[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. 2020/12/14 13:09:21 fuzzer started 2020/12/14 13:09:21 dialing manager at 10.128.0.26:39621 2020/12/14 13:09:22 syscalls: 3262 2020/12/14 13:09:22 code coverage: enabled 2020/12/14 13:09:22 comparison tracing: enabled 2020/12/14 13:09:22 extra coverage: enabled 2020/12/14 13:09:22 setuid sandbox: enabled 2020/12/14 13:09:22 namespace sandbox: enabled 2020/12/14 13:09:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/14 13:09:22 fault injection: enabled 2020/12/14 13:09:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/14 13:09:22 net packet injection: enabled 2020/12/14 13:09:22 net device setup: enabled 2020/12/14 13:09:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/14 13:09:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/14 13:09:22 USB emulation: enabled 2020/12/14 13:09:22 hci packet injection: enabled 2020/12/14 13:09:22 wifi device emulation: enabled 13:11:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x82020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42b10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:11:36 executing program 1: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f00000000c0)={0xb0000000}) 13:11:36 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0xa0) 13:11:36 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f0000000280), 0x40) 13:11:36 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) dup(0xffffffffffffffff) 13:11:37 executing program 5: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0xb888, r1, &(0x7f00000000c0)={0xb0000000}) syzkaller login: [ 199.803989][ T8505] IPVS: ftp: loaded support on port[0] = 21 [ 200.085747][ T8538] IPVS: ftp: loaded support on port[0] = 21 [ 200.133179][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 200.232045][ T8649] IPVS: ftp: loaded support on port[0] = 21 [ 200.324451][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.333730][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.342962][ T8505] device bridge_slave_0 entered promiscuous mode [ 200.352454][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.360894][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.369230][ T8505] device bridge_slave_1 entered promiscuous mode [ 200.445541][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.480474][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.581443][ T8707] IPVS: ftp: loaded support on port[0] = 21 [ 200.622142][ T8505] team0: Port device team_slave_0 added [ 200.634314][ T8505] team0: Port device team_slave_1 added [ 200.685510][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 200.780645][ T8816] IPVS: ftp: loaded support on port[0] = 21 [ 200.795028][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.818005][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.844122][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.893675][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.904491][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.930901][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.989909][ T8505] device hsr_slave_0 entered promiscuous mode [ 200.998107][ T8505] device hsr_slave_1 entered promiscuous mode [ 201.005118][ T8649] chnl_net:caif_netlink_parms(): no params data found [ 201.082398][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.090468][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.109758][ T8538] device bridge_slave_0 entered promiscuous mode [ 201.168343][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.173199][ T8967] IPVS: ftp: loaded support on port[0] = 21 [ 201.175434][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.196714][ T8538] device bridge_slave_1 entered promiscuous mode [ 201.364268][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.378894][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.489808][ T8538] team0: Port device team_slave_0 added [ 201.521352][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.528715][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.538172][ T8649] device bridge_slave_0 entered promiscuous mode [ 201.548627][ T8538] team0: Port device team_slave_1 added [ 201.554528][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.562682][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.571226][ T8649] device bridge_slave_1 entered promiscuous mode [ 201.590110][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 201.670191][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.677954][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.704286][ T8538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.732090][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.767502][ T3131] Bluetooth: hci0: command 0x0409 tx timeout [ 201.808693][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.815691][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.863278][ T8538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.878776][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.908098][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 201.992641][ T8649] team0: Port device team_slave_0 added [ 202.014270][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 202.057107][ T8649] team0: Port device team_slave_1 added [ 202.080075][ T8538] device hsr_slave_0 entered promiscuous mode [ 202.087065][ T8538] device hsr_slave_1 entered promiscuous mode [ 202.094288][ T8538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.102209][ T8538] Cannot create hsr debugfs directory [ 202.108705][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.115776][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.125331][ T8707] device bridge_slave_0 entered promiscuous mode [ 202.185036][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.193205][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.204648][ T8707] device bridge_slave_1 entered promiscuous mode [ 202.230845][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.237880][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.264078][ T17] Bluetooth: hci2: command 0x0409 tx timeout [ 202.266062][ T8649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.290861][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.298227][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.325050][ T8649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.372497][ T8505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.383753][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 202.432762][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.440228][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.450024][ T8816] device bridge_slave_0 entered promiscuous mode [ 202.458505][ T8505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.486486][ T33] Bluetooth: hci3: command 0x0409 tx timeout [ 202.499780][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.512893][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.521085][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.529790][ T8816] device bridge_slave_1 entered promiscuous mode [ 202.552388][ T8505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.577653][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.611252][ T8505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.625674][ T8649] device hsr_slave_0 entered promiscuous mode [ 202.633385][ T8649] device hsr_slave_1 entered promiscuous mode [ 202.640112][ T8649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.648136][ T8649] Cannot create hsr debugfs directory [ 202.674725][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.718101][ T8707] team0: Port device team_slave_0 added [ 202.725695][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.744479][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 202.775103][ T8707] team0: Port device team_slave_1 added [ 202.801893][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.811175][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.820963][ T8967] device bridge_slave_0 entered promiscuous mode [ 202.861484][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.871538][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.880864][ T8967] device bridge_slave_1 entered promiscuous mode [ 202.898987][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.905957][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.932984][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.948127][ T8816] team0: Port device team_slave_0 added [ 202.954692][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.961854][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.987967][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.030914][ T8816] team0: Port device team_slave_1 added [ 203.112885][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.128020][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 203.128483][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.158841][ T8707] device hsr_slave_0 entered promiscuous mode [ 203.167900][ T8707] device hsr_slave_1 entered promiscuous mode [ 203.174426][ T8707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.182303][ T8707] Cannot create hsr debugfs directory [ 203.210331][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.218583][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.244731][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.299683][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.307919][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.334599][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.375418][ T8967] team0: Port device team_slave_0 added [ 203.442952][ T8967] team0: Port device team_slave_1 added [ 203.457755][ T8816] device hsr_slave_0 entered promiscuous mode [ 203.464745][ T8816] device hsr_slave_1 entered promiscuous mode [ 203.472242][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.479990][ T8816] Cannot create hsr debugfs directory [ 203.492933][ T8538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.516179][ T8538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.552654][ T8538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.575669][ T8538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.609180][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.616152][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.643954][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.663864][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.672651][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.699495][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.716122][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.780683][ T8967] device hsr_slave_0 entered promiscuous mode [ 203.788017][ T8967] device hsr_slave_1 entered promiscuous mode [ 203.794577][ T8967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.803227][ T8967] Cannot create hsr debugfs directory [ 203.838092][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.853545][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.857443][ T8191] Bluetooth: hci0: command 0x041b tx timeout [ 203.862179][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.920632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.932100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.941786][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.949117][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.959444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.968500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.977423][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.984468][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.053167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.068282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.081056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.087578][ T3131] Bluetooth: hci1: command 0x041b tx timeout [ 204.114204][ T8649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.147953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.157430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.165750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.176063][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.206188][ T8649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.231146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.254667][ T8649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.274594][ T8649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.311848][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.322596][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.357364][ T8707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.364978][ T33] Bluetooth: hci2: command 0x041b tx timeout [ 204.403217][ T8505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.414868][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.436822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.446979][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.455488][ T8707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.507442][ T8707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.518277][ T8707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.567204][ T33] Bluetooth: hci3: command 0x041b tx timeout [ 204.599499][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.610650][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.619746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.640376][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.659251][ T8816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.685449][ T8816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.695970][ T8816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.713427][ T8816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.732726][ T8967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.745432][ T8967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.765846][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.783401][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.791790][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.801499][ T8967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.809211][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 204.823736][ T8967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.844913][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.855209][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.868138][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.875196][ T8191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.913635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.922035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.932166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.941876][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.949013][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.989646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.999992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.009555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.052603][ T8505] device veth0_vlan entered promiscuous mode [ 205.062310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.072387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.081352][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.091052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.099504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.131588][ T8649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.153597][ T8505] device veth1_vlan entered promiscuous mode [ 205.170492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.180040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.190315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.201277][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.217141][ T8191] Bluetooth: hci5: command 0x041b tx timeout [ 205.230670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.239407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.249622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.260485][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.269134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.298812][ T8649] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.318068][ T8538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.328748][ T8538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.345428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.353855][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.362482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.372398][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.421677][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.432240][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.443731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.453040][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.462041][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.469205][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.478169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.487882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.496186][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.503312][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.511965][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.558137][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.569541][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.577526][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.584888][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.595219][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.614910][ T8505] device veth0_macvtap entered promiscuous mode [ 205.642702][ T8538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.664829][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.672404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.680897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.690088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.701618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.715167][ T8505] device veth1_macvtap entered promiscuous mode [ 205.770018][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.784271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.793652][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.803713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.812797][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.821759][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.830432][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.839223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.848269][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.855353][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.863361][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.872436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.881332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.890120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.898955][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.906014][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.913896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.922428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.936976][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 205.950939][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.963779][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.974883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.985245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.994246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.013558][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.041024][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.050890][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.059415][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.067538][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.075631][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.087063][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.094859][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.137034][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.145078][ T8649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.167129][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 206.169874][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.192927][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.207670][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.226988][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.239274][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.257216][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.264912][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.273584][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.282482][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.336197][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.344896][ T8538] device veth0_vlan entered promiscuous mode [ 206.353266][ T8707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.365173][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.375113][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.383814][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.392861][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.401706][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.411060][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.420082][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.427254][ T8191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.434892][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.444047][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.452793][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.459948][ T8191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.468068][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.477277][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.485958][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.494930][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.502182][ T8191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.510336][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.519627][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.528638][ T8191] Bluetooth: hci2: command 0x040f tx timeout [ 206.538324][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.546773][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.584319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.595682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.606884][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.613934][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.622193][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.630124][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.647191][ T8505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.670645][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.681813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.691216][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.700008][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.709219][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.718458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.727773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.736232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.745823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.754904][ T33] Bluetooth: hci3: command 0x040f tx timeout [ 206.759989][ T8649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.785313][ T8505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.794592][ T8505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.811641][ T8505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.820800][ T8505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.840078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.848323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.856056][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.866110][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.875012][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.883991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.897836][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 206.914739][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.950844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.958396][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.965790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.977603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.985881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.996136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.010657][ T8816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.023733][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.034571][ T8538] device veth1_vlan entered promiscuous mode [ 207.078015][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.087754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.096163][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.105799][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.114907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.123753][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.144227][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.224820][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.237644][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.285388][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.308968][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.330063][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.343276][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.371161][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.389594][ T9714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.409328][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 207.414831][ T8538] device veth0_macvtap entered promiscuous mode [ 207.457510][ T8649] device veth0_vlan entered promiscuous mode [ 207.475927][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.518982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.530331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.540464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.553379][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.561990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.570881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.582855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.591357][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.599444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.610548][ T8707] device veth0_vlan entered promiscuous mode [ 207.624244][ T8649] device veth1_vlan entered promiscuous mode [ 207.651245][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.668793][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.677994][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.682949][ T8707] device veth1_vlan entered promiscuous mode [ 207.708601][ T8538] device veth1_macvtap entered promiscuous mode [ 207.750216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.802162][ T8649] device veth0_macvtap entered promiscuous mode [ 207.824137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.834167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.843370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.853672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.862943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.875765][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.890657][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 207.901347][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.912309][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.927288][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.944596][ T8649] device veth1_macvtap entered promiscuous mode [ 207.962372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.970708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.979043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.988603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.997564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.006064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.019144][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 208.026453][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.034696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.049104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.057740][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.088264][ T8816] device veth0_vlan entered promiscuous mode [ 208.097232][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.110256][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.122194][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.158308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.170946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.180688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.191712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.201955][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.211813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.222218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.232457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 13:11:45 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000100)={@random="cd0001136000", @local, @val, {@ipv4}}, 0x0) [ 208.277512][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.278581][ T5] Bluetooth: hci1: command 0x0419 tx timeout [ 208.293654][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.317198][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.347889][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.378494][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.387091][ T8707] device veth0_macvtap entered promiscuous mode [ 208.409213][ T8816] device veth1_vlan entered promiscuous mode [ 208.418860][ T8967] device veth0_vlan entered promiscuous mode [ 208.425560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.447631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 13:11:45 executing program 0: socketpair$nbd(0xa, 0x3, 0x3a, &(0x7f00000000c0)) [ 208.466635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.475502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.498872][ T8538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.516916][ T8538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.534561][ T8538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.556645][ T8538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.570031][ T3002] Bluetooth: hci2: command 0x0419 tx timeout [ 208.593295][ T8707] device veth1_macvtap entered promiscuous mode [ 208.605736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.618804][ T8967] device veth1_vlan entered promiscuous mode [ 208.634566][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.652665][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 13:11:46 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000006c0)=[{r1}, {r0}], 0x2, 0x2) [ 208.662975][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.686308][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.698412][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.711533][ T8649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.720487][ T8649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.741833][ T8649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.751007][ T8649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.804699][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.814892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.830797][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 208.843810][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 13:11:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0fc32bbd7000fedbdf25020000001c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0) [ 208.861351][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.893399][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.916688][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.927465][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.938055][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.958517][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.966676][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 208.989059][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 208.999768][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.009859][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.020408][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.030423][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.040938][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.052512][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.069417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.078349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.088967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.099013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.116540][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.125501][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.147259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.157256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.175228][ T8707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.184449][ T8707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.194087][ T8707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.204645][ T8707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.242316][ T8967] device veth0_macvtap entered promiscuous mode 13:11:46 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) [ 209.293972][ T8816] device veth0_macvtap entered promiscuous mode [ 209.316206][ T8967] device veth1_macvtap entered promiscuous mode [ 209.389251][ T8816] device veth1_macvtap entered promiscuous mode [ 209.454853][ T3002] Bluetooth: hci5: command 0x0419 tx timeout 13:11:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) [ 209.509141][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.530259][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.548285][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.577812][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.592796][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.604297][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.615279][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.626518][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.649276][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.690369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.705622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.715506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.724604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 13:11:47 executing program 0: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3007) [ 