 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xfed3, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 20:22:28 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:28 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:28 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:28 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:28 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f6c7300005f11cbfd830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70733f0000000500830000000000080001007063690011000200303030060030303a31302e30000000000d0087006c325f64720180730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f6406000000000000000500830001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:28 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:28 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:28 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:28 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) [ 542.791622][ T5051] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 543.041572][ T5051] usb 2-1: Using ep0 maxpacket: 8 [ 543.161710][ T5051] usb 2-1: config index 0 descriptor too short (expected 18337, got 18) [ 543.170076][ T5051] usb 2-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 543.179233][ T5051] usb 2-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 543.189708][ T5051] usb 2-1: config 182 has 0 interfaces, different from the descriptor's value: 67 20:22:29 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:29 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) 20:22:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:29 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8}) [ 543.355238][ T5051] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 543.369028][ T5051] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 543.394401][ T5051] usb 2-1: Product: syz [ 543.404456][ T5051] usb 2-1: Manufacturer: syz [ 543.411358][ T5051] usb 2-1: SerialNumber: syz [ 543.776397][ T5051] usb 2-1: USB disconnect, device number 15 20:22:30 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:30 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f6c7300005f11cbfd830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70733f0000000500830000000000080001007063690011000200303030060030303a31302e30000000000d0087006c325f64720180730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f6406000000000000000500830001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:30 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:30 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x800f000000000000) 20:22:30 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:30 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f6c7300005f11cbfd830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70733f0000000500830000000000080001007063690011000200303030060030303a31302e30000000000d0087006c325f64720180730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f6406000000000000000500830001000000"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:30 executing program 0: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c16000093c1bd896502d9680c7b36bed2f6142cc1e5a2851e63c5c9c50590c13b789096450916b252e5e0395402b396249aa23bbb3807c40eebaa13974d", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xcffffff, 0x7ffffffa}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x3, 0x3, 0x3, 0x2b39f9e6}, 0x10) 20:22:30 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) [ 544.551504][ T5051] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 544.551598][ T3656] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 544.566838][ T3651] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 544.581498][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 544.731619][ T26] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 544.791546][ T5051] usb 4-1: Using ep0 maxpacket: 8 [ 544.813147][ T3656] usb 5-1: Using ep0 maxpacket: 8 [ 544.819109][ T3651] usb 6-1: Using ep0 maxpacket: 8 [ 544.861634][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 544.911621][ T5051] usb 4-1: config index 0 descriptor too short (expected 18337, got 18) [ 544.920964][ T5051] usb 4-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 544.929985][ T5051] usb 4-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 544.940830][ T5051] usb 4-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 544.941703][ T3656] usb 5-1: config index 0 descriptor too short (expected 18337, got 18) [ 544.958949][ T3651] usb 6-1: config index 0 descriptor too short (expected 18337, got 18) [ 544.967489][ T3651] usb 6-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 544.976391][ T3651] usb 6-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 544.986809][ T3656] usb 5-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 544.995638][ T3656] usb 5-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 545.006066][ T22] usb 2-1: config index 0 descriptor too short (expected 18337, got 18) [ 545.014442][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 545.019705][ T3651] usb 6-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 545.028982][ T22] usb 2-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 545.038195][ T3656] usb 5-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 545.047508][ T22] usb 2-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 545.058390][ T22] usb 2-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 545.101595][ T5051] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 20:22:30 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x80401, 0x0) write$sequencer(r0, &(0x7f0000000480)=[@t={0xc1, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x6, "4b13a8d39d3a"}, @raw={0xfe, 0x0, "63182a5f9acb"}], 0x18) [ 545.110746][ T5051] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 545.119181][ T5051] usb 4-1: Product: syz [ 545.128340][ T5051] usb 4-1: Manufacturer: syz [ 545.133012][ T5051] usb 4-1: SerialNumber: syz [ 545.142333][ T26] usb 1-1: config index 0 descriptor too short (expected 18337, got 18) [ 545.150745][ T26] usb 1-1: config 182 has too many interfaces: 67, using maximum allowed: 32 20:22:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x80401, 0x0) write$sequencer(r0, &(0x7f0000000480)=[@t={0xc1, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x6, "4b13a8d39d3a"}, @raw={0xfe, 0x0, "63182a5f9acb"}], 0x18) 20:22:31 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x80401, 0x0) write$sequencer(r0, &(0x7f0000000480)=[@t={0xc1, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x6, "4b13a8d39d3a"}, @raw={0xfe, 0x0, "63182a5f9acb"}], 0x18) [ 545.166039][ T26] usb 1-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 545.176744][ T26] usb 1-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 545.231844][ T3651] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 545.240940][ T3656] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 545.250159][ T3651] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 545.258822][ T22] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 545.268076][ T3656] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 545.276458][ T22] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 545.284957][ T3651] usb 6-1: Product: syz [ 545.289126][ T3651] usb 6-1: Manufacturer: syz [ 545.294118][ T3656] usb 5-1: Product: syz [ 545.298291][ T3656] usb 5-1: Manufacturer: syz [ 545.303288][ T22] usb 2-1: Product: syz [ 545.307443][ T22] usb 2-1: Manufacturer: syz [ 545.312362][ T3651] usb 6-1: SerialNumber: syz [ 545.317275][ T3656] usb 5-1: SerialNumber: syz [ 545.322197][ T22] usb 2-1: SerialNumber: syz [ 545.381698][ T26] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 545.392202][ T26] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 545.400731][ T26] usb 1-1: Product: syz [ 545.405118][ T26] usb 1-1: Manufacturer: syz [ 545.409875][ T26] usb 1-1: SerialNumber: syz [ 545.506414][ T5051] usb 4-1: USB disconnect, device number 18 [ 545.747716][ T3651] usb 6-1: USB disconnect, device number 19 [ 545.754233][ T22] usb 2-1: USB disconnect, device number 16 [ 545.777633][ T3656] usb 5-1: USB disconnect, device number 20 [ 545.849354][ T26] usb 1-1: USB disconnect, device number 20 20:22:32 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x80401, 0x0) write$sequencer(r0, &(0x7f0000000480)=[@t={0xc1, 0x0, 0x0, 0x0, @generic}, @x={0x94, 0x6, "4b13a8d39d3a"}, @raw={0xfe, 0x0, "63182a5f9acb"}], 0x18) 20:22:32 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:32 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:32 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:32 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) 20:22:32 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) [ 546.501506][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 546.551509][ T5051] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 546.559267][ T3663] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 546.567028][ T14] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 546.571486][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 546.591596][ T3651] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 546.761535][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 546.811531][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 546.816682][ T5051] usb 6-1: Using ep0 maxpacket: 8 [ 546.821887][ T3663] usb 4-1: Using ep0 maxpacket: 8 [ 546.831515][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 546.836702][ T3651] usb 1-1: Using ep0 maxpacket: 8 [ 546.901630][ T22] usb 2-1: config index 0 descriptor too short (expected 18337, got 18) [ 546.910122][ T22] usb 2-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 546.919009][ T22] usb 2-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 546.929723][ T22] usb 2-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 546.942058][ T14] usb 5-1: config index 0 descriptor too short (expected 18337, got 18) [ 546.950418][ T14] usb 5-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 546.959389][ T5051] usb 6-1: config index 0 descriptor too short (expected 18337, got 18) [ 546.967932][ T3663] usb 4-1: config index 0 descriptor too short (expected 18337, got 18) [ 546.971629][ T3651] usb 1-1: config index 0 descriptor too short (expected 18337, got 18) [ 546.976393][ T3663] usb 4-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 546.987463][ T3651] usb 1-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 546.993973][ T5051] usb 6-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 547.002702][ T3651] usb 1-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 547.013245][ T5051] usb 6-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 547.022078][ T3651] usb 1-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 547.032016][ T14] usb 5-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 547.051632][ T3663] usb 4-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 547.062793][ T5051] usb 6-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 547.072670][ T3663] usb 4-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 547.081627][ T26] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 547.081946][ T14] usb 5-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 547.131684][ T22] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 547.140870][ T22] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 547.149341][ T22] usb 2-1: Product: syz [ 547.153835][ T22] usb 2-1: Manufacturer: syz [ 547.158437][ T22] usb 2-1: SerialNumber: syz [ 547.191733][ T3651] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 547.200908][ T3651] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 547.211211][ T3651] usb 1-1: Product: syz [ 547.215620][ T3651] usb 1-1: Manufacturer: syz [ 547.220219][ T3651] usb 1-1: SerialNumber: syz [ 547.261914][ T3663] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 547.262719][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.270975][ T3663] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 547.288945][ T5051] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 547.298176][ T14] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 547.300051][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.315448][ T5051] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 547.318130][ T26] usb 3-1: Product: syz [ 547.328120][ T14] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 547.328397][ T26] usb 3-1: Manufacturer: syz [ 547.338533][ T14] usb 5-1: Product: syz [ 547.341757][ T26] usb 3-1: SerialNumber: syz [ 547.345643][ T5051] usb 6-1: Product: syz [ 547.356604][ T14] usb 5-1: Manufacturer: syz [ 547.361298][ T3663] usb 4-1: Product: syz [ 547.365580][ T5051] usb 6-1: Manufacturer: syz [ 547.370356][ T14] usb 5-1: SerialNumber: syz [ 547.375811][ T3663] usb 4-1: Manufacturer: syz [ 547.380501][ T5051] usb 6-1: SerialNumber: syz [ 547.386140][ T3663] usb 4-1: SerialNumber: syz [ 547.399299][ T26] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 547.533808][ T22] usb 2-1: USB disconnect, device number 17 [ 547.597331][ T26] usb 3-1: USB disconnect, device number 12 [ 547.608609][ T3651] usb 1-1: USB disconnect, device number 21 [ 547.753047][ T3663] usb 4-1: USB disconnect, device number 19 [ 547.794602][ T5051] usb 6-1: USB disconnect, device number 20 [ 547.806436][ T14] usb 5-1: USB disconnect, device number 21 20:22:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x34}}, 0x0) 20:22:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x34}}, 0x0) 20:22:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x34}}, 0x0) 20:22:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0x34}}, 0x0) 20:22:33 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 20:22:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 20:22:34 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 20:22:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) 20:22:34 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:34 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000514af108890b07009202ffff07010902a14743b66a6ddb5c1e3adf039f16414a2c87d5e483bcf6e11b3708ab"], 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[], 0x78) 20:22:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 20:22:34 executing program 2: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x1c, "250bfe35ec01dee4c603c889e4b89a187b2a038d9cf6274e0a5ba042"}, &(0x7f0000000100)=0x24) 20:22:34 executing program 2: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x1c, "250bfe35ec01dee4c603c889e4b89a187b2a038d9cf6274e0a5ba042"}, &(0x7f0000000100)=0x24) [ 