209.734342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.754640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.810316][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.819250][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.843264][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.850828][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.850849][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.850856][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.850871][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.850879][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.850895][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.850902][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.850919][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.850926][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.853925][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.959684][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.973589][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.985280][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.995904][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.016566][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.034433][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.052438][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.065918][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.085291][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.112609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.130037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.138921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.149887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.168193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.187517][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.200370][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.208852][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.229201][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.256025][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.284091][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.296516][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.307609][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.318073][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.331332][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.341917][ T8816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.352706][ T8816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.364594][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.381916][ T8967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.396188][ T8967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.414670][ T8967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.423482][ T8967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.446800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.457787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.471646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.484475][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.486777][ T8816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.504048][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.510575][ T8816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.520328][ T8816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.529119][ T8816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.597005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.688742][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.710888][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.736503][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.761738][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.864785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.882351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.888332][ T312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.947916][ T312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.961138][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.983073][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.006479][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.059317][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.066925][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.087909][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.111785][ T312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.139979][ T312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.151773][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.179381][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.204368][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.228390][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.239495][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:11:48 executing program 1: write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) 13:11:48 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:11:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 13:11:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0xfffffffffffffcd3) 13:11:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x2b4, 0x5, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xadc, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x290, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x4a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x120, 0x5, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}]}]}, 0xec4}}, 0x0) 13:11:49 executing program 5: r0 = getpgid(0x0) sched_getattr(r0, &(0x7f0000000440)={0x38}, 0x38, 0x0) 13:11:49 executing program 1: move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) 13:11:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$bsg(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x21}, 0x14}}, 0x0) 13:11:49 executing program 2: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/58) 13:11:49 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 13:11:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) 13:11:49 executing program 5: r0 = eventfd2(0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfffffffffffffe35) 13:11:49 executing program 0: symlinkat(&(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') r0 = open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) setuid(0xffffffffffffffff) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) 13:11:49 executing program 2: r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000001480)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '}\x00'}, 0x7) 13:11:49 executing program 4: r0 = openat$full(0xffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000a40), 0x8, 0x0) [ 211.952975][ T9987] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 13:11:49 executing program 5: mincore(&(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/170) 13:11:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 212.001409][ T34] audit: type=1400 audit(1607951509.478:2): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="}" pid=9989 comm="syz-executor.2" 13:11:49 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 13:11:49 executing program 0: openat$fuse(0xffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 13:11:49 executing program 3: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000001c0)=@profile={'changeprofile ', '}\xce(\x00'}, 0x12) 13:11:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000001c0)) 13:11:49 executing program 1: openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x882, 0x0) 13:11:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') futimesat(r0, 0x0, 0x0) [ 212.242950][ T34] audit: type=1400 audit(1607951509.718:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=7DCE28 pid=10002 comm="syz-executor.3" 13:11:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 13:11:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000140)) 13:11:49 executing program 0: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) r1 = getpgrp(0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)) 13:11:49 executing program 4: add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 13:11:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, 0x0, 0xffffff8b) 13:11:50 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') 13:11:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) 13:11:50 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x32, 0xffffffffffffffff}) 13:11:50 executing program 0: r0 = openat$full(0xffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x319300, 0x0) 13:11:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 13:11:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x14}}, 0x0) 13:11:50 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 13:11:50 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 13:11:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x30, 0xffffffffffffffff, 0x0) 13:11:50 executing program 4: getitimer(0x0, &(0x7f00000034c0)) 13:11:50 executing program 0: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x1d, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) 13:11:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 13:11:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x3b, 0x0, "4847c52184fb8c72739e678ae9d4edb557edba07f789401ea948f106f6a088b6b2143ec777fbd2dd4ace53bb2e0cb63a604edf84332d4f32bc905323ae09d99c36d12475c5d7af5d91b1c67c93afa7b3"}, 0xd8) 13:11:50 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 13:11:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 13:11:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x9}}, 0x0) 13:11:50 executing program 4: getrandom(&(0x7f0000002400)=""/4107, 0x100b, 0x3) 13:11:50 executing program 1: r0 = openat$full(0xffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) dup(r0) 13:11:50 executing program 2: signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 13:11:50 executing program 3: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca249435, &(0x7f00000008c0)={0x0, 0x0, @status}) getresgid(&(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) 13:11:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000300)=@hat={'changehat '}, 0x1d) 13:11:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x903, &(0x7f0000000000), 0x8) 13:11:50 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x4) 13:11:50 executing program 1: syz_emit_ethernet(0x205, &(0x7f00000001c0)={@local, @empty, @val, {@ipv6}}, 0x0) 13:11:50 executing program 2: syz_emit_ethernet(0x1fff, &(0x7f0000000380)={@local, @empty, @val, {@ipv6}}, 0x0) 13:11:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a94bf240c80a02c03784000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000180)={0x1, 0x35323645, 0x8, 0xdae5, 0x2, @stepwise={{0x3, 0x3ff}, {0x10001}, {0x1, 0x4}}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x22000, 0x2a, 0x4}, 0x18) move_mount(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000680)={0x0, 0x0, 0x5d}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 13:11:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000500)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a0, 0x1403, 0x200, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4040885}, 0x14) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r5, {0x9}}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c001c001000010400e8f5ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="02000000000000005c00128009000100766c616e000000004c0002800600010088090000340003800c000100ef000000040000000c000100b838163a060000000c00010007000000000100000c00e700000000000000000000000200100000000100000008000500", @ANYRES32=r1, @ANYBLOB="08000a00c64f4ba7c95607000001000000008c6f0199907437aeba9082bc01cb1ed10ec0238b4cab440000522e31daff4a3f29210363f2c8cd3b3a9e0e35b20bff2a6e809bc8b3470ec438295ecdcd324835ad4b33b3fe5ad0e7c0f9ad25f4f718d62fd080cdaafe1f5913c37cb6cefdda066e449828cd309b34b4a1"], 0x8c}, 0x1, 0x0, 0x0, 0x54}, 0x0) 13:11:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x420000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x1, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x5000000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000001140)='/dev/input/mice\x00', 0x400) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = dup(r1) sendfile(r1, r3, 0x0, 0x80006) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) 13:11:51 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a290930206fc010800000102814000390009", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xffb8) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) 13:11:51 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001700)=ANY=[@ANYBLOB="14000100100000001e6c0000000800000000000a20000000000a01000004000000000000000000000900010073797a300000000038000000120a010000000000ffffff9e00000000040004800900020000397d00000000000900010073797a30000000000800034000000009"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x131c, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_EXPRESSIONS={0x12bc, 0x4, 0x0, 0x1, [{0x1094, 0x1, 0x0, 0x1, [@limit={{0xa, 0x1, 'limit\x00'}, @val={0x4}}, @match={{0xa, 0x1, 'match\x00'}, @val={0x1010, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1004, 0x3, "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"}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}]}, {0x4}, {0x70, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}]}, {0x70, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}]}, {0xc4, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_CONSUMED={0xc}]}}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_BYTES={0xc}]}}]}, {0x48, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}]}, {0x34, 0x1, 0x0, 0x1, [@numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}]}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x1418}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000180)={0x101, 0xd0b2, 0x314, {0x4}, 0x5}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000200)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000080)) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000002c0)={0x39, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e23, @empty}}}, 0x104) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x8, 0x0, [{0x2a6, 0x0, 0x5}, {0x952, 0x0, 0x8}, {0x3ae, 0x0, 0x72860337}, {0x98b, 0x0, 0x100000001}, {0x3ac, 0x0, 0x4}, {0x412, 0x0, 0x26}, {0x20e, 0x0, 0x100400}, {0x802, 0x0, 0x4}]}) [ 213.355178][T10071] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 213.725668][ C0] hrtimer: interrupt took 62309 ns 13:11:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x31ce, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x6b, 0x6}}]}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)=0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}}], 0x4000070, 0x8000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000200)="5c446c67144d310368be39dac9bd726a9f92a915fe84e9041f4b29b198ce654ddfaf245cf927226f7e9a377dc8700f46849f5432eeed9e667fb960796aafc3dde90a6897a946636d132c2b84d459f916ca19b584f1f758e8d5762debc0772abf68375f872b34bfb699d55f8fe4835a5c0358148a", 0x74}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000280)="76ef6151452650fc506e18a66578afabd082b006c537a26d9b9d7b5e898707a56627e6c80ce0415ce70b5b334e7a7fb229fac6e96c01fbda091adfd1c5b1e684406b4597b3ac6bfc53bf0c376fa1664000146e56adace1dac1fea926b698673e83d92878f30fa598f6572dd0ffcbe697adc6ac4de659d055c089d76c98bb7993f581ed149d67f753e3732d92be1b27b3b3a0aff4f770b70fd1902483d941ed93dccd48577900c1e93718a98af6ee07a95ba768907f80b35ffd2309f43e6fa15c25dbb3af45864cef5da619c18ff5c501599a4f2b7e208a69e84670f2209438ca", 0xe0}, {&(0x7f0000000380)="10c65f9504ff26ce667320", 0xb}, {&(0x7f00000003c0)="1d01840c223854f7bc99102097d8d84adc96152f78b2daea90db3e883d32d46ed83d2f1b7d", 0x25}, {&(0x7f0000000400)="a8399e83a97bf27c2582a8c8bd5e3de5468cf81aa3ab534a70e187d72504fa0d4814a9381a752bc98089020f724c7cb8543f6381ef453656607a695d01dc9bec832daf", 0x43}, {&(0x7f0000000480)="b8c3be237a6fa70bbb2fa1fa36e9fc1d028c874529398b512a695dbbe73ec802af92175523eec280cda524c61fb872203063757a7bb99c2940146888354a06a1886440fbd857ab836c4956efc864ee624dc85593eaa31791f34dd080c6e66522cc4b", 0x62}, {&(0x7f0000000500)="ffc1bf0473d46bf26a99f494bbb51b389d2a9b02d5237b03e46cc96b8fd8a1dfd59d9fca309c8e4b8d2cae527d1a39b0aca3897b691ccc9cc3897c3c94baa38e6bb3", 0x42}, {&(0x7f0000000580)="09b149e79cd02b6742d1eb351f7bfb8c731ffacaddb104f856b01f81fe6ffb6783c093a404b1162d5b0eab4d5269cbcfa98b573ccb139ceb6e6f5c79d24c6c27eac5d118068aa2e61dd3f5a998974d562246c86cf1cfbb25b7b1bf90adfd2c09042993275200333a73c5e8b11215a658aaff84bef0a28329724f52097ae73935c5910a62bd7a2ca95800c125ea9c89e784f68cd19ff6609ba80d2d2725987cff21a0f8d7b147a29dd397a8843886456af27da661cc2ce627f1ce87fa48b0884a7aa07f91cdfccf93f74ba89bcf177f", 0xcf}], 0x9, &(0x7f0000000800)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2, 0xffffffffffffffff, r3}}}, @rights={{0x14, 0x1, 0x1, [r4, r6]}}], 0x7c, 0x11}, 0x8001) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000d00)=""/56) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x40, 0x4b0, 0x578, 0x2000, 0x401, 0x0, 0x4, 0x0, {0xffffffa0, 0x9}, {0x7, 0x400}, {0x7fffffff, 0x3ff}, {0x7, 0x288, 0x1}, 0x1, 0x40, 0x29, 0x8001, 0x1, 0x80, 0x51, 0x4, 0x8000, 0x6, 0xffc, 0x2, 0x2, 0x0, 0x3, 0x1}) 13:11:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 13:11:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 13:11:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) [ 213.946604][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd 13:11:51 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfe60}}, 0x0) [ 214.136398][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd 13:11:51 executing program 4: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 13:11:51 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x3000408) [ 214.316944][ T5] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c002, bcdDevice=84.37 [ 214.339972][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.391774][ T5] usb 6-1: config 0 descriptor?? [ 214.450685][ T5] gspca_main: vc032x-2.14.0 probing 0ac8:c002 [ 214.496756][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.516639][ T17] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.532161][ T17] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 214.541938][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.553159][ T17] usb 4-1: config 0 descriptor?? [ 215.070426][ T17] ryos 0003:1E7D:31CE.0001: item fetching failed at offset 0/1 [ 215.078956][ T17] ryos 0003:1E7D:31CE.0001: parse failed [ 215.084780][ T17] ryos: probe of 0003:1E7D:31CE.0001 failed with error -22 [ 215.275224][ T7] usb 4-1: USB disconnect, device number 2 [ 216.056399][ T9451] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.430208][ T9451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.443055][ T9451] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.458491][ T9451] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 216.468245][ T9451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.481688][ T9451] usb 4-1: config 0 descriptor?? [ 216.787992][ T9451] ryos 0003:1E7D:31CE.0002: item fetching failed at offset 0/1 [ 216.795790][ T9451] ryos 0003:1E7D:31CE.0002: parse failed [ 216.814180][ T9451] ryos: probe of 0003:1E7D:31CE.0002 failed with error -22 [ 216.840021][ T9451] usb 4-1: USB disconnect, device number 3 [ 217.556489][ T5] gspca_vc032x: reg_r err -71 [ 217.561313][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.567151][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.572533][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.578276][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.583667][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.589413][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.594795][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.600482][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.605829][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.611379][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.616975][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.622323][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.627951][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.633336][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.638807][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.644163][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.651131][ T5] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.656608][ T5] gspca_vc032x: Unknown sensor... [ 217.661804][ T5] vc032x: probe of 6-1:0.0 failed with error -22 [ 217.670854][ T5] usb 6-1: USB disconnect, device number 2 [ 218.327618][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd 13:11:56 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) 13:11:56 executing program 0: r0 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x305002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 13:11:56 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000040)) 13:11:56 executing program 5: r0 = openat$fuse(0xffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 13:11:56 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', 0x0, 0x0, 0x29, 0x0) 13:11:56 executing program 3: openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x20000, 0x0) [ 218.696472][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 218.713468][ T7] usb 6-1: can't read configurations, error -71 13:11:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, 0x0, 0x0) 13:11:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:11:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000001c0)) 13:11:56 executing program 1: r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='permhat 1'], 0x1b) 13:11:56 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0) 13:11:56 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = dup(r0) inotify_add_watch(r1, 0x0, 0x3000408) 13:11:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) 13:11:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 13:11:56 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) 13:11:56 executing program 2: openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10e83, 0x0) 13:11:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 13:11:56 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='totmaps\x00') 13:11:56 executing program 5: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)) 13:11:56 executing program 3: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) 13:11:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') 13:11:56 executing program 2: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x216381, 0x0) 13:11:56 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:11:56 executing program 0: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8) 13:11:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000000)) 13:11:56 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003340)) 13:11:56 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[], 0x64, 0x0) 13:11:56 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:11:57 executing program 2: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfffffffffffffcd6) 13:11:57 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) 13:11:57 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:11:57 executing program 3: syz_genetlink_get_family_id$nl80211(0xfffffffffffffffe) 13:11:57 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) 13:11:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 13:11:57 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 13:11:57 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff7000/0x3000)=nil, 0x3000) 13:11:57 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) [ 218.964189][T10199] AppArmor: change_hat: Invalid input '1' [ 219.858124][ T34] audit: type=1326 audit(1607951517.339:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10245 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:11:57 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_delete(0x0) 13:11:57 executing program 0: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/38) 13:11:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 13:11:57 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 220.060187][ T34] audit: type=1326 audit(1607951517.539:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10263 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:11:57 executing program 5: socket(0x1, 0x0, 0x304) 13:11:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x9, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xb, 0x1, 0x1, 0x8, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x1c}, @jmp={0x5, 0x1, 0x6, 0x6, 0xb, 0x30, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x1, 0x6, 0x8, 0x8, 0x40, 0xfffffffffffffffc}], &(0x7f0000000180)='syzkaller\x00', 0xfffffff9, 0x39, &(0x7f00000001c0)=""/57, 0x40f00, 0x0, [], 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x4d, 0xffffff80}, 0x10}, 