548.421551][ T3651] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 548.581486][ T22] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 548.601578][ T5051] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 548.601620][ T3656] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 548.671558][ T3651] usb 1-1: Using ep0 maxpacket: 8 [ 548.801579][ T3651] usb 1-1: config index 0 descriptor too short (expected 18337, got 18) [ 548.810270][ T3651] usb 1-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 548.819112][ T3651] usb 1-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 548.829533][ T3651] usb 1-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 548.838800][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 548.851606][ T5051] usb 4-1: Using ep0 maxpacket: 8 [ 548.861526][ T3656] usb 6-1: Using ep0 maxpacket: 8 [ 548.961826][ T22] usb 5-1: config index 0 descriptor too short (expected 18337, got 18) [ 548.970304][ T22] usb 5-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 548.971571][ T5051] usb 4-1: config index 0 descriptor too short (expected 18337, got 18) [ 548.979182][ T22] usb 5-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 548.990153][ T5051] usb 4-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 548.998167][ T3656] usb 6-1: config index 0 descriptor too short (expected 18337, got 18) [ 549.009034][ T5051] usb 4-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 549.015478][ T3651] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 549.034068][ T5051] usb 4-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 549.035077][ T22] usb 5-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 549.053418][ T3656] usb 6-1: config 182 has too many interfaces: 67, using maximum allowed: 32 [ 549.062215][ T3651] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 549.070550][ T3651] usb 1-1: Product: syz [ 549.074737][ T3656] usb 6-1: config 182 has an invalid descriptor of length 92, skipping remainder of the config [ 549.085154][ T3651] usb 1-1: Manufacturer: syz [ 549.089753][ T3651] usb 1-1: SerialNumber: syz [ 549.094476][ T3656] usb 6-1: config 182 has 0 interfaces, different from the descriptor's value: 67 [ 549.201578][ T5051] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 549.210711][ T5051] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 549.219656][ T5051] usb 4-1: Product: syz [ 549.224158][ T5051] usb 4-1: Manufacturer: syz [ 549.228792][ T5051] usb 4-1: SerialNumber: syz [ 549.271703][ T22] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 549.280821][ T22] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 549.289202][ T22] usb 5-1: Product: syz [ 549.293539][ T3656] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice= 2.92 [ 549.302612][ T22] usb 5-1: Manufacturer: syz [ 549.307219][ T22] usb 5-1: SerialNumber: syz [ 549.311862][ T3656] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=7 [ 549.320934][ T3656] usb 6-1: Product: syz [ 549.325728][ T3656] usb 6-1: Manufacturer: syz [ 549.330343][ T3656] usb 6-1: SerialNumber: syz [ 549.481118][ T3651] usb 1-1: USB disconnect, device number 22 [ 549.601039][ T5051] usb 4-1: USB disconnect, device number 20 [ 549.674362][ T22] usb 5-1: USB disconnect, device number 22 [ 549.722597][ T3656] usb 6-1: USB disconnect, device number 21 20:22:35 executing program 2: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x1c, "250bfe35ec01dee4c603c889e4b89a187b2a038d9cf6274e0a5ba042"}, &(0x7f0000000100)=0x24) 20:22:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 2: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@private0}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x1c, "250bfe35ec01dee4c603c889e4b89a187b2a038d9cf6274e0a5ba042"}, &(0x7f0000000100)=0x24) 20:22:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:36 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "b4da163c8fb0ed83294531dac3c15632d52a5635d622d578dbd3bb2cf3870a6382666f297b80c50af5c3cbe0ce2b36605d0a529a6a77ddeaac41e7a64ec30183"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 20:22:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000001380)={'xfrm0\x00'}) 20:22:36 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "b4da163c8fb0ed83294531dac3c15632d52a5635d622d578dbd3bb2cf3870a6382666f297b80c50af5c3cbe0ce2b36605d0a529a6a77ddeaac41e7a64ec30183"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 20:22:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000001380)={'xfrm0\x00'}) 20:22:36 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "b4da163c8fb0ed83294531dac3c15632d52a5635d622d578dbd3bb2cf3870a6382666f297b80c50af5c3cbe0ce2b36605d0a529a6a77ddeaac41e7a64ec30183"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 20:22:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000001380)={'xfrm0\x00'}) 20:22:36 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "b4da163c8fb0ed83294531dac3c15632d52a5635d622d578dbd3bb2cf3870a6382666f297b80c50af5c3cbe0ce2b36605d0a529a6a77ddeaac41e7a64ec30183"}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 20:22:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000001380)={'xfrm0\x00'}) 20:22:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:36 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 20:22:36 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 20:22:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:36 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 20:22:37 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 20:22:37 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 551.112857][T13549] autofs4:pid:13549:autofs_fill_super: pipe file descriptor does not contain proper ops 20:22:37 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 551.221314][T13561] autofs4:pid:13561:autofs_fill_super: pipe file descriptor does not contain proper ops 20:22:37 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) [ 551.344525][T13570] autofs4:pid:13570:autofs_fill_super: pipe file descriptor does not contain proper ops 20:22:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_to_team\x00'}}, 0x80) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @loopback, 0x5}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x7fffffff}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x1f4) 20:22:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:37 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) 20:22:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 20:22:37 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 20:22:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) [ 552.011670][T13584] autofs4:pid:13584:autofs_fill_super: pipe file descriptor does not contain proper ops 20:22:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:37 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:37 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) [ 552.140021][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 552.140109][ T27] audit: type=1804 audit(1650918157.971:458): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/461/bus" dev="sda1" ino=1170 res=1 errno=0 20:22:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) [ 552.497757][ T14] Bluetooth: hci3: command 0x0405 tx timeout [ 552.531758][ T27] audit: type=1800 audit(1650918157.971:459): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1170 res=0 errno=0 20:22:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @fixed}, 0x8) 20:22:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 20:22:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:38 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) 20:22:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r1, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 20:22:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 553.030677][ T27] audit: type=1804 audit(1650918158.851:460): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/462/bus" dev="sda1" ino=1178 res=1 errno=0 20:22:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:39 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) 20:22:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 553.898502][ T27] audit: type=1800 audit(1650918158.851:461): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1178 res=0 errno=0 20:22:39 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) [ 553.952640][ T27] audit: type=1804 audit(1650918159.251:462): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2436463635/syzkaller.eDSpj8/569/bus" dev="sda1" ino=1179 res=1 errno=0 [ 553.985573][ T27] audit: type=1800 audit(1650918159.251:463): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 20:22:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 557.976596][ T27] audit: type=1804 audit(1650918163.351:464): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3562525091/syzkaller.1B0S3d/580/bus" dev="sda1" ino=1166 res=1 errno=0 [ 558.009166][ T27] audit: type=1800 audit(1650918163.351:465): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 558.034181][ T27] audit: type=1804 audit(1650918163.351:466): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/463/bus" dev="sda1" ino=1167 res=1 errno=0 20:22:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) [ 562.623340][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.629660][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.643537][ T27] audit: type=1800 audit(1650918163.351:467): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=0 errno=0 [ 562.691116][ T27] audit: type=1804 audit(1650918163.351:468): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2436463635/syzkaller.eDSpj8/570/bus" dev="sda1" ino=1168 res=1 errno=0 [ 562.724773][ T27] audit: type=1800 audit(1650918163.351:469): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1168 res=0 errno=0 20:22:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) [ 566.187839][ T27] audit: type=1804 audit(1650918163.351:470): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1818945336/syzkaller.ihERke/554/bus" dev="sda1" ino=1169 res=1 errno=0 [ 566.266061][ T27] audit: type=1800 audit(1650918163.351:471): pid=13649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1169 res=0 errno=0 20:22:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:54 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000b621000000000000008000001841000000ffe70000002000000000009500000000000047cdb54a3f43322d9f9d7d27158502b317e0c73c2f7d1e90f304827b6c8211fb2cd2913ee53b08d8048df886e9221629361e58f14141899672080218851e24e5f2c5980e5cc334eb25724fe8"], 0x0, 0x3b3, 0x18, &(0x7f0000000680)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 20:22:54 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) 20:22:54 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) 20:22:54 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) personality(0x0) [ 568.806003][ T27] audit: type=1804 audit(1650918168.041:472): pid=13671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2436463635/syzkaller.eDSpj8/571/bus" dev="sda1" ino=1182 res=1 errno=0 [ 568.888769][ T27] audit: type=1800 audit(1650918168.041:473): pid=13671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1182 res=0 errno=0 20:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) [ 570.271523][ T27] audit: type=1804 audit(1650918168.041:474): pid=13673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1818945336/syzkaller.ihERke/555/bus" dev="sda1" ino=1183 res=1 errno=0 20:22:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x5}) 20:22:56 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) 20:22:56 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 570.367263][ T27] audit: type=1800 audit(1650918168.041:475): pid=13673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 570.406399][ T27] audit: type=1804 audit(1650918168.041:476): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3562525091/syzkaller.1B0S3d/581/bus" dev="sda1" ino=1184 res=1 errno=0 20:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) [ 570.457861][ T27] audit: type=1800 audit(1650918168.041:477): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1184 res=0 errno=0 20:22:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 20:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x5}) 20:22:56 executing program 1: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000ac0)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1a9402) read$char_usb(r0, &(0x7f0000000100)=""/53, 0x35) write$hidraw(r0, &(0x7f0000000080)='&', 0x3888) [ 570.494022][ T27] audit: type=1804 audit(1650918168.051:478): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2914173542/syzkaller.AyEeWl/510/bus" dev="sda1" ino=1185 res=1 errno=0 [ 570.519142][ C1] vkms_vblank_simulate: vblank timer overrun 20:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 20:22:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 20:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x5}) 20:22:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) [ 570.640695][ T27] audit: type=1800 audit(1650918168.051:479): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 20:22:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000003580)="1bdf3e6c2f70e80a41e392d834dfd0ef2cd9944226ef60e640a289b3b71e76528292fdf6ea1e40a1257d100fe149f6e128698155911437687b4647af14275895ec60fb8f04c310627956141e640b7b7e", 0x50, &(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) stat(0x0, &(0x7f0000003800)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x160) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140), 0x0, 0x0, 0x0, 0x4008831}}], 0x2, 0x0) 20:22:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x30}}, 0x0) 20:22:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x5}) 20:22:56 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 20:22:56 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:56 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0x541b, 0x0) 20:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 20:22:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 20:22:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 20:22:56 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 20:22:56 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0x541b, 0x0) 20:22:57 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0x541b, 0x0) 20:22:57 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:57 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 20:22:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:57 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0x541b, 0x0) 20:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 20:22:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:57 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:57 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 20:22:57 executing program 1: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:57 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:57 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:57 executing program 3: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:57 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:22:58 executing program 5: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:58 executing program 1: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:58 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:59 executing program 3: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:59 executing program 5: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:22:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x2}, 0xe) shutdown(r0, 0x1) 20:22:59 executing program 2: r0 = io_uring_setup(0x2b28, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x9, 0x7, 0x0) 20:22:59 executing program 2: r0 = io_uring_setup(0x2b28, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x9, 0x7, 0x0) 20:22:59 executing program 2: r0 = io_uring_setup(0x2b28, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x9, 0x7, 0x0) 20:23:00 executing program 2: r0 = io_uring_setup(0x2b28, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x9, 0x7, 0x0) 20:23:00 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:23:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:00 executing program 3: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:23:00 executing program 1: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:23:00 executing program 5: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:23:00 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:00 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:00 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:01 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='0', r0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:23:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:01 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:01 executing program 1: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:01 executing program 5: syz_io_uring_setup(0x5ea7, &(0x7f0000000000), &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) 20:23:01 executing program 5: syz_io_uring_setup(0x5ea7, &(0x7f0000000000), &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) 20:23:01 executing program 5: syz_io_uring_setup(0x5ea7, &(0x7f0000000000), &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) 20:23:01 executing program 1: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='ubi!'], &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) 20:23:01 executing program 5: syz_io_uring_setup(0x5ea7, &(0x7f0000000000), &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000021f000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/3\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) 20:23:01 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='ubi!'], &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) [ 575.780866][T13939] UBIFS error (pid: 13939): cannot open "ubi!s", error -19 20:23:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00020001342564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 575.889586][T13945] UBIFS error (pid: 13945): cannot open "ubi!s", error -19 [ 576.152549][T13948] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 20:23:02 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='ubi!'], &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) 20:23:02 executing program 1: r0 = syz_clone(0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180), 0x0) r1 = syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000880), 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000009c0)) 20:23:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x1, 0x0, [0x0]}}, 0x29) 20:23:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00020001342564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 20:23:02 executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB='ubi!'], &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) 20:23:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 576.330899][T13951] UBIFS error (pid: 13951): cannot open "ubi!s", error -19 [ 576.484485][T13960] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 20:23:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) 20:23:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:23:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x1, 0x0, [0x0]}}, 0x29) 20:23:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00020001342564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 20:23:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) 20:23:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 576.508115][T13962] UBIFS error (pid: 13962): cannot open "ubi!s", error -19 [ 576.687615][T13978] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 20:23:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) 20:23:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf734830e74) 20:23:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x1, 0x0, [0x0]}}, 0x29) 20:23:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 20:23:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00020001342564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 20:23:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)) [ 577.348877][T13987] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 20:23:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) 20:23:03 executing program 5: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x1, 0x0, [0x0]}}, 0x29) 20:23:03 executing program 4: r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x48}}, 0x0) 20:23:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) 20:23:04 executing program 5: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:04 executing program 4: r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x48}}, 0x0) 20:23:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) 20:23:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 20:23:04 executing program 3: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:04 executing program 4: r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x48}}, 0x0) 20:23:04 executing program 2: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000040000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a8054000a"], 0x94}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x6ff5d, 0x0) 20:23:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) 20:23:04 executing program 4: r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x48}}, 0x0) 20:23:04 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) [ 578.448057][T14033] bridge0: port 1(bridge_slave_0) entered disabled state 20:23:04 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:04 executing program 5: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:04 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:04 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:04 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:04 executing program 3: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:04 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:04 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000040000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a8054000a"], 0x94}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x6ff5d, 0x0) 20:23:05 executing program 2: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:05 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r0, 0x40047451, 0xfffffffffffffffc) 20:23:05 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) 20:23:05 executing program 5: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r0, 0x40047451, 0xfffffffffffffffc) 20:23:05 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="6202c17e7f000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, &(0x7f0000000040), 0x4) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="20576346674d8b3a5d4d68e2bc8be442ff5d146928aaeef9bed41074f80c73c784bbf031b32572fb3f0e43331415cbdfa1eeac7e28a253233f20e9be206861ebf36ad7e780cf7ba25dfa5b414f7512cad471cb5c46f1f3560c", 0x59, 0x4, &(0x7f0000000180)=@file={0x1}, 0x3) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000300)="610000000000020000000000000000486e82a51942622d90189d1cd16572942d859726e5673bb3d2de8864ded5ea7049e206f27e9a12ff548ec371baf78c88bb4f7c436e803896f580f6339466c09dce5f32abe72ed502636a7626d1988d0bcda0b5b1eed0f466793f1541c31f21f8bead9e104ce0d9d7d7759d810ff0c4ef99877ccc8ac6283bf83d33d4a5548734749286b59187d2e06e3fef6faf2027374faa666779272c91054500d656ddffd923c83108beadaf909bd562011b611194ca9f57928977c55d326ac1719bc96ff208af7a021a6daec523d7579806884c25c34843fe68fc5bafca550ef43adbf9fb83d20dfa456b", 0xf5, 0x405, 0x0, 0x0) r3 = accept$unix(r1, 0x0, 0x0) execve(0x0, 0x0, 0x0) dup2(r1, r3) [ 579.325048][T14068] bridge0: port 1(bridge_slave_0) entered disabled state 20:23:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r0, 0x40047451, 0xfffffffffffffffc) 20:23:05 executing program 3: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r0, 0x40047451, 0xfffffffffffffffc) 20:23:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000040000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a8054000a"], 0x94}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x6ff5d, 0x0) [ 580.227266][T14093] bridge0: port 1(bridge_slave_0) entered disabled state 20:23:06 executing program 2: r0 = syz_io_uring_setup(0x1a8, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0xf81, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x270a, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x706b, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 20:23:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x28}}], 0x2, 0x0) 20:23:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f000000a000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8844) 20:23:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x28}}], 0x2, 0x0) 20:23:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x28}}], 0x2, 0x0) 20:23:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x28}}], 0x2, 0x0) 20:23:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000040000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a8054000a"], 0x94}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x6ff5d, 0x0) 20:23:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 584.055759][T14135] bridge0: port 1(bridge_slave_0) entered disabled state 20:23:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000015000000000040", @ANYRES32, @ANYBLOB="00e17e0591000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) 20:23:18 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) [ 592.843109][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xa0}}, 0x0) r5 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 20:23:20 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:20 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:20 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) 20:23:22 executing program 2: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:22 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000015000000000040", @ANYRES32, @ANYBLOB="00e17e0591000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:22 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) [ 596.865820][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:22 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:22 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:22 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:22 executing program 4: syz_clone(0x20082000, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="bdaae326a738d84ae13aab3414965e653a662c969d45e7ea6985d5c8b9d1d6ea91d87381bef84a78daf76199e45f9a778dfbb55641be5a4ab69167a9110449896e31706449d2a89116cc67bf58f8612851e2c1c53db55e873665b897975cf4f5489ec5bfaddda1dcd7b5bd469514c98495cfd09b17760602dc90a276852f716cb97cf6532c27") getresgid(&(0x7f0000004a00), &(0x7f0000004a40), &(0x7f0000004a80)) 20:23:22 executing program 5: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000040)) 20:23:22 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000015000000000040", @ANYRES32, @ANYBLOB="00e17e0591000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:22 executing program 5: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000040)) 20:23:22 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 597.019469][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 597.019486][ T27] audit: type=1804 audit(1650918202.851:500): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/488/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 20:23:22 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ff9000/0x5000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget(0x2, 0x4000, 0x9, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001000)=""/110) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 20:23:22 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:22 executing program 5: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000040)) 20:23:23 executing program 4: syz_clone(0x20082000, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="bdaae326a738d84ae13aab3414965e653a662c969d45e7ea6985d5c8b9d1d6ea91d87381bef84a78daf76199e45f9a778dfbb55641be5a4ab69167a9110449896e31706449d2a89116cc67bf58f8612851e2c1c53db55e873665b897975cf4f5489ec5bfaddda1dcd7b5bd469514c98495cfd09b17760602dc90a276852f716cb97cf6532c27") getresgid(&(0x7f0000004a00), &(0x7f0000004a40), &(0x7f0000004a80)) [ 597.120142][T14245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:23 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:23 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:23 executing program 5: socketpair(0x1d, 0x802, 0x2, &(0x7f0000000040)) 20:23:23 executing program 4: syz_clone(0x20082000, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="bdaae326a738d84ae13aab3414965e653a662c969d45e7ea6985d5c8b9d1d6ea91d87381bef84a78daf76199e45f9a778dfbb55641be5a4ab69167a9110449896e31706449d2a89116cc67bf58f8612851e2c1c53db55e873665b897975cf4f5489ec5bfaddda1dcd7b5bd469514c98495cfd09b17760602dc90a276852f716cb97cf6532c27") getresgid(&(0x7f0000004a00), &(0x7f0000004a40), &(0x7f0000004a80)) 20:23:23 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000015000000000040", @ANYRES32, @ANYBLOB="00e17e0591000000280012000c00010076657468"], 