0x78) rt_sigaction(0x2e, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25020000005400038008000200ff00000008000100f8ffffff08000200018000000800010006000000080001000000000008000300070000000800010006000000080003000100000008000200ff0f00000800030008000000d80005803c00028008000200a50000000800020004000000080003000101000008000400090000000800010014000000080003009429ffff080001000d0000001c000280080002007f000000080001001d00000008000200010001000c000280080004000000080001001d0000000800030002000000080002000200000008000200a19f000008000200000000000800040000000000080001000000000008000200fa000000240002800800010019000000080001001b0000000800020001000000080001000b0000001c000680080001000300000010000300dbfea7f1ba792a05448f189f00"/342], 0x15c}, 0x1, 0x0, 0x0, 0x4010}, 0x840) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) 13:11:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 13:11:57 executing program 1: io_setup(0x1, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(r0, 0x4, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x0, r1+60000000}) 13:11:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40b18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:11:57 executing program 3: timer_create(0x83857e6db569667a, 0x0, &(0x7f0000000280)) 13:11:57 executing program 5: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x82) 13:11:57 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') 13:11:57 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x4}, &(0x7f0000000100)={0x2}, 0x0) 13:11:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000906010100eb0000010bfdff1d000400070001000600f2ff9b0007801800018080ddffffffffffdffe000000f20002000000f10006000000000000000c00090000001600000014aa140017007665746800000200616e0000000080000500070088000000140017007678636d020000000010001b02010000090012da0840000000b700000c001b4072dcf77b0019adc1b3f0251846ce0140ee04000000000000000432b2ab86000000001a000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfdc6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x983714, 0x0) 13:11:58 executing program 5: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff4000/0x9000)=nil, 0x9000, &(0x7f0000000000)=""/161) 13:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 13:11:58 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xd2f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:11:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "ca29894c8545a352cba408a3d1391b899714c3a05aafbb1f469ab98986b6c9e1fc6e801edbddff7fd897084e66d8820b8fec725bcaf304f732e21bc4b284e16f14a658b30ef26d34c5e4376d7b85e0f5b47a16913c50b2b536c1e7a2d17b279dac8c3f4a2c1fc0002c094b409bd1901276b3430b0063d14183179c9ffd48390f4904ff84ee48c2c8bef492792f69c3950bc104c1a936cb28de6e53c0f0f2365f74221c36171686cc1698a924d5b7853c492d171eae99bf244e1a8cab56ddf5be000fbcfc48a35bea30bc3dc848965dc0feeae2f0d16e9718e2b39e6de521ac8d314a589b90354bdaf455a541f92cd2c94e9cf6aecfb645054df3b7fdfd3b29611b479cafd4b47ac700c0376247628219581029bc270e57edf0f0865b66c0212a6be3760a42e61869e03f898a0634cc3d310fbda5cf59efd7653e5230ded59b9fa6c0e83e6d3779c49894a09aec85cbc518033c65d7af3264c121fd2868519659dc7765f3ccdca8d75d4e08a4a4a7cf1a9745db0b06d9d4e0d51774a443b5c337d7c491d2f6f631c587f18ae7a29bcb09d8c8be558defeec51979046f645c23cba435344a40c5a31c976fe9e7a79756309c9cebc18da6e98a04908ab1cc6e0c9eb79399ee88b39df4f874ce639343bea1dab4b38c788648301aa1742c97300d49950a5a87ba507c878de130cf76db5ede06450421e29fe47de6e12aa33091461280413054e7c92acdb376fcb2220e25742c1c9306fb43e970c29c41045ead1df64c26d76e8a00c47411f6e02ef0fb9bf4907d83b3e7c6eae928965467359da9b0a5f809cac1940d48a0bd661c6f2f1ad07e926cd96d963857fe05a74e34bf5c96efa250c1aa7a01fe08c9c4ce6183db2e6e9f17c0a388fbef7116d88f5a6d88cc891863b6e90558ad77de66da7dc6c05323491f5bc6faed64a8a2b63d6c830ae0af307bcd47fa23b3a950e680f44452d746bac6719af37ad9de7f12ba63ce3503bcdce717e14da715944fd126835d818251fb9e9a5259f5210b9414cbaccd5208a6da39a1d43b4f0725ad1ba3965ac6190b99cc03be86795bf5e1a121c1ac3ad301237b1c38686cfb169006005bb5ce9040975fdfeea6ed78e83f22529017cc2684e818dca9572e192cff64899abc6d1be02e17a8dd2118a627b064c6509c88cd3ee91813e933a0de3ecdd74e930867f84d9ba6d98007995a3c57ba6358989136181b41408de75e38173667eeb1b7d8b5a7195e78cf0167f2ee8f252a8f82ae4611e5a95aa6bbf1dc2efba0dec326abbadb47bd3210d8ddbdebca0f45af186567130c878c933fbf86f9483da2c2374923e4eb96527c795ee4d5a6794ed18a9e2e4fabad934e43cad828e623b76133e8cc4897e8edf1b62e7d2d08f414db46945846e2cd9590841f7c12967cb76678d62ad0652fc690c20068802a1c7f00b9266a4e3fe30cc961a310cbdfc948b917dcd76fece508c322f3708ca041d36e67538623d986e7928b9be6edb6a3b6954eb9a7da37749162f28749bba12cfbbaa80503263bb6d2f95aa9a688587fdaa1af7b8e12430bfab3ceb087c0697107e0da1be7397df08ea2abd54dd1380adc717d0dbd53ac213d83775721d5583bc69cceae25db7e88e878947579e8cfbe15252a773ec39499912190a519728362d67c6cd750b2e5117fc61d217d7b51e77e74cae9e4fa7fe6f523cb97be8ba09772621fce39c534ad41cc7e7767ae9a75dad2adb90dcd676b501b49323cee00757e24eaff72e4ab4ed1f34963a65b94e272db9c99b8a1663e94907ee9c71fc8d3e83a7158865b4c3276c0b376a9b966aa10c352916c2415b17eff443b8190de9a2c17ee1a99b35704c6566a3888c05dc7c430f0eaa581c274d94187ada67a01814f83e7565f8113d848ccb2f9acf6d645c35680c1109cf23f745872b59e872a794187dc827cb18d6043631fc9c617c769ccbdae6a5b7e995cde359023bd8cf48b9af33ea491a66b88ca94b290842139e2d6820aea8f53f227660a913b9d2a4d950eb2aef7b528dba882c4c26fe4e749d2f6dfe36524ec59bf928660785dd535b43f17050102ff3cbf74dc8104aff4f38e48293bd4755224ad7d43347066f6d3c5045d80f3caf277c1120c0d2661378fde39a4cfa4dbb9a1dd5fa9d1074f716ad9928b4104acc529f2d1d34f04e20f5c6a962084943c71f19faff01f984b5033b57c9b6280e018d2a8ffc1c91c6368b495fb6000bb62319c45f57c84e76690b472a30bc54831884e57055d6004bf3df7b9e8c7591227c5b1da680bcd1b79d61255457d7ceb105080fe08d6fb83807e5073335964b4f2699695236657905667599ad83311348d350480ef6ad077107430aa20e9ace57ec91afdeabc1bfb4c254e359c7e880d10ca09c420c0b437c3f5aa2837bd2d3c09f833d65b517549304e5851b2d0facb9ea2dce8623d5cad4a96df1126bd24c354ae207943eb34a3d9072fb92a17d760aff3db0d2611b9ad5936b4e9eb2fd4bfb65f8c08e3a2b22798e59a665ba57c2057c0ca21a47cca4e82a058e94e5d7425ff2cab1e169d6b0e9082a7ceccb5eebe59711f336c2d688647e6c50d8729546f4e478422c449f4060b64dd32b9e660729f0e7f6d383fe02b42fa73274d40a47eea97c6e2e7834628238711dff45920e06d73f8289a1c8176d4e0812319970ee8102502fefe4d117c135e187d8a2273fe68496d5dec8d9edf51b32f1ecbc81db6b54fa9ddc2771777f212f5802e08400c6792a163c99db6c8f2226a118c1d4099aa020a7e1d937552beed6febb0133faaee9759773a7b1a3c61f7b8240e603a554a37febb1df360193a3e217a056561b569c036eb0df67cb8c413ea053b350167"}]}, 0x800) 13:11:58 executing program 0: open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 220.726760][T10303] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:11:58 executing program 1: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 13:11:58 executing program 4: mq_open(&(0x7f0000000240)='-+#:(#\x00', 0x40, 0x0, &(0x7f0000000280)={0x7fffffff, 0xffffffffffffffc1, 0x5, 0x80000001}) 13:11:58 executing program 5: syz_genetlink_get_family_id$netlbl_calipso(0x0) select(0x40, &(0x7f0000000300)={0x9}, 0x0, 0x0, 0x0) 13:11:58 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private}, 'veth0_virt_wifi\x00'}) 13:11:58 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2be301, 0x0) 13:11:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) clock_gettime(0x0, &(0x7f0000000000)) 13:11:58 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x180000) 13:11:58 executing program 4: msgsnd(0x0, 0x0, 0x3f, 0x0) 13:11:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0xff) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 13:11:58 executing program 2: io_setup(0x1b6, &(0x7f0000000000)) io_setup(0x800, &(0x7f0000000080)) [ 221.468032][ T34] audit: type=1326 audit(1607951518.949:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10322 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0xffff0000 13:11:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xd22a, 0x4) 13:11:59 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080), &(0x7f0000000140)={0x77359400}) 13:11:59 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x60c00, 0x0) 13:11:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000008c0)={r1, 0x1, 0x6, @link_local}, 0x10) 13:11:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) pipe2(&(0x7f0000000480), 0x0) 13:11:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x6}, 0x4) setsockopt$packet_buf(r0, 0x107, 0x16, 0x0, 0x0) 13:11:59 executing program 2: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) 13:11:59 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 13:11:59 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0xffffffffffffffff}) [ 221.863565][ T34] audit: type=1326 audit(1607951519.339:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10347 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff9549 code=0xffff0000 13:11:59 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 13:11:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x411401, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 13:11:59 executing program 5: request_key(&(0x7f0000001400)='cifs.spnego\x00', &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0) [ 221.969362][ T34] audit: type=1326 audit(1607951519.339:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10349 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:11:59 executing program 2: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0x4000) 13:11:59 executing program 3: select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x3}, &(0x7f0000000300)) 13:11:59 executing program 5: msgsnd(0x0, &(0x7f00000000c0)=ANY=[], 0x3f, 0x0) 13:11:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='syzkaller1\x00'}) 13:11:59 executing program 4: prctl$PR_SET_DUMPABLE(0x4, 0x2) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7f, 0x12) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) 13:11:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) lremovexattr(&(0x7f0000000040)='./file0\x00', 0x0) 13:11:59 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 13:11:59 executing program 3: request_key(&(0x7f0000001580)='encrypted\x00', &(0x7f0000001500)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 13:11:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 13:11:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 13:11:59 executing program 4: r0 = socket(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) 13:11:59 executing program 1: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:00 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = shmget(0x2, 0x1000, 0x147, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) 13:12:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 13:12:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) 13:12:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) 13:12:00 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$nbd(r0, 0x0, 0x23) 13:12:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x64, 0x0) 13:12:00 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) io_getevents(r0, 0x4, 0x0, 0x0, 0x0) 13:12:00 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000200)=@hat={'permhat ', 0x0, 0x5e, ['/proc/self/net/pfkey\x00', '/proc/self/net/pfkey\x00']}, 0x45) 13:12:00 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(0x0) select(0x40, &(0x7f00000003c0)={0x4}, 0x0, &(0x7f0000000440)={0x9}, &(0x7f0000000480)={0x0, 0x2710}) 13:12:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x58) [ 222.838537][ T34] audit: type=1326 audit(1607951520.319:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10404 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0x0 13:12:00 executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) clock_gettime(0x4, &(0x7f00000001c0)) [ 222.940726][ T34] audit: type=1400 audit(1607951520.419:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10415 comm="syz-executor.2" 13:12:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001e00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0xa8, 