0x48}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 597.519172][ T27] audit: type=1804 audit(1650918203.351:501): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/489/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0 20:23:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:23 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:23 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) [ 597.570892][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:23 executing program 4: syz_clone(0x20082000, &(0x7f0000000580)="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", 0x1000, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)="bdaae326a738d84ae13aab3414965e653a662c969d45e7ea6985d5c8b9d1d6ea91d87381bef84a78daf76199e45f9a778dfbb55641be5a4ab69167a9110449896e31706449d2a89116cc67bf58f8612851e2c1c53db55e873665b897975cf4f5489ec5bfaddda1dcd7b5bd469514c98495cfd09b17760602dc90a276852f716cb97cf6532c27") getresgid(&(0x7f0000004a00), &(0x7f0000004a40), &(0x7f0000004a80)) 20:23:23 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:23 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 598.166718][ T27] audit: type=1804 audit(1650918204.001:502): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3562525091/syzkaller.1B0S3d/623/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 20:23:24 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:24 executing program 2: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:23:24 executing program 1: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400002404f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fff", 0x9, 0x10000}], 0x0, &(0x7f0000011200)) 20:23:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "4677600663aa45269f053922273edbc280ba922a50bed2b58d97aeb48580b54e"}) 20:23:24 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) [ 598.299615][ T27] audit: type=1804 audit(1650918204.131:503): pid=14296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/490/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 20:23:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "4677600663aa45269f053922273edbc280ba922a50bed2b58d97aeb48580b54e"}) 20:23:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000002000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 598.361865][T14306] loop4: detected capacity change from 0 to 256 [ 598.388618][T14306] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:23:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "4677600663aa45269f053922273edbc280ba922a50bed2b58d97aeb48580b54e"}) 20:23:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, "4677600663aa45269f053922273edbc280ba922a50bed2b58d97aeb48580b54e"}) [ 598.431834][T14306] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000ff) [ 598.460622][T14306] FAT-fs (loop4): Filesystem has been set read-only [ 598.468823][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:23:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000002000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 20:23:24 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f001000000000000001000c00d00f020004", 0x1d}], 0x0, &(0x7f0000010200)) [ 598.532359][T14313] bond0: (slave veth11): Enslaving as an active interface with an up link [ 598.689273][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 598.765788][T14324] bond0: (slave veth13): Enslaving as an active interface with an up link [ 599.111621][ T27] audit: type=1804 audit(1650918204.941:504): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3562525091/syzkaller.1B0S3d/624/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 599.193623][ T27] audit: type=1804 audit(1650918205.031:505): pid=14315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2914173542/syzkaller.AyEeWl/553/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 20:23:25 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='udf\x00', 0xc040, 0x0) 20:23:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400002404f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fff", 0x9, 0x10000}], 0x0, &(0x7f0000011200)) 20:23:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000002000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 20:23:25 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:25 executing program 1: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:25 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 599.486458][ T27] audit: type=1804 audit(1650918205.321:506): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2814419838/syzkaller.b5Naft/491/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 20:23:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) [ 599.559314][T14339] loop4: detected capacity change from 0 to 256 [ 599.570486][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 599.589843][T14339] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:23:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a705000000007f51e8ba63cca555fedbe9d8f3b423cdacfa7e32fe0231370cf65515b0e1a38d8665522be18bd10a48b043ccc42646d25d6689b34cbf5ed2d1506ab084a7d06d7535f76907fc6d51f1b265a0e3ccae469e173a649c1cf96587d452d64e7cc957d77578f4c34235138d552100003559c35d6304c0a9a27e96c83e3173d5661cfeec79c66c54c33283ba58d31a20a255d548c54106524cc8e532c8251285c8e09aa88154870e1a8f84e1ba1eb78ac3bed28fd11aeca8588eeb77ad9c58d57e89f10600000000000000f367091e8a650dee7442bcc270b6daed55dd3b691aeb66730db9ac069bc67a97a1ae1f42619a666f58a18e42e3f7b486fafd84012e2a8c38ee0eb309a6d53e8643d5241749fc936dc6df8ac2e3e3498247d8e79a730ed0226bb35d503fb156472e9c7489e18764871b70b3d732a8d6ed0edadef0084c75f18264f38d0fd8d3b0cbcccc799ce008b0af879abeec0cff38dcf49939b6b1204a5590eb2eb94bae1226ce2c9734fce49407b7fd3c5e5e0fca61a8c1a62d9f20c333816af8aa70271f0cd26d818e367da1c2a777e057199ae0e43306de9b114bef8c2f6a834b942073903c2ae8ea6d410380610d24a1216a3d619d0e678e9474147646312c6db67f3a9d1308a758a80b5b93c45dd7e714d13ac67e06229116db43d1a0eff045af65a6168438f70e221b3bca32004dc69bfde223d90c3d988cdd3d7cb69ba0e17f40d119c51fbf5b83e6757260ba952ee6852e8e0fc015a69ddc8dcab69d546f95003e201d4bdcc8e29f6a3cc086aa0bbb855518b19682f10298859df52a4c4b6d01f57a4097eec92b9e46d1d2bf404808058f855b7f1eb29c954d5eff09a215325e24f43c671e9e3024579381c2d974da696c0fceed43fa5a82f37c686d0203df4cb562d10a888578b9a59fe21cb5efafbf12f82667eac9b3df3484ea0fca7c1497f15ab61f046a4e50201807d908180a3bbf69"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) [ 599.618294][T14339] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000ff) [ 599.644700][T14339] FAT-fs (loop4): Filesystem has been set read-only 20:23:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000002000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 599.669150][T14337] bond0: (slave veth15): Enslaving as an active interface with an up link 20:23:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) 20:23:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400002404f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fff", 0x9, 0x10000}], 0x0, &(0x7f0000011200)) 20:23:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f0000000700)={r0, 0x0, 0x0}, 0x10) [ 599.770645][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 599.805789][T14358] loop4: detected capacity change from 0 to 256 [ 599.833446][T14358] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 599.865939][T14358] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000ff) 20:23:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 20:23:25 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 20:23:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 599.886088][T14358] FAT-fs (loop4): Filesystem has been set read-only [ 599.964958][T14353] bond0: (slave veth17): Enslaving as an active interface with an up link [ 600.364543][ T27] audit: type=1804 audit(1650918206.201:507): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2914173542/syzkaller.AyEeWl/554/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 20:23:26 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 600.391847][ T27] audit: type=1804 audit(1650918206.201:508): pid=14347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3562525091/syzkaller.1B0S3d/625/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 20:23:26 executing program 1: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000005240)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x28, 0x0, "de88880a7b0117a7b5e41cac5a0261ed9b21b638422380271d6996cb0197dd50d9cb2ec4964d9b9790daaabff27d6f1ee05e271f20710ed55af06f6f9345ffcf4dceef1441f8c7aef2635e8b28f7d1dc"}, 0xd8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x80000200003) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x10002001}) shutdown(r0, 0x2) 20:23:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400002404f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fff", 0x9, 0x10000}], 0x0, &(0x7f0000011200)) 20:23:26 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 20:23:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 20:23:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x218022000, 0x0, &(0x7f00000004c0), 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 20:23:26 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 20:23:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 20:23:26 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 600.459939][T14373] loop4: detected capacity change from 0 to 256 [ 600.485949][T14373] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:23:26 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) 20:23:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:26 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) [ 600.546335][T14373] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000ff) [ 600.580037][T14373] FAT-fs (loop4): Filesystem has been set read-only 20:23:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) [ 600.861747][ T5050] usb 1-1: new high-speed USB device number 23 using dummy_hcd 20:23:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x218022000, 0x0, &(0x7f00000004c0), 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 20:23:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) 20:23:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:26 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'macvlan0\x00'}) [ 601.096182][ T27] audit: type=1804 audit(1650918206.931:509): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2914173542/syzkaller.AyEeWl/555/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 20:23:27 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) [ 601.161510][ T5050] usb 1-1: Using ep0 maxpacket: 8 20:23:27 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) 20:23:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x218022000, 0x0, &(0x7f00000004c0), 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) [ 601.291929][ T5050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.326112][ T5050] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.353972][ T5050] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 601.374295][ T5050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.444532][ T5050] hub 1-1:1.0: bad descriptor, ignoring hub [ 601.452923][ T5050] hub: probe of 1-1:1.0 failed with error -5 [ 601.761665][ T3651] usb 1-1: USB disconnect, device number 23 20:23:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) 20:23:27 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$nfc_llcp(r0, 0x11c, 0x3, 0x0, 0x7fffffffefff) 20:23:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:28 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'macvlan0\x00'}) 20:23:28 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x218022000, 0x0, &(0x7f00000004c0), 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 20:23:28 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$nfc_llcp(r0, 0x11c, 0x3, 0x0, 0x7fffffffefff) 20:23:28 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'macvlan0\x00'}) 20:23:28 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$nfc_llcp(r0, 0x11c, 0x3, 0x0, 0x7fffffffefff) 20:23:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:28 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'macvlan0\x00'}) 20:23:28 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$nfc_llcp(r0, 0x11c, 0x3, 0x0, 0x7fffffffefff) [ 602.461656][ T22] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 602.704262][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 602.821742][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.832024][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 602.840920][ T22] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 602.850231][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.892834][ T22] hub 1-1:1.0: bad descriptor, ignoring hub [ 602.898771][ T22] hub: probe of 1-1:1.0 failed with error -5 [ 603.233085][ T22] usb 1-1: USB disconnect, device number 24 20:23:29 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) 20:23:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 20:23:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='oom_score_adj\x00') read$msr(r0, 0x0, 0x0) 20:23:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000100)=@delnexthop={0x20, 0x5f, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [{0x8}]}, 0x20}}, 0x0) 20:23:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='oom_score_adj\x00') read$msr(r0, 0x0, 0x0) 20:23:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000100)=@delnexthop={0x20, 0x5f, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [{0x8}]}, 0x20}}, 0x0) 20:23:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000100)=@delnexthop={0x20, 0x5f, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [{0x8}]}, 0x20}}, 0x0) 20:23:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='oom_score_adj\x00') read$msr(r0, 0x0, 0x0) 20:23:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000600)='oom_score_adj\x00') read$msr(r0, 0x0, 0x0) 20:23:30 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) [ 604.301626][ T5050] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 604.561560][ T5050] usb 1-1: Using ep0 maxpacket: 8 [ 604.681770][ T5050] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.691913][ T5050] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 604.701144][ T5050] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 604.710250][ T5050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.772942][ T5050] hub 1-1:1.0: bad descriptor, ignoring hub [ 604.778909][ T5050] hub: probe of 1-1:1.0 failed with error -5 [ 605.112207][ T22] usb 1-1: USB disconnect, device number 25 20:23:31 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) 