0x0, 0xffffffff, 0x0, 0x12a8, 0x1378, 0x1378, 0xffffffff, 0x1378, 0x1378, 0x5, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'wlan0\x00', 'wg0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @private}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @multicast1, @icmp_id}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x91}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 13:12:00 executing program 0: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 13:12:00 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000280)=0x54) [ 223.562107][ T34] audit: type=1326 audit(1607951521.039:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10404 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0x0 13:12:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000130001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000008901000000dbc481140a1edf610000000000000000000000040000000000f8840900000000000000000000090000000000000000000000000000000000000000000000000000000000ed0000000000cf00000000000000b1"], 0xb8}}, 0x0) 13:12:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13:12:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) 13:12:01 executing program 0: io_setup(0x8, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_destroy(r0) 13:12:01 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 13:12:01 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) [ 223.687626][ T34] audit: type=1326 audit(1607951521.169:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10444 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:12:01 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 13:12:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 13:12:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 13:12:01 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x2e4541, 0x0) [ 223.830870][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 13:12:01 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev, @private2, @loopback, 0x0, 0x0, 0x0, 0x400, 0x80, 0xc800288}) 13:12:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 13:12:01 executing program 5: pipe2(&(0x7f0000000480), 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:12:01 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) inotify_init1(0x0) 13:12:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x2, 0x4) 13:12:01 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x28100, 0x0) 13:12:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) getuid() 13:12:01 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000440)) 13:12:01 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0xfffffffffffffd3b, 0x0) [ 224.191772][ T34] audit: type=1326 audit(1607951521.669:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10474 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:12:01 executing program 2: socket$inet6(0xa, 0x0, 0x8000007) 13:12:01 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) 13:12:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40b18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x6}, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 13:12:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 13:12:01 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffff5}]}) r3 = getpgrp(0x0) tgkill(r3, r3, 0x0) 13:12:02 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) 13:12:02 executing program 1: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x7000) 13:12:02 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getitimer(0x2, &(0x7f0000000080)) 13:12:02 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x248882, 0x0) inotify_init() pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0) 13:12:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) accept4$inet(r0, 0x0, 0x0, 0x0) 13:12:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0xffffffffffffff9e}}, 0x0) 13:12:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 13:12:02 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000e7ac56"], 0x44}}, 0x0) pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0) 13:12:02 executing program 4: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 13:12:02 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x4]}, 0x8) 13:12:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13:12:02 executing program 4: add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 13:12:02 executing program 5: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) 13:12:02 executing program 2: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/8) 13:12:02 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x454381, 0x0) 13:12:02 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001140)={{0x3, 0xee00, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) [ 225.039653][ T34] kauditd_printk_skb: 2 callbacks suppressed [ 225.039669][ T34] audit: type=1326 audit(1607951522.519:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f1a549 code=0xffff0000 13:12:02 executing program 1: select(0x40, &(0x7f0000000240)={0x2}, 0x0, &(0x7f00000002c0)={0x3}, &(0x7f0000000300)) 13:12:02 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x2}) 13:12:02 executing program 2: request_key(&(0x7f0000001400)='cifs.spnego\x00', &(0x7f0000001440)={'syz', 0x2}, &(0x7f0000001480)='\',\x00', 0x0) 13:12:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 13:12:02 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x14) 13:12:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40b18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:02 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, 0xe8) 13:12:02 executing program 1: futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) clock_getres(0x2, &(0x7f0000000040)) 13:12:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) 13:12:03 executing program 3: r0 = socket(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 13:12:03 executing program 0: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7}, 0x7) 13:12:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 13:12:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) memfd_create(0x0, 0x0) 13:12:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 225.705449][ T34] audit: type=1326 audit(1607951523.179:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10560 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff9549 code=0xffff0000 13:12:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 13:12:03 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) 13:12:03 executing program 5: r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) [ 225.811507][ T34] audit: type=1326 audit(1607951523.229:18): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10569 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f4e549 code=0xffff0000 13:12:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @broadcast}, @ax25={0x3, @bcast}, 0x5}) 13:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x2013, r3, 0x2000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 225.902320][ T34] audit: type=1326 audit(1607951523.319:19): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10572 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f1a549 code=0xffff0000 13:12:03 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty, {[@noop, @generic={0x0, 0xe, "18b4bf896149a46ae1ca9ece"}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@multicast2}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@dev}]}, @cipso={0x86, 0x4a, 0x0, [{0x0, 0x2}, {0x0, 0x7, "fc2167dd8a"}, {0x0, 0x2}, {0x0, 0x12, "7f8f8448e396e7c7073a5c992a2eac8e"}, {0x0, 0xb, "f7138b74de8a2bc96f"}, {0x0, 0x10, "26564ecda3a99ee47195746e778c"}, {0x0, 0x5, "0c8cab"}, {0x0, 0x7, "c1b3f779b4"}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}]}}}}}}}, 0x0) 13:12:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) 13:12:03 executing program 0: r0 = epoll_create1(0x0) r1 = memfd_create(&(0x7f0000000400)='-&\xcf+}{,,!{($.,\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) [ 226.035505][ T34] audit: type=1326 audit(1607951523.439:20): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10576 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0xffff0000 13:12:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xffffff81}]}) 13:12:03 executing program 4: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0xffffffff, 0x0) [ 226.112204][T10588] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:12:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd74, 0x0, &(0x7f0000000040)) 13:12:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, @l2tp={0x2, 0x0, @private}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, @nfc={0x27, 0x1}}) [ 226.261468][ T34] audit: type=1326 audit(1607951523.739:21): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10595 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff9549 code=0xffff0000 13:12:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xd}]}}, &(0x7f0000001200)=""/128, 0x26, 0x80, 0x1}, 0x20) 13:12:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/41, 0x29) dup2(r0, r1) 13:12:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x13, 0x0, &(0x7f0000000040)) 13:12:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @multicast1}, @tipc=@id, @ethernet={0x0, @local}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='sit0\x00'}) 13:12:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000500)={0x0, @l2tp={0x2, 0x0, @private}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, @nfc}) 13:12:04 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:12:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0xb12, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x200100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:12:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd80, 0x0, &(0x7f0000000040)) 13:12:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8912, 0x0) 13:12:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:12:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @multicast1}, @sco={0x1f, @none}, @l2tp={0x2, 0x0, @dev}}) 13:12:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x600, 0x0, 0x0, 0x0) 13:12:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10000100, 0x0) read$FUSE(r0, 0x0, 0x0) 13:12:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000040)) [ 226.857868][ T34] audit: type=1326 audit(1607951524.339:22): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f8d549 code=0x0 13:12:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000500)={0x0, @l2tp={0x2, 0x0, @private}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, @nfc}) 13:12:04 executing program 2: syz_emit_ethernet(0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000018100300086dd6dd70f7703ab75000000000000009e4ff6ff94231c83000093"], 0x0) 13:12:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd7d, 0x0, &(0x7f0000000040)) 13:12:04 executing program 1: syslog(0x2, &(0x7f0000000000)=""/180, 0xb4) 13:12:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000001200), &(0x7f0000001240)=0x4) 13:12:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x4, 0xfffffffc}]}]}}, &(0x7f00000001c0)=""/182, 0x32, 0xb6, 0x1}, 0x20) 13:12:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x0, 'vlan0\x00', {}, 0xb188}) r1 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x30800, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'veth1_vlan\x00', {0x1}, 0xbb4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, &(0x7f0000000000)=0xfffffffffffffc4c) [ 227.619328][ T34] audit: type=1326 audit(1607951525.099:23): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f8d549 code=0x0 13:12:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x10}, 0x0) 13:12:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1600bd7c, 0x0, &(0x7f0000000040)) 13:12:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 13:12:05 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x8) 13:12:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) 