20:23:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002880)={&(0x7f0000000100)=@delnexthop={0x20, 0x5f, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [{0x8}]}, 0x20}}, 0x0) 20:23:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:31 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 607.093394][ T140] usb 1-1: new high-speed USB device number 26 using dummy_hcd 20:23:32 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) [ 608.583686][ T140] usb 1-1: Using ep0 maxpacket: 8 20:23:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:34 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 608.864462][ T140] usb 1-1: device descriptor read/all, error -71 20:23:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:37 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:37 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:37 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:37 executing program 2: bpf$PROG_LOAD(0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 20:23:38 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000a00)) 20:23:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:38 executing program 2: bpf$PROG_LOAD(0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 20:23:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:38 executing program 2: bpf$PROG_LOAD(0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 20:23:38 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000a00)) 20:23:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 20:23:38 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:38 executing program 2: bpf$PROG_LOAD(0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 20:23:38 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000a00)) 20:23:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:38 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) [ 613.281633][ T5050] usb 6-1: new high-speed USB device number 22 using dummy_hcd 20:23:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) 20:23:39 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000009c0), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000a00)) 20:23:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001a000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x9}) 20:23:39 executing program 4: syz_usb_connect$cdc_ecm(0x3, 0x162, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x150, 0x1, 0x1, 0x2, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "5469fd0ccf64"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x9, 0x17}, [@mbim_extended={0x8, 0x24, 0x1c, 0x35e, 0x7, 0xb6}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x80, 0x101}, @mdlm_detail={0xd6, 0x24, 0x13, 0xb5, "7d926884ba1660436aff422cd2821af77ab3961e76d4c126bbd61e02fb9bc167fab21e83212029df5f7a6baf2ef78d498631c48dbf18edeb3009e45715ec4430821dbdeec194ff9c49fc8d3a4fa4b9ce9fd2cf051bef368b9cccce8722b9e307f2baf0ec677309aab6d904c13e41f882c3e7cada06498fd087380da31294a760f8fe902fcbe5da2213bc9bd41ec713b41941a6b7623ed4c26b608b4d8855621301f277c25242b63349dd3c32d637a63d50e9aa893ee44953b1604668031e53c6d1d7dca3b1d1a6fff38b96257b06ca93b4d4"}, @obex={0x5, 0x24, 0x15, 0x642}, @ncm={0x6, 0x24, 0x1a, 0x9e, 0x22}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x3f, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x24, 0x2, 0x9f, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xd8, 0x81, 0x12, 0x20, 0x18}, 0x3f, &(0x7f0000000380)={0x5, 0xf, 0x3f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x34, 0x10, 0xa, "cf9668baca103d421d47b1f32c7eb23b1eae1d303f37a6b452a2c3eeb09078ee08e05ae3fdba2a7960c68c6dcbb32c1421"}]}, 0x8, [{0x56, &(0x7f00000003c0)=@string={0x56, 0x3, "e5d6279411944f6627a7457ebdb96a60ac3e141b5c32d7dc1d4ce3c3c8fd3c884f38be88d06a6e109af0084ba49eb82ab504f8166bc0bc987ac2da83f931c5f2d7acfb1c0ecbe7cef4a7f15f1bf81b9c0c0b85c4"}}, {0x4, &(0x7f0000000440)=@string={0x4, 0x3, "51e4"}}, {0xb5, &(0x7f0000000480)=@string={0xb5, 0x3, "424ba9886e265e856c4a59976f917a8e860ca300ecf3debf713e170068cbc8dcd23e8876c2bd1693db929ed67997d6b14bc469aca1a7ace5f066d377e4fc7d0041de63131819c342e6fb8d0ae3440d415d9ca9f44bb322d440be73aa30da4f97bd4b10d6bcc14522563ef5f2f32f1f6ed0ddd14ab23913c243ebee9863558b7837f43ccbd314555d12b68a5d4c28cc802ce5162f82079e7ba9f7ed386fcf42eaac971db54e01ca4f7510afc92a19a67f16b7a6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3401}}, {0x21, &(0x7f0000000580)=@string={0x21, 0x3, "9c7253662e0183cf3c8293f650a50209f6be4c3602988e1afa3e98d2fdab5d"}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "9528e1519adfac365dafa2c1457a0b1852b27f4ca0aa3a54323ee7715a2e9efe834816b074a54fae8e17182bfadf8f2bf632c6526fb236cc91c29a8de4405f5de846b2bd9addb2fcd43c7b6f965b91a7da01a7c37df6476a7bf18222f7b64cb6ae20c31c728ce74ee03f3fa9f0c822d75b3a7d2e06a17be28f9bb8ec592d98d13333d5fe55fc1141513ebadfcacb08799fbfb34cdff446c03e4cfe6ffdae54a242555a6750e63a273b7d9f5aaec0bba6f48646b294198f872bcb47a1e6b2c34a9d29932a1991fd759231a02c0ffb92fe99c79a2eed0a023b315bcea26fd0ba42f40c7f4c88deaa995c3097b1b4de90"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44b}}]}) 20:23:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) [ 613.671560][ T5050] usb 6-1: Using ep0 maxpacket: 32 20:23:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1}, 0x4) 20:23:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:39 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 613.822227][ T5050] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 613.842947][ T22] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 614.031633][ T5050] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 614.040993][ T5050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.049427][ T5050] usb 6-1: Product: syz [ 614.054387][ T5050] usb 6-1: SerialNumber: syz [ 614.104657][ T5050] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 614.291645][ T22] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 614.302920][ T22] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 614.306963][ T5050] usb 6-1: USB disconnect, device number 22 [ 614.315177][ T22] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 36 [ 614.328778][ T22] usb 5-1: config 1 interface 0 has no altsetting 0 [ 614.492641][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.501816][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.509809][ T22] usb 5-1: Product: 䭂袩♮蕞䩬静酯蹺ಆ£뿞㹱쭨㻒皈뷂錖鋛횞靹뇖쑋걩ꞡ曰矓ﳤ}፣ᤘ䋃ﯦઍ䓣䄍鱝덋퐢빀ꩳ靏䮽혐솼≅㹖⿳渟䫑㦲숓飮啣碋쬼ᓓ嵕똒嶊⡌背⼖ނ箞㣭콯鞬딝Ŏ俊ၵ즯ᤪ羦뜖 [ 614.535689][ T22] usb 5-1: Manufacturer:  [ 614.540287][ T22] usb 5-1: SerialNumber: 㐁 [ 614.561876][T14670] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 614.568826][T14670] raw-gadget gadget: fail, usb_ep_enable returned -22 20:23:40 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb3, &(0x7f0000000080)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:23:40 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) [ 614.901698][ T22] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 614.913259][ T22] usb 5-1: USB disconnect, device number 23 [ 615.131922][ T26] usb 6-1: new high-speed USB device number 23 using dummy_hcd 20:23:41 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb3, &(0x7f0000000080)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:23:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:41 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001005d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb4ba431ca711fcd0cdfa146ec558e24e70ee25a9937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318f0ec0efd49897a745f801ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb62203099e90f4580d760751b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902c9e7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c354b751c51160fbcbbf35b1e7bca32e6ea09c346dfebd31a0808b802000000000000ea334d8323023c5337669dd27080e71113610e10d858e8327ef01fb6c86adac122330611ecdc7cec61ce63000000800117009a9ab359b4eea0c6e957673f00000000800000dbfd2e6dfe0ca0423d0aa3334e83d5444036303767ff7f4f29e5dad9796edb697a6ea0182babc18cae2edca9590c35c4a842960171127d05dfe363c8e550aae3997de78828e8c38c9524a90a93ec018bddef1117009525322aa1825d1ba660c84b9f4fa15e977ca6d43a793b89e5342fe6e4e9f420a3ec464e711a3dd11a425f9b015cc892227c94cfc2ed8e5e7871dccb2653dc24d3cabcd8bbe9206687dd095e63ae6cb0d2834731c728f214f56c1b46d4cf02c1bf8b85ac3e195e7c6448fe5cae98b219f544347534b8d033449067c9dbe9e225eb76bde539a8284230fd321e9ed48bc93dd45cdcb9bd9d1344f5711b399b6588a410bb9800726153f8e19c8b9356526fd4d85409110565709a197992512c1001e95a09d4dd34cf7f446bd1c636fe88d41952a66fe380ae83d28245743c223d5dd793fdfa80f502878a7816dd12088fa073fbad3b05201e5431035fb78dbd2307086b7c795ae8c225e1a7782c8c24c30ec62a1155d567e100a2c7f3abf4d80adea42e0cc41287c0543ce0cb262c120649164cc0a0aa479bd31fd3dd5c1919da34a6cdd51c19d9e8e44c072065003dace714e0bb568e25d80f43a9c3c9d5cf53ed8c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:41 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb3, &(0x7f0000000080)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:23:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) [ 615.381466][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 615.511644][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 615.611569][ T3657] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 615.681624][ T26] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 615.690739][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.699123][ T26] usb 6-1: Product: syz [ 615.703467][ T26] usb 6-1: SerialNumber: syz [ 615.754123][ T26] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 615.851563][ T3657] usb 5-1: Using ep0 maxpacket: 32 [ 615.971064][ T26] usb 6-1: USB disconnect, device number 23 [ 615.971671][ T3657] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 616.141715][ T3657] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 616.150792][ T3657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.159104][ T3657] usb 5-1: Product: syz [ 616.163497][ T3657] usb 5-1: SerialNumber: syz [ 616.202724][ T3657] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 616.417497][ T3657] usb 5-1: USB disconnect, device number 24 20:23:42 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb3, &(0x7f0000000080)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 20:23:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) [ 616.771578][ T26] usb 6-1: new high-speed USB device number 24 using dummy_hcd 20:23:42 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) [ 617.025130][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 617.161665][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 617.211889][ T3657] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 617.351625][ T26] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 617.360690][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.368750][ T26] usb 6-1: Product: syz [ 617.373003][ T26] usb 6-1: SerialNumber: syz [ 617.434091][ T26] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 617.451631][ T3657] usb 5-1: Using ep0 maxpacket: 32 [ 617.571699][ T3657] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 617.647189][ T26] usb 6-1: USB disconnect, device number 24 [ 617.742064][ T3657] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 617.751159][ T3657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.759217][ T3657] usb 5-1: Product: syz [ 617.763449][ T3657] usb 5-1: SerialNumber: syz [ 617.815968][ T3657] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 618.027968][ T3657] usb 5-1: USB disconnect, device number 25 20:23:44 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x3}, 0x24}}, 0x0) 20:23:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000280)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) dup3(r0, r1, 0x0) 20:23:44 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) [ 618.471615][ T26] usb 6-1: new high-speed USB device number 25 using dummy_hcd 20:23:44 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}]}) 20:23:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x3}, 0x24}}, 0x0) 20:23:44 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) 20:23:44 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 20:23:44 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xf230) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 20:23:44 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) 20:23:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x3}, 0x24}}, 0x0) [ 618.721512][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 618.841526][ T3654] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 618.841679][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 619.021720][ T26] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 619.030822][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.038990][ T26] usb 6-1: Product: syz [ 619.043661][ T26] usb 6-1: SerialNumber: syz [ 619.081633][ T3654] usb 5-1: Using ep0 maxpacket: 32 [ 619.085097][ T26] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 619.201654][ T3654] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 619.303862][ T26] usb 6-1: USB disconnect, device number 25 [ 619.382511][ T3654] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40 [ 619.393501][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.401647][ T3654] usb 5-1: Product: syz [ 619.405810][ T3654] usb 5-1: SerialNumber: syz [ 619.452737][ T3654] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 619.670194][ T5050] usb 5-1: USB disconnect, device number 26 20:23:45 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) 20:23:45 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 20:23:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x3}, 0x24}}, 0x0) 20:23:45 executing program 0: getpgid(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x787}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) syz_clone(0x44005500, &(0x7f0000000000)="6852430f599ead1aba63ba4703148a9b98e7140140c87484a1429239bc798faee488432357", 0x25, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000010c0)="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") syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x200800) 20:23:45 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) 20:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 20:23:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x800002}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffd}}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 20:23:46 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001140)) pipe2(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$msdos(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f00000016c0)=[{0x0}], 0x0, &(0x7f0000001700)) 20:23:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xc9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 20:23:46 executing program 2: prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 20:23:46 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x800002}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffd}}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 20:23:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001140)) pipe2(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$msdos(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f00000016c0)=[{0x0}], 0x0, &(0x7f0000001700)) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xc9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 20:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x800002}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffd}}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 20:23:46 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001140)) pipe2(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$msdos(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f00000016c0)=[{0x0}], 0x0, &(0x7f0000001700)) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xc9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001140)) pipe2(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) syz_mount_image$msdos(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, 0x1, &(0x7f00000016c0)=[{0x0}], 0x0, &(0x7f0000001700)) 20:23:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0xc9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 20:23:46 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x800002}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffd}}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 20:23:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:23:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:23:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:23:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x6}}) 20:23:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:23:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:23:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="c744240000000000c744240203000000c7442406000000000f01142464660f388190f3da0000f30fc73767640f340f01c465d095c3170000b9800000c00f3235002000000f30c4c20dafae0e000000c4c279135e070fc7a900000100", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:23:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x84) 20:23:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:23:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20:23:46 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@generic="a9d3930ecf911f46bf222466c284118a90327a2fb274c170e270ba2f1f8a03a55efb0334b06adc6ac13625aa3237ff6a35a493917e0a5690f8ca2eacae609734aa7b8752a4dc03981b2e137d80c7665654749bf7848f2962818d3ea498e076f5617b3c23ed945579e2fadac83b5c504ea418b8d9207166fc427e64bd73cd6fff7b493506c36023be9b96ece685cc31cec75c659192ab06d4fd185c12f8976a0dc7fde25ebf430aab2f9fe16d6278d40040fed3b4ddbe9dee9298351700"/201]}]}, 0xe0}], 0x1}, 0x0) 20:23:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x84) [ 621.062373][T14891] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 20:23:46 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@generic="a9d3930ecf911f46bf222466c284118a90327a2fb274c170e270ba2f1f8a03a55efb0334b06adc6ac13625aa3237ff6a35a493917e0a5690f8ca2eacae609734aa7b8752a4dc03981b2e137d80c7665654749bf7848f2962818d3ea498e076f5617b3c23ed945579e2fadac83b5c504ea418b8d9207166fc427e64bd73cd6fff7b493506c36023be9b96ece685cc31cec75c659192ab06d4fd185c12f8976a0dc7fde25ebf430aab2f9fe16d6278d40040fed3b4ddbe9dee9298351700"/201]}]}, 0xe0}], 0x1}, 0x0) 20:23:47 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@generic="a9d3930ecf911f46bf222466c284118a90327a2fb274c170e270ba2f1f8a03a55efb0334b06adc6ac13625aa3237ff6a35a493917e0a5690f8ca2eacae609734aa7b8752a4dc03981b2e137d80c7665654749bf7848f2962818d3ea498e076f5617b3c23ed945579e2fadac83b5c504ea418b8d9207166fc427e64bd73cd6fff7b493506c36023be9b96ece685cc31cec75c659192ab06d4fd185c12f8976a0dc7fde25ebf430aab2f9fe16d6278d40040fed3b4ddbe9dee9298351700"/201]}]}, 0xe0}], 0x1}, 0x0) 20:23:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x84) 20:23:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) write$capi20_data(r0, 0x0, 0x68) 20:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@generic="a9d3930ecf911f46bf222466c284118a90327a2fb274c170e270ba2f1f8a03a55efb0334b06adc6ac13625aa3237ff6a35a493917e0a5690f8ca2eacae609734aa7b8752a4dc03981b2e137d80c7665654749bf7848f2962818d3ea498e076f5617b3c23ed945579e2fadac83b5c504ea418b8d9207166fc427e64bd73cd6fff7b493506c36023be9b96ece685cc31cec75c659192ab06d4fd185c12f8976a0dc7fde25ebf430aab2f9fe16d6278d40040fed3b4ddbe9dee9298351700"/201]}]}, 0xe0}], 0x1}, 0x0) 20:23:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) write$capi20_data(r0, 0x0, 0x68) 20:23:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) write$capi20_data(r0, 0x0, 0x68) 20:23:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6c, &(0x7f0000000340)={r1, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x84) 20:23:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) write$capi20_data(r0, 0x0, 0x68) 20:23:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1a5, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) 20:23:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1a5, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) 20:23:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1a5, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) 20:23:47 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1a5, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) 20:23:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f01cb0f20e06635002000000f22e03ed9f166b9f50800000f32ba2000b88100efbaf80c66b8580c838266efbafc0c66b8cb00000066ef66b9800000c00f326635010000000f300f01c90f01c5b8ff008ee8", 0x52}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:23:48 executing program 5: r0 = gettid() pidfd_open(r0, 0x0) 20:23:48 executing program 5: r0 = gettid() pidfd_open(r0, 0x0) 20:23:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x1d0, 0x2a5, 0x150, 0x1d0, 0x228, 0x2a0, 0x2a0, 0x2f8, 0x2a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 20:23:48 executing program 5: r0 = gettid() pidfd_open(r0, 0x0) 20:23:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x1d0, 0x2a5, 0x150, 0x1d0, 0x228, 0x2a0, 0x2a0, 0x2f8, 0x2a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) [ 622.450279][T15026] Cannot find add_set index 0 as target [ 622.517251][T15029] Cannot find add_set index 0 as target 20:23:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:48 executing program 5: r0 = gettid() pidfd_open(r0, 0x0) 20:23:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x1d0, 0x2a5, 0x150, 0x1d0, 0x228, 0x2a0, 0x2a0, 0x2f8, 0x2a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) [ 622.776852][T15036] Cannot find add_set index 0 as target 20:23:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0100f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x5, 0xa, "41731fb0cf070000"}]}}}}}}}}, 0x0) 20:23:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="7f454c46ff6a010707000000000000000300030007000000c2030000000000004000000000000000d500000000000000ff7f0000e2f63700feff0101030001000700000001000000de8f7eddf181db00000000000000c26900000000000009000000000000000600000000000000e2f55454f73304e41790402ded15e14a057b7b6cba6292cb2aaecc43f2c551f039a5d99317d822da000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000733df66d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fb0d9d1568dbf0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d9daaad423711730c968c7c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000fcae5f7a010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006700000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb3bf1c58e7a027fbfea46ad4028f3c0a7eb9e49f91d4ac4e9a27ff0caa4acbd47de2a781555db9e21d7441e3db22eaa9d49adfd8502db9b677350b5fcb12c7802b1f1ea088b14392d18eb43168dfbb55c3915d3a15930db836e"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) 20:23:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x1d0, 0x2a5, 0x150, 0x1d0, 0x228, 0x2a0, 0x2a0, 0x2f8, 0x2a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'sane-20000\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@local, @mcast2, [], [], 'erspan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 20:23:48 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 622.864352][T15045] Cannot find add_set index 0 as target [ 622.864901][T15046] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:23:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0100f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x5, 0xa, "41731fb0cf070000"}]}}}}}}}}, 0x0) 20:23:48 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 622.938633][T15049] bridge0: port 3(erspan0) entered blocking state 20:23:48 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 623.001444][T15054] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 623.020926][T15049] bridge0: port 3(erspan0) entered disabled state [ 623.082092][T15049] device erspan0 entered promiscuous mode [ 623.088176][T15049] bridge0: port 3(erspan0) entered blocking state [ 623.094701][T15049] bridge0: port 3(erspan0) entered forwarding state 20:23:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0100f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x5, 0xa, "41731fb0cf070000"}]}}}}}}}}, 0x0) 20:23:49 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 20:23:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) [ 623.355412][T15066] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:23:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) 20:23:49 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 20:23:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0100f2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x5, 0xa, "41731fb0cf070000"}]}}}}}}}}, 0x0) 20:23:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) 20:23:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5602, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0, "f6ed7512a3cebfa326714c2d46cdf7aa1c4746"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, "000002708a221f020004000400001057f84a42"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000280)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000402) fallocate(r2, 0x0, 0x0, 0x110001) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x10000000000000b6, &(0x7f0000001f00)=[{&(0x7f0000001840)=""/126, 0x2000037e}, {0x0}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r3}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5414, &(0x7f0000000040)) 20:23:49 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) [ 623.575412][T15080] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:23:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc4, 0x39, 0x6c, 0x8, 0x2040, 0xf5a0, 0x2dc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x72, 0x8b}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 20:23:49 executing program 4: mkdir(&(0x7f0000000140)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./control\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000088100000000000020020"], 0x24, 0x0) getxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 20:23:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="2a973195a154f96c79f15c1451cb81065782ebafe02b7ce0c629e00d35a30cf970d41b16ec3bce2ef5bd23b60bce37f86466660d68c1a8d3299ec0ea02603a0eeaccf6a57c75fbdfcd9e14cbbb955fb85f326c725be67bee3a2976bee0420f007c32598bbd8c196ffe768900dcf73392b11b9617f507b3c27b2b6b6166b50678f52fc5de1e8c56f7ae243d64d61f60174d66d182726304f8598f18587fb4daf9435bd9fe913214f5fb535dbe180ec13cffa045689a59162f7fdf570fd5d644fdd9381b164dbdb0a028ab6481ac0cba4bbc4adacd3a6b7f4e931593a2b8f928649ec11357decd19241a49eaed7863ca3005209a5da91aebfabdef", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) 20:23:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) 20:23:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) [ 623.991757][ T26] usb 3-1: new high-speed USB device number 13 using dummy_hcd 20:23:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) 20:23:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000001900)={0xa, 0xfffe, 0x2000000, @mcast2, 0xdf2b73ef}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x4a0) sendmmsg(r3, &(0x7f0000001c40)=[{{&(0x7f0000001380)=@can, 0x80, &(0x7f0000001340)=[{&(0x7f0000001940)="4284410741227a0980f95b9eef629459291dfcb27f6f7deaa69fb32ac0695aaa90a67f23aeabf4b7c45e37bbf3b07efb7c3f76ec4c82473e05af8b2b8836af705bce8b993e69bae8becb8cd4e15fa08c472dd773b75bef805eec25e4da4d", 0x5e}, {&(0x7f00000019c0)="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", 0xfa}], 0x2}}], 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x200000, @empty, 0x7fffffff}, 0x1c) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3dd5c38ea1714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0x7ff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r5, 0xe, @inherit={0x88, &(0x7f0000001280)=ANY=[@ANYBLOB="01000000000000000800000000000000010001000000000000000000000007000000000000400000090000000000000000020000000000003f0000000000000003000000000000001000000000800000010000000000000000000080000000001f000000000000000900000000000000020000000000000001000000000000000900000000000000"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000003, @cisco=&(0x7f00000000c0)={0x9, 0x80000001}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000001400)) [ 624.065510][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.084684][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 20:23:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) 20:23:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit_2292={{0x14, 0x29, 0x1600bd74}}], 0x18}}], 0x2, 0x0) 20:23:49 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) 20:23:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) [ 624.281508][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 624.681648][ T26] usb 3-1: New USB device found, idVendor=2040, idProduct=f5a0, bcdDevice=2d.c5 [ 624.690914][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.699072][ T26] usb 3-1: Product: syz [ 624.703727][ T26] usb 3-1: Manufacturer: syz [ 624.708346][ T26] usb 3-1: SerialNumber: syz [ 624.716743][ T26] usb 3-1: config 0 descriptor?? [ 624.773118][ T26] smsusb:smsusb_probe: board id=8, interface number 0 [ 624.780059][ T26] smsusb:smsusb_probe: Device initialized with return code -19 [ 624.974701][ T3657] usb 3-1: USB disconnect, device number 13 20:23:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) 20:23:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit_2292={{0x14, 0x29, 0x1600bd74}}], 0x18}}], 0x2, 0x0) 20:23:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0xc26d, 0x7e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00c642d, &(0x7f0000000100)={r1}) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000100), 0x0) creat(0x0, 0x0) 20:23:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) 20:23:51 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc4, 0x39, 0x6c, 0x8, 0x2040, 0xf5a0, 0x2dc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x72, 0x8b}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 20:23:51 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:51 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) 20:23:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit_2292={{0x14, 0x29, 0x1600bd74}}], 0x18}}], 0x2, 0x0) 20:23:51 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit_2292={{0x14, 0x29, 0x1600bd74}}], 0x18}}], 0x2, 0x0) 20:23:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) 20:23:51 executing program 0: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) 20:23:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 20:23:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 625.791523][ T26] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 625.846341][T15156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. [ 626.043003][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 626.401594][ T26] usb 3-1: New USB device found, idVendor=2040, idProduct=f5a0, bcdDevice=2d.c5 [ 626.410679][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.419144][ T26] usb 3-1: Product: syz [ 626.423434][ T26] usb 3-1: Manufacturer: syz [ 626.428252][ T26] usb 3-1: SerialNumber: syz [ 626.435392][ T26] usb 3-1: config 0 descriptor?? [ 626.473059][ T26] smsusb:smsusb_probe: board id=8, interface number 0 [ 626.479885][ T26] smsusb:smsusb_probe: Device initialized with return code -19 [ 626.689590][ T3656] usb 3-1: USB disconnect, device number 14 20:23:53 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc4, 0x39, 0x6c, 0x8, 0x2040, 0xf5a0, 0x2dc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x72, 0x8b}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 20:23:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 20:23:53 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:53 executing program 0: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:53 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 20:23:53 executing program 1: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 627.378552][T15184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. 20:23:53 executing program 0: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 627.508506][T15186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. [ 627.531663][ T3654] usb 3-1: new high-speed USB device number 15 using dummy_hcd 20:23:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:53 executing program 1: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:53 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) [ 627.789003][T15194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. [ 627.807659][ T3654] usb 3-1: Using ep0 maxpacket: 8 [ 627.886400][T15204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. [ 628.211879][ T3654] usb 3-1: New USB device found, idVendor=2040, idProduct=f5a0, bcdDevice=2d.c5 [ 628.224688][ T3654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.233665][ T3654] usb 3-1: Product: syz [ 628.237930][ T3654] usb 3-1: Manufacturer: syz [ 628.244907][ T3654] usb 3-1: SerialNumber: syz [ 628.261853][ T3654] usb 3-1: config 0 descriptor?? [ 628.323062][ T3654] smsusb:smsusb_probe: board id=8, interface number 0 [ 628.329932][ T3654] smsusb:smsusb_probe: Device initialized with return code -19 [ 628.537489][T15208] usb 3-1: USB disconnect, device number 15 20:23:54 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={0x0}}, 0x0) unshare(0x28020000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x2000000}, 0x6e}], 0x61, 0x0) 20:23:54 executing program 0: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:54 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc4, 0x39, 0x6c, 0x8, 0x2040, 0xf5a0, 0x2dc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x72, 0x8b}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 20:23:54 executing program 1: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:54 executing program 4: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000c10d4cb0179505297c9076f96c4059ccfde5bda088"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:23:54 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:54 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:54 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:54 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:55 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:55 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) 20:23:55 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x60, "3c000004e10200ff803ed328f524f2000008f20800000000e1ffff001400", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x401, "3cc3b83ea15992492c5b4319e0a52daa4d070d41213ed368f3f887f9793c3c01", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000002c0)={"4aa2c572c776d29f8f0d0aa0489324ea1cde22e51649d56cf72b0945b5f44398", r3, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r4}, {r2, 0x42}], 0x2, 0x0, 0x0, 0x0) [ 629.221124][T15238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. [ 629.239814][T15239] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1020 ns). Using initial count to start timer. 20:23:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x700, 0x0, 0x5, 0x0, r0, 0x0}]) 20:23:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 629.401623][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 629.651583][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 630.011635][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=f5a0, bcdDevice=2d.c5 [ 630.020674][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.029024][ T14] usb 3-1: Product: syz [ 630.033371][ T14] usb 3-1: Manufacturer: syz [ 630.037953][ T14] usb 3-1: SerialNumber: syz [ 630.047764][ T14] usb 3-1: config 0 descriptor?? [ 630.093923][ T14] smsusb:smsusb_probe: board id=8, interface number 0 [ 630.100737][ T14] smsusb:smsusb_probe: Device initialized with return code -19 [ 630.309182][ T3656] usb 3-1: USB disconnect, device number 16 [ 735.311469][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 735.318140][ C1] rcu: 1-...!: (10500 ticks this GP) idle=22f/1/0x4000000000000000 softirq=51521/51521 fqs=0 [ 735.328553][ C1] (t=10501 jiffies g=60625 q=60 ncpus=2) [ 735.334250][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g60625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 735.346549][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=37532 [ 735.354421][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g60625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 735.365767][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 735.375712][ C1] rcu: RCU grace-period kthread stack dump: [ 735.381578][ C1] task:rcu_preempt state:I stack:28680 pid: 16 ppid: 2 flags:0x00004000 [ 735.390774][ C1] Call Trace: [ 735.394034][ C1] [ 735.396959][ C1] __schedule+0xa9a/0x4cc0 [ 735.401380][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 735.407271][ C1] ? trace_hardirqs_on+0x56/0x1c0 [ 735.412320][ C1] ? __mod_timer+0x83c/0xe30 [ 735.416947][ C1] ? io_schedule_timeout+0x140/0x140 [ 735.422252][ C1] ? debug_object_free+0x350/0x350 [ 735.427352][ C1] schedule+0xd2/0x1f0 [ 735.431427][ C1] schedule_timeout+0x14a/0x2a0 [ 735.436275][ C1] ? usleep_range_state+0x1b0/0x1b0 [ 735.441458][ C1] ? rcu_gp_init+0xb19/0x1430 [ 735.446183][ C1] ? destroy_timer_on_stack+0x20/0x20 [ 735.451543][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 735.457345][ C1] ? prepare_to_swait_event+0xee/0x470 [ 735.462811][ C1] rcu_gp_fqs_loop+0x1c0/0x840 [ 735.467559][ C1] ? force_qs_rnp+0x800/0x800 [ 735.472220][ C1] ? _raw_spin_lock_irqsave+0x41/0x50 [ 735.477577][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 735.483369][ C1] rcu_gp_kthread+0x1de/0x320 [ 735.488031][ C1] ? rcu_gp_init+0x1430/0x1430 [ 735.492795][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 735.499040][ C1] ? __kthread_parkme+0x15f/0x220 [ 735.504107][ C1] ? rcu_gp_init+0x1430/0x1430 [ 735.508865][ C1] kthread+0x2e9/0x3a0 [ 735.512939][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 735.518641][ C1] ret_from_fork+0x1f/0x30 [ 735.523067][ C1] [ 735.526068][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 735.532391][ C1] Sending NMI from CPU 1 to CPUs 0: [ 735.537589][ C0] NMI backtrace for cpu 0 [ 735.537600][ C0] CPU: 0 PID: 14494 Comm: udevd Not tainted 5.18.0-rc3-next-20220422-syzkaller #0 [ 735.537630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.537644][ C0] RIP: 0010:kvm_wait+0x98/0x100 [ 735.537719][ C0] Code: fa 83 e2 07 38 d0 7f 04 84 c0 75 63 0f b6 07 40 38 c6 74 35 48 83 c4 10 c3 c3 e8 23 91 4b 00 eb 07 0f 00 2d da b1 94 08 fb f4 <48> 83 c4 10 c3 89 74 24 0c 48 89 3c 24 e8 56 8f 4b 00 8b 74 24 0c [ 735.537743][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000246 [ 735.537762][ C0] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffffffff1b73199 [ 735.537778][ C0] RDX: 0000000000000000 RSI: ffffffff81807171 RDI: ffffffff8134dffd [ 735.537794][ C0] RBP: ffffffff8cbfc980 R08: 0000000000000000 R09: 0000000000000000 [ 735.537810][ C0] R10: ffffffff81807158 R11: 0000000000000080 R12: 0000000000000000 [ 735.537826][ C0] R13: fffffbfff197f930 R14: 0000000000000001 R15: ffff8880b9c3ae40 [ 735.537842][ C0] FS: 00007fd781201840(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 735.537866][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.537882][ C0] CR2: 00007fbd953681b8 CR3: 000000001c049000 CR4: 00000000003506f0 [ 735.537899][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 735.537913][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 735.537928][ C0] Call Trace: [ 735.537936][ C0] [ 735.537945][ C0] __pv_queued_spin_lock_slowpath+0x8c7/0xb50 [ 735.537986][ C0] ? trace_contention_end.constprop.0+0x1b0/0x1b0 [ 735.538012][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 735.538090][ C0] ? lock_acquire+0x480/0x570 [ 735.538127][ C0] ? lock_release+0x780/0x780 [ 735.538165][ C0] do_raw_spin_lock+0x200/0x2a0 [ 735.538188][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 735.538211][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 735.538247][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0x6f4/0x13b0 [ 735.538328][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 735.538362][ C0] ? lock_release+0x560/0x780 [ 735.538399][ C0] ? mac80211_hwsim_add_chanctx+0x2a0/0x2a0 [ 735.538428][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 735.538464][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 735.538499][ C0] ? lock_acquire+0x480/0x570 [ 735.538536][ C0] ? ieee80211_beacon_get_tim+0x1b8/0x930 [ 735.538603][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 735.538639][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 735.538686][ C0] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 735.538719][ C0] mac80211_hwsim_beacon_tx+0x49e/0x920 [ 735.538754][ C0] __iterate_interfaces+0x1e5/0x560 [ 735.538785][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 735.538817][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 735.538847][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x13b0/0x13b0 [ 735.538879][ C0] ieee80211_iterate_active_interfaces_atomic+0x70/0x180 [ 735.538917][ C0] mac80211_hwsim_beacon+0xcd/0x1c0 [ 735.538947][ C0] __hrtimer_run_queues+0x609/0xe50 [ 735.538981][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 735.539010][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 735.539064][ C0] hrtimer_run_softirq+0x17b/0x360 [ 735.539094][ C0] __do_softirq+0x29b/0x9c2 [ 735.539157][ C0] __irq_exit_rcu+0x123/0x180 [ 735.539197][ C0] irq_exit_rcu+0x5/0x20 [ 735.539219][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 735.539247][ C0] [ 735.539253][ C0] [ 735.539260][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 735.539294][ C0] RIP: 0010:build_open_flags+0x463/0x6f0 [ 735.539345][ C0] Code: 89 f6 e8 d0 78 a6 ff 4d 85 f6 74 0b e8 36 76 a6 ff 81 cd 00 00 10 00 e8 2b 76 a6 ff 41 83 e5 20 31 ff 4c 89 ee e8 ad 78 a6 ff <4d> 85 ed 74 2a e8 13 76 a6 ff 41 81 e4 40 02 41 00 31 ff 4c 89 e6 [ 735.539368][ C0] RSP: 0018:ffffc90005e1fd78 EFLAGS: 00000246 [ 735.539386][ C0] RAX: 0000000000000000 RBX: ffffc90005e1fdf0 RCX: 0000000000000000 [ 735.539402][ C0] RDX: 0000000000000000 RSI: ffff8880218c5880 RDI: 0000000000000003 [ 735.539417][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 735.539431][ C0] R10: ffffffff81d3a903 R11: 0000000000000000 R12: 0000000000008000 [ 735.539447][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.539465][ C0] ? build_open_flags+0x463/0x6f0 [ 735.539499][ C0] ? build_open_flags+0x463/0x6f0 [ 735.539528][ C0] do_sys_openat2+0x85/0x4c0 [ 735.539555][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 735.539590][ C0] ? lock_acquire+0x480/0x570 [ 735.539631][ C0] ? build_open_flags+0x6f0/0x6f0 [ 735.539659][ C0] ? __context_tracking_exit+0xb8/0xe0 [ 735.539687][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 735.539727][ C0] __x64_sys_openat+0x13f/0x1f0 [ 735.539756][ C0] ? __ia32_sys_open+0x1c0/0x1c0 [ 735.539788][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 735.539818][ C0] do_syscall_64+0x35/0xb0 [ 735.539870][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 735.539902][ C0] RIP: 0033:0x7fd781325697 [ 735.539927][ C0] Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f [ 735.539950][ C0] RSP: 002b:00007fffeeef05d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.539972][ C0] RAX: ffffffffffffffda RBX: 000055fed2828370 RCX: 00007fd781325697 [ 735.539989][ C0] RDX: 0000000000080000 RSI: 00007fffeeef0708 RDI: 00000000ffffff9c [ 735.540005][ C0] RBP: 00007fffeeef0708 R08: 0000000000000008 R09: 0000000000000001 [ 735.540019][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 735.540034][ C0] R13: 000055fed2828370 R14: 0000000000000001 R15: 000055fed12e9160 [ 735.540059][ C0] [ 735.540601][ C1] Sending NMI from CPU 1 to CPUs 0: [ 736.094727][ C0] NMI backtrace for cpu 0 [ 736.094741][ C0] CPU: 0 PID: 14494 Comm: udevd Not tainted 5.18.0-rc3-next-20220422-syzkaller #0 [ 736.094767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.094780][ C0] RIP: 0010:kvm_wait+0x98/0x100 [ 736.094810][ C0] Code: fa 83 e2 07 38 d0 7f 04 84 c0 75 63 0f b6 07 40 38 c6 74 35 48 83 c4 10 c3 c3 e8 23 91 4b 00 eb 07 0f 00 2d da b1 94 08 fb f4 <48> 83 c4 10 c3 89 74 24 0c 48 89 3c 24 e8 56 8f 4b 00 8b 74 24 0c [ 736.094834][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000246 [ 736.094852][ C0] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffffffff1b73199 [ 736.094868][ C0] RDX: 0000000000000000 RSI: ffffffff81807171 RDI: ffffffff8134dffd [ 736.094884][ C0] RBP: ffffffff8cbfc980 R08: 0000000000000000 R09: 0000000000000000 [ 736.094900][ C0] R10: ffffffff81807158 R11: 0000000000000080 R12: 0000000000000000 [ 736.094915][ C0] R13: fffffbfff197f930 R14: 0000000000000001 R15: ffff8880b9c3ae40 [ 736.094932][ C0] FS: 00007fd781201840(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 736.094953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.094970][ C0] CR2: 00007fbd953681b8 CR3: 000000001c049000 CR4: 00000000003506f0 [ 736.094985][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.095000][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.095015][ C0] Call Trace: [ 736.095022][ C0] [ 736.095033][ C0] __pv_queued_spin_lock_slowpath+0x8c7/0xb50 [ 736.095064][ C0] ? trace_contention_end.constprop.0+0x1b0/0x1b0 [ 736.095090][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.095125][ C0] ? lock_acquire+0x480/0x570 [ 736.095163][ C0] ? lock_release+0x780/0x780 [ 736.095200][ C0] do_raw_spin_lock+0x200/0x2a0 [ 736.095233][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 736.095254][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 736.095291][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0x6f4/0x13b0 [ 736.095329][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.095364][ C0] ? lock_release+0x560/0x780 [ 736.095399][ C0] ? mac80211_hwsim_add_chanctx+0x2a0/0x2a0 [ 736.095429][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 736.095464][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.095499][ C0] ? lock_acquire+0x480/0x570 [ 736.095537][ C0] ? ieee80211_beacon_get_tim+0x1b8/0x930 [ 736.095565][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 736.095597][ C0] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 736.095630][ C0] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 736.095663][ C0] mac80211_hwsim_beacon_tx+0x49e/0x920 [ 736.095697][ C0] __iterate_interfaces+0x1e5/0x560 [ 736.095728][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 736.095759][ C0] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 736.095790][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x13b0/0x13b0 [ 736.095822][ C0] ieee80211_iterate_active_interfaces_atomic+0x70/0x180 [ 736.095860][ C0] mac80211_hwsim_beacon+0xcd/0x1c0 [ 736.095890][ C0] __hrtimer_run_queues+0x609/0xe50 [ 736.095924][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 736.095953][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 736.095992][ C0] hrtimer_run_softirq+0x17b/0x360 [ 736.096022][ C0] __do_softirq+0x29b/0x9c2 [ 736.096063][ C0] __irq_exit_rcu+0x123/0x180 [ 736.096087][ C0] irq_exit_rcu+0x5/0x20 [ 736.096110][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 736.096138][ C0] [ 736.096145][ C0] [ 736.096151][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 736.096186][ C0] RIP: 0010:build_open_flags+0x463/0x6f0 [ 736.096222][ C0] Code: 89 f6 e8 d0 78 a6 ff 4d 85 f6 74 0b e8 36 76 a6 ff 81 cd 00 00 10 00 e8 2b 76 a6 ff 41 83 e5 20 31 ff 4c 89 ee e8 ad 78 a6 ff <4d> 85 ed 74 2a e8 13 76 a6 ff 41 81 e4 40 02 41 00 31 ff 4c 89 e6 [ 736.096245][ C0] RSP: 0018:ffffc90005e1fd78 EFLAGS: 00000246 [ 736.096263][ C0] RAX: 0000000000000000 RBX: ffffc90005e1fdf0 RCX: 0000000000000000 [ 736.096278][ C0] RDX: 0000000000000000 RSI: ffff8880218c5880 RDI: 0000000000000003 [ 736.096293][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 736.096307][ C0] R10: ffffffff81d3a903 R11: 0000000000000000 R12: 0000000000008000 [ 736.096323][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.096341][ C0] ? build_open_flags+0x463/0x6f0 [ 736.096373][ C0] ? build_open_flags+0x463/0x6f0 [ 736.096403][ C0] do_sys_openat2+0x85/0x4c0 [ 736.096430][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.096465][ C0] ? lock_acquire+0x480/0x570 [ 736.096500][ C0] ? build_open_flags+0x6f0/0x6f0 [ 736.096528][ C0] ? __context_tracking_exit+0xb8/0xe0 [ 736.096556][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 736.096596][ C0] __x64_sys_openat+0x13f/0x1f0 [ 736.096625][ C0] ? __ia32_sys_open+0x1c0/0x1c0 [ 736.096656][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 736.096687][ C0] do_syscall_64+0x35/0xb0 [ 736.096722][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 736.096754][ C0] RIP: 0033:0x7fd781325697 [ 736.096773][ C0] Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f [ 736.096796][ C0] RSP: 002b:00007fffeeef05d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.096818][ C0] RAX: ffffffffffffffda RBX: 000055fed2828370 RCX: 00007fd781325697 [ 736.096834][ C0] RDX: 0000000000080000 RSI: 00007fffeeef0708 RDI: 00000000ffffff9c [ 736.096850][ C0] RBP: 00007fffeeef0708 R08: 0000000000000008 R09: 0000000000000001 [ 736.096865][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 736.096880][ C0] R13: 000055fed2828370 R14: 0000000000000001 R15: 000055fed12e9160 [ 736.096905][ C0] [ 736.097711][ C1] NMI backtrace for cpu 1 [ 736.649747][ C1] CPU: 1 PID: 15208 Comm: kworker/1:7 Not tainted 5.18.0-rc3-next-20220422-syzkaller #0 [ 736.659444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.669480][ C1] Workqueue: events nsim_dev_trap_report_work [ 736.675609][ C1] Call Trace: [ 736.678872][ C1] [ 736.681701][ C1] dump_stack_lvl+0xcd/0x134 [ 736.686348][ C1] nmi_cpu_backtrace.cold+0x47/0x144 [ 736.691624][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 736.696860][ C1] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 736.702860][ C1] rcu_dump_cpu_stacks+0x262/0x3f0 [ 736.707961][ C1] rcu_sched_clock_irq.cold+0x144/0x8fc [ 736.713523][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.718969][ C1] ? lock_acquire+0x480/0x570 [ 736.723642][ C1] ? rcutree_dead_cpu+0x30/0x30 [ 736.728480][ C1] ? lock_release+0x560/0x780 [ 736.733143][ C1] ? lock_release+0x780/0x780 [ 736.737808][ C1] ? tick_sched_timer+0x27/0x120 [ 736.742773][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 736.747612][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 736.753403][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.758855][ C1] ? tick_sched_do_timer+0x470/0x470 [ 736.764130][ C1] update_process_times+0x16d/0x200 [ 736.769337][ C1] tick_sched_handle+0x9b/0x180 [ 736.774194][ C1] tick_sched_timer+0xee/0x120 [ 736.778945][ C1] __hrtimer_run_queues+0x1c0/0xe50 [ 736.784133][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 736.790099][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 736.796159][ C1] hrtimer_interrupt+0x31c/0x790 [ 736.801086][ C1] __sysvec_apic_timer_interrupt+0x146/0x530 [ 736.807079][ C1] sysvec_apic_timer_interrupt+0x40/0xc0 [ 736.812695][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 736.818676][ C1] RIP: 0010:kvm_wait+0x98/0x100 [ 736.823509][ C1] Code: fa 83 e2 07 38 d0 7f 04 84 c0 75 63 0f b6 07 40 38 c6 74 35 48 83 c4 10 c3 c3 e8 23 91 4b 00 eb 07 0f 00 2d da b1 94 08 fb f4 <48> 83 c4 10 c3 89 74 24 0c 48 89 3c 24 e8 56 8f 4b 00 8b 74 24 0c [ 736.843102][ C1] RSP: 0018:ffffc90000de0488 EFLAGS: 00000246 [ 736.849167][ C1] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffffffff1b73199 [ 736.857129][ C1] RDX: 0000000000000000 RSI: ffffffff81807171 RDI: ffffffff8134dffd [ 736.865092][ C1] RBP: ffff88804d9c8948 R08: 0000000000000000 R09: 0000000000000000 [ 736.873073][ C1] R10: ffffffff81807158 R11: 0000000000000001 R12: 0000000000000000 [ 736.881029][ C1] R13: ffffed1009b39129 R14: 0000000000000001 R15: ffff8880b9d3ae40 [ 736.889007][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 736.894025][ C1] ? trace_hardirqs_on+0x51/0x1c0 [ 736.899039][ C1] ? kvm_wait+0x8d/0x100 [ 736.903270][ C1] ? kvm_wait+0x8d/0x100 [ 736.907492][ C1] __pv_queued_spin_lock_slowpath+0x8c7/0xb50 [ 736.913547][ C1] ? trace_contention_end.constprop.0+0x1b0/0x1b0 [ 736.919943][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 736.925513][ C1] ? lock_acquire+0x480/0x570 [ 736.930193][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 736.936461][ C1] ? debug_locks_off+0x23/0x80 [ 736.941284][ C1] do_raw_spin_lock+0x200/0x2a0 [ 736.946122][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 736.951068][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7c/0x13b0 [ 736.957931][ C1] __get_task_comm+0x23/0x50 [ 736.962592][ C1] __set_page_owner+0x253/0x380 [ 736.967460][ C1] get_page_from_freelist+0xba2/0x3e00 [ 736.972920][ C1] ? get_stack_info+0x2d/0x90 [ 736.977586][ C1] ? stack_access_ok+0xd3/0x1d0 [ 736.982517][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 736.987717][ C1] ? __zone_watermark_ok+0x450/0x450 [ 736.992999][ C1] ? prepare_alloc_pages+0x17b/0x570 [ 736.998277][ C1] __alloc_pages+0x1b2/0x500 [ 737.002855][ C1] ? __alloc_pages_slowpath.constprop.0+0x20a0/0x20a0 [ 737.009602][ C1] ? __stack_depot_save+0x35/0x500 [ 737.014854][ C1] ? lock_acquire+0x480/0x570 [ 737.019541][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 737.024991][ C1] ? lock_release+0x560/0x780 [ 737.029657][ C1] ? lock_release+0x780/0x780 [ 737.034320][ C1] ? __slab_alloc.constprop.0+0x4d/0xa0 [ 737.039908][ C1] alloc_pages+0x1aa/0x310 [ 737.044316][ C1] ? __hrtimer_run_queues+0x609/0xe50 [ 737.049692][ C1] allocate_slab+0x26c/0x3c0 [ 737.054278][ C1] ___slab_alloc+0x985/0xd90 [ 737.058853][ C1] ? __alloc_skb+0x215/0x340 [ 737.063484][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 737.068952][ C1] ? lock_acquire+0x480/0x570 [ 737.073716][ C1] ? __alloc_skb+0x215/0x340 [ 737.078305][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 737.083732][ C1] kmem_cache_alloc_node+0x122/0x3f0 [ 737.089017][ C1] ? __alloc_skb+0x215/0x340 [ 737.093616][ C1] __alloc_skb+0x215/0x340 [ 737.098037][ C1] skb_copy+0x139/0x3c0 [ 737.102203][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb7c/0x13b0 [ 737.108883][ C1] ? lock_release+0x560/0x780 [ 737.113573][ C1] ? mac80211_hwsim_add_chanctx+0x2a0/0x2a0 [ 737.119465][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 737.124320][ C1] ? lock_acquire+0x480/0x570 [ 737.129003][ C1] ? ieee80211_beacon_get_tim+0x1b8/0x930 [ 737.134718][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 737.140946][ C1] ? mac80211_hwsim_monitor_rx+0x1c2/0x840 [ 737.146742][ C1] mac80211_hwsim_tx_frame+0x1ee/0x2a0 [ 737.152189][ C1] mac80211_hwsim_beacon_tx+0x49e/0x920 [ 737.157743][ C1] __iterate_interfaces+0x1e5/0x560 [ 737.162928][ C1] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 737.168571][ C1] ? mac80211_hwsim_tx_frame+0x2a0/0x2a0 [ 737.174188][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x13b0/0x13b0 [ 737.181109][ C1] ieee80211_iterate_active_interfaces_atomic+0x70/0x180 [ 737.188126][ C1] mac80211_hwsim_beacon+0xcd/0x1c0 [ 737.193311][ C1] __hrtimer_run_queues+0x609/0xe50 [ 737.198536][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 737.204502][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 737.210606][ C1] hrtimer_run_softirq+0x17b/0x360 [ 737.215707][ C1] __do_softirq+0x29b/0x9c2 [ 737.220204][ C1] __irq_exit_rcu+0x123/0x180 [ 737.224873][ C1] irq_exit_rcu+0x5/0x20 [ 737.229099][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 737.234714][ C1] [ 737.237624][ C1] [ 737.240549][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 737.246519][ C1] RIP: 0010:strscpy+0x101/0x2a0 [ 737.251386][ C1] Code: 21 c6 41 80 3c 08 00 0f 85 92 01 00 00 48 b9 08 06 05 04 03 02 01 00 48 89 37 48 0f af c1 48 c1 e8 38 4c 01 e8 48 83 c4 18 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 48 89 f0 41 bd 00 10 00 00 25 ff 0f [ 737.270980][ C1] RSP: 0018:ffffc900047976b0 EFLAGS: 00000282 [ 737.277032][ C1] RAX: 000000000000000b RBX: 0000000000000010 RCX: 0001020304050608 [ 737.284993][ C1] RDX: ffffed1009b39108 RSI: 0000000000373a31 RDI: ffff888013a80d70 [ 737.292948][ C1] RBP: 8080808080808080 R08: 1ffff110027501ae R09: ffff88804d9c8838 [ 737.301070][ C1] R10: ffffed1009b39107 R11: 0000000000000001 R12: 0000000000000010 [ 737.309039][ C1] R13: 0000000000000008 R14: fefefefefefefeff R15: ffff888013a80d68 [ 737.317064][ C1] strscpy_pad+0x20/0x70 [ 737.321301][ C1] __get_task_comm+0x35/0x50 [ 737.325881][ C1] __set_page_owner+0x253/0x380 [ 737.330718][ C1] get_page_from_freelist+0xba2/0x3e00 [ 737.336164][ C1] ? ret_from_fork+0x1f/0x30 [ 737.340742][ C1] ? kernel_text_address+0xd/0x80 [ 737.345755][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 737.350940][ C1] ? arch_stack_walk+0x7d/0xe0 [ 737.355725][ C1] ? __zone_watermark_ok+0x450/0x450 [ 737.360993][ C1] ? prepare_alloc_pages+0x415/0x570 [ 737.366259][ C1] ? stack_trace_save+0x8c/0xc0 [ 737.371101][ C1] __alloc_pages+0x1b2/0x500 [ 737.375681][ C1] ? __alloc_pages_slowpath.constprop.0+0x20a0/0x20a0 [ 737.382427][ C1] ? kasan_save_stack+0x1e/0x40 [ 737.387264][ C1] ? kmem_cache_alloc_node+0x255/0x3f0 [ 737.392727][ C1] ? lock_acquire+0x480/0x570 [ 737.397396][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 737.402858][ C1] ? lock_release+0x560/0x780 [ 737.407519][ C1] ? lock_release+0x780/0x780 [ 737.412184][ C1] ? __slab_alloc.constprop.0+0x4d/0xa0 [ 737.417719][ C1] alloc_pages+0x1aa/0x310 [ 737.422127][ C1] allocate_slab+0x26c/0x3c0 [ 737.426720][ C1] ___slab_alloc+0x985/0xd90 [ 737.431302][ C1] ? nsim_dev_trap_report_work+0x291/0xba0 [ 737.437100][ C1] ? trace_hardirqs_on+0x56/0x1c0 [ 737.442116][ C1] ? nsim_dev_trap_report_work+0x291/0xba0 [ 737.447932][ C1] __slab_alloc.constprop.0+0x4d/0xa0 [ 737.453294][ C1] __kmalloc_node_track_caller+0x2cb/0x360 [ 737.459086][ C1] ? nsim_dev_trap_report_work+0x291/0xba0 [ 737.464903][ C1] __alloc_skb+0xde/0x340 [ 737.469234][ C1] ? kfree_skbmem+0xef/0x1b0 [ 737.473814][ C1] nsim_dev_trap_report_work+0x291/0xba0 [ 737.479443][ C1] process_one_work+0x996/0x1610 [ 737.484369][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 737.489724][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 737.494648][ C1] worker_thread+0x665/0x1080 [ 737.499322][ C1] ? __kthread_parkme+0x15f/0x220 [ 737.504338][ C1] ? process_one_work+0x1610/0x1610 [ 737.509519][ C1] kthread+0x2e9/0x3a0 [ 737.513571][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 737.519184][ C1] ret_from_fork+0x1f/0x30 [ 737.523590][ C1]