13:12:05 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0x9}, 0xa0) 13:12:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000540)) 13:12:05 executing program 4: timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 13:12:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) 13:12:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {}]}) 13:12:05 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000880)='/dev/nvram\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) 13:12:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000100)={0x8, {"984cb9972f827e91f00852f36e9209c1d87c7db138069e74ef7f6c0a2f23cc31261d79d4a93598dea8d6086668c4ffe24744785ba98d3d94188705ff9ed5798cc5e27b535f689746181ebb7ae0fa319df289c02b610ff9e38e236a21b3820b8e1f9453829d24f0eaf8ce7c895b5a8fe823a459e10aa47e79ed6077cac25cd1c7d3647fd58f4083f39a4c5c2762e5a75ae679ceb4fccb081f71867d49adbb83428ec0cfae53b9477e627da9fbb941acc1076f0e8076d718b30336d91b028b7a53c592bfd6d5eb620d7edeeb4ed8c3aff99b773e5eb771db88d581f5abe39847d5487df217040ae8b19013191ab0c6f82c22cb179e98591f67460f17120c1564c24655f99c16bfafb07ef3b8281e3d30045fdc32d71152ecdc4a5485f32e146555f74d5da90dbb9b62f77461a28b9181e8de09252ea7f4c27091192eae21b67b56bfba07e75f29c26982707adbbbd714473d3ba448bd568c0db7be949c86f82305816468eb64e19c1d5940b0d1e5ccd424a4998cc2aed474d8ebc5e3b26ddefb2c7565c6a9a13588edfcef24bd48e2967439b3c5c4d5062af3f1e1cf937ad2355c37a664af789efe8925d3f45e6eb20c1dbf6c3d3ceeedee82df2a9a9502bd75e801ae99d7e42a1c9754595d6dd54be18112687aab411c0e0c05664bf575ba0844509d858280f659c0746e323dda214a46f8055735e767088e3f04f1f0c345102f26c916eb0fb20496c95a0fff53f1125f2b5964facf040be25379626a7bc5bc50fc0eb1105453b4fbadab558c52795ca0b990992c2e4479b8d26c99fd4a49905d763f2e04627512e8e3f5f65f11804eb43e4c38cf0c1beb59af502d5cddd21dac94f6d2d4cb3ce77c1609b2022f90bafc82ff15a1f103558c9cc64adff5b1fdfa421e6e35f846b21daff42c4c776cc04270eec16f37dec9a17501efc293c26f5c57b507242c6c4d4212ac5cb08eac7028e5f7d2c5bf71818dac8ff5a7e17a402bb213efda60ded7e6505bb4f5f092a6988d5b90a47c62a409f7cb2320c9a613b5e6913e0aecc510a958628eadda1d14efbd1e51824e8916ca47f1b7dff95d64d806c7b4abee2ee66b0ce900aa316f06179e34498dc2276608cda376118acd45d8f2eb2f39e531128ac13ec83a2e2abe58c83b6c69812fdb897da3563925994fa41daca89d3717f50accec8749c44376b3288eddc75e82dc58f7fa0703757642940938e84e8fbbcc694c68794b9a0ed77d88c7cee426b71832d09bfde11794e5b14adfa9225d8c664d01fe68d671779adc03674d152abbb74436dda34d03f2c37ffd78d52199f9484b11efdcab99a70aac97fcfec57bb87a0401a649e3a9b1b2f28c4ee237a65b8fdbcd5d61db74b59fe5c53ed69daed5b7c3ac340d21d3ebbe1bfe530531d90450a0f91b886c02601b4d68ac55131016b9018b28f5098010794c9521ceca204d133b9e3b502692067a24444404a298ddb1c595a67f0368a75807c6380c2eb7debfba622a104c5c6b4f57416d977156f43d17f00d343df4376f0ef54ebeed5fdaf04ff8afe1305a6fe048aa74e18f0540a6350fbddc4b8ed4729d7c3f79ec7a6319a6b306fa5bf587d66eee6e32b7539b9e1fe3aed2f410565ed48b39d72237dab3c6dd26284f5b73349f42e30cd766d64539b99afbb22001d4111b326caf8a3ca39a392d3db4ce51a602cb3548e23c8553f79c3f4bb97eb7539ea36ad0ca016334900eb4a9797363ae34f1a2f0d43bfbe72ca1183c568d72afe2043374cfe361f266b7d880858e942e2f0ac0c33c10a2a6c6a2e9de1c2f71bc73026fd182805e59cbaee7d883b5f1395f4468e78d3ca2dabfcb94e331a0d3322c37331f658170c402204a9b6f950e40e56256dc88915ce8b786864adaf36f2036e97f778336679d96797ebb0f5b09262c2d47d00c7675a53741af8fda8ebe47e6105e1fd0beebabb21e0f680eba95ec11d2c6cc3b14e06be649291884293b60c8591ea818e96525605eabe9001fcfae2610f8a2595213643069345f4de9aa18524beb8143ef5ce1112541e4c0f696b5fd9ff9f9ca3267959b954131b22b10e6b03ab483d79e08ee9f5f158ae5c85535dc65724ff7811995052c0c95c00e5915f8139ac54d61a149e82a09eeadcd274eb24a51499e8a9aa529445a26837751142ba8e0e15c3658eeb7b57f9478c4391e546f01344c3bfb635b72f8cb823567e3c6ae279f8de8cb7da71c2c6f57e640b8f76b0dd0ce3a393371372e6b6f5b542a3f396788b68de2fde2d20ff24c3a0ebc89e23f93889aef6828be6f873c20d456bb4efb11f15a89b1447291d522e009e28c2b1401b8ae6fb141589d13d0b6139cb24adef4841ad39bcd105a7574f07993a135f08ffe0c267d156e93e9de378edea474cee5023442625ce04a65babdc9f2c2c62d7a86839592f0cf028c72946834313c19e6732d4b0e48a28f9d273a017ed41e6d6bd7723c28d24e320a9b3b2629c1153c9486d135e0732c555bf13343f858db1f722c24a6db038326bc0fafa2386ae5b600d4db2e35df57810ff5d51e54e061f0c21de189508bf60039122f17d7c2be40cb36b0708c720f1b723fe5e49bd5689efbda89d0f81ec05983fcc99522bc2bdfdcb4302da0eb4ab7b4fa03898335fffca4985833a89fcbb12b22bef782bff8b3c214e6f3bb171097f33d2d59349a2435884d9334497cd855c276f512361abf4a7982287272d18bf40da9dff7f8ff08276785e1038a21535b3468e411af7d21ac74c665a9bdf79429a244e85ebb0ceb45db5c78d979a30c7025f37905b00220e6fe38722f47b10037104707807a06f70954fa5499315772ba14c6629ac9d8f2c686553c979d867e3732296bea4d39b9b896e799366649a78ca3459b4c9543435c63628905b8014467e6b2a5649fd864de81333b71c9ca2188343a05bbce8e94e4c76026d029afa081e6016864f43d340e374d504576b97ea5db8098fbdcaf6f2eeb5c7cd2b82228af07512418486c0d747e664fd656e446703b2b4c17b52c15e159dbf146eb5d1e6029ef5bdd4bf2c12d00fd0f4a4f2d0fdb1929a4101fe2c1c3c3711910dc66a848aca9b7ae0aa1279018b4bb5ce3a900f76368fd0a36316790ddf568dee55d3146a86f77a09a91bcb4350eb5ced27c671c65c2193e1a0907fd3635e5291eec35e19205fc5c91dc17229eaca82370a04f1308c75aa432c5e5ec8e6fcef06642b1e72f043ff53cfec982c5927bbaad0b1968166ab74a8ec2089fbaca29fc9346940c47600f8e0e5c71bee3e7f71bf68703d1da7a1bda96dcf14a52af7e49b96c5abeaf6e3b848fedfc00bc3a9d4ea377e1ab1d222892250979c995098230b9a20eda960fc39053b8cfe25a100357d53b48e4beb7f35c832d230e485a9584b5ad665565114aa0f7161cd7fe3b6541d1e25e58735907329f0a328c64b06e9cbc5e48811aff0e40e58880bc9e4d41112e9cc02c44763ed96a3580044448e15b472d61b4f167f2813f362e0b293529107eb10f5c686666fa6093457fc91b0170e5e2135b59931c4ed83e3f904bc96a2fa5f641f75887183276502691a4c71e1af5fc945cbce8be52a33bec4c7270725912ba9de6501316ef725dab3d482b3c39b24234bcadfec873567907e4fb32a3a3a09fb6b900c065bf912f426ff755163fccf6be1418e2fb96e08ee64645a648b0a12c266e851208045c82b48255f9d23ad521af14d4880c75ccdfc110b02e3fe879602fb21f325b59d496153244e315bb581aa32e97641c9335e70ca44284cb5e4fd7369b8f6bcc192f8cfbe438240c8ef072634459dbbdfb70d31869d9b4f6e4553a042402b3faeaef55b66c191a1ff934574cc77d688f874578a9ff6b931e38408d9e9ce03d7fa7ad541788e71a7c146d9d11384cc443b2ec21c1457cd966519ef5be2d84fea43c309a01030164d946954e3eeea00f3523d49ee03f46602302c3f6f3f8c5baf2f5840accc942da4e58b743014555c8b3b0802f12e04bfef90fb5195e9a7fc63ce37c5d763e19e15cc28fd58048bffc1df69ba851e11b9f7987e01c0ac7db73862d5bc57a75b51397aff253145573c507440326047a15d1b37f46ef8ac67f8cd29b37d47e7cdada2bd22f0d6d76122ec06ab54555f91a3cff0b425beb7da9b33eb26f26325e53c0cd85caa996e609cbf05c062b8cb71fd673af06d21e8066816de305e99cad735ce4af8764159b34c6434da3bf38117c1d72f5357c3c0a7e70c512b46987f2590018d4e6a7e304ad2ade77bec92c16c34d5b4ef6ccf5849154f7e3bc1ead25f5eb7522afe677d92d923e8ac5b057a050427608e3557a8365dfe8a05854a2258827bc6b2f24aae560b73b312bb216f5ff6beacd09c69f6aacbcc21444c6aedbfc4d6fdff1c974b82e9b151521bcedc107831002b8d1cdd9d0d82f9347c23af6a83aba6e837578c7af99c62a694712ece5286da96a8f39646889b47aa2af634da5520a65c27bab37c448ff29143fb97aaf7e7ecb71e6c76d3778ee5199f7b54c4f307ccb020170045fa4491e40566c77059c706fb1f1171bf812cf4ddebbaee1b0f11148d1b6e6f20973f739c2c6f94ddcb2455d0fb61634cd8f1f17e4b9f27df491d8ca10d8abd36f9b04fafac10dca76255f67ac1c4272707a440d03baae653bd0db4cc15a104f5f4f4f67b6d58887d9ebcfca5db40b7a8c277d2edf7b1d70ba703caa5f2f1df8ecf4662e1902540eb8a760fdf8cec18b23e05ee886433afe0f7c80586a1afeec2ef06fae35060b2bb4629e0dd5b0f6f9b6d2d845af23bfee26e1caa651f7c06de806fb033228018056cb3c7e64776e3d81a18e4a35351154c6348024ec6bd58f2d1c3a35a9b48fae4c9f61c07f20152afe012b7c868b7dd25c0b400da0f22f866a546e8afaebd8d0ecc8b85ce80dc84b77e6d2a4e4bbcb228b9c4b63c2c5478ae1ff56d373e335c4b3647157375b7c667fdc0e2e0e4143d4270785756b7d2d28638efad45d39b20cb9f39d1b26fb565587ad4d73212c1f618a44aa291142024b3d60d64a389071cd3bae80e21fdfdb77d0cd3354515383fbe4bd9a562f724f3f40cf7521ee188c998e2c6671279b3a9c69b1061b97a1f4ad0ed17b46a5dbd36fb601571db2b35afe4b6bcb7624609e904026d32bcde32b001629854ef44d89238cf55c9df606c310319de9adfccc7b254dd1a65358d54d89a813366ca30f5ccef5bdd3bafd4c2a11bfb0018aea8cd6824cef317efb58908cfbbb7f5389f3d843c613164c39744d85566c0df9df6dcbff5e99e8b64c35e1810ba6363cd261d478e53d113bebf6a7b04bf846b6f3fc2ab014957af882d630db17beca33d2e39341ae7e05226ec7bcf252a5d3f75b32ea64a051e094cb1286013c36bfa01d96ffb5fad0cc8eca8da425fefbb35c1b295efb5e0dadb406e77222be4cf6519905d2e5eac706f51b4ba15fae291baa0d45a71dcf5fe75adae095812a66f7764ad36fa9376dac00dda56b6bd26e392862e74e43e9fa0e5bd7611895ce27b88dd135affee0908d8a01566b05ece5f4e302ffc7154b0a233c1913777e806d4849dd19c4671ab400c056ace3063008102f3b649b80af53a65afe384b3a8d3f096ca4e9780572bb9e6685068444ee9ac8550380ed8e169f59c56ff863746621135ff0a0dbb406599d1ade4eb5384c48249bb3409f561973884671fd4a6ee5cc1c3222c88c57cd4eca24ad12857c7b787e4953e80e9142dafb8caeeb9a18fd92b373ea8bb955b90fdbdb7fa4e372c9f593a7ade6e1779ccc74b04995", 0x1000}}, 0x1006) openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x420000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x1, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x5000000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fb82, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000001140)='/dev/input/mice\x00', 0x400) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = dup(r1) sendfile(r1, r3, 0x0, 0x80006) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) 13:12:05 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a290930206fc010800000102814000390009", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xffb8) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) 13:12:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000400)) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000980f70215dbac49390b133a7cd"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:12:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7d, 0x4e, 0xd4, 0x10, 0x1557, 0x7720, 0x105e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x92, 0xad, 0x6e}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 13:12:05 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4202800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf256a00000008000300eeea71ab6e777f16fab528098859e3eb68709ad6bcab72de642feba5c26b4e6b47838004b7ed40f200804234af3237cf0ee4f56d0962d541718584f1aea9894a3e46f31d0bac9c11e2882db46ae268fff358786835cef4f0e6fd466db7a7edb98b2745544ccef9a445da5b097c9d", @ANYRES32=0x0, @ANYBLOB="0500d200030000000a00060008021100000000000a00060008021100000100000500d200020000000500d2000e0000000500d2000a0000000500d200090000000a0006000802110000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000895}, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 13:12:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) tkill(0x0, 0x15) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x0, 0x0, 0x401, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_emit_ethernet(0x300cce, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) 13:12:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) r1 = dup(r0) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) writev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="abcef5c67674d504f60f0c6ef130d61645070a104ba5def3fdd84f47c0d558e914d0b199740952ea1f5e42de71ca04c891eaa9b817621e5169bc91e52170bd7c727855ebd2d473be9de3c921dfe4fc86471c7aeabd84331ad732d6a19707b416a39fdccfb81c60d3afa000ab00ed004e3ac89fbe0d70d9425bc3793dcf3f5010705a1ade0780307495729ce48d74e1ea5954fec91c1d91a9c7bae0d88666525ae84baa18d8b5ab278d", 0xa9}, {&(0x7f0000000280)="946a90", 0x3}, {&(0x7f0000000400)="d8a9ccc2a420b22bd1564b5bfaef17627001010000bef8a57a98c9038f45528381d6b3058e4772f47fbc7309d31f7a1fdf08b13323fec860efb3bef0bf40d5f3e60bf870711668f02a0cdcf53fb3f375f94425ce9c1b8b1b0d76bee58de0829efeaa85133646", 0x66}, {&(0x7f0000000840)="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", 0x49b}], 0x4) [ 228.390855][T10724] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000140)=0x8c) 13:12:06 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8002, &(0x7f0000000000), 0x94) [ 228.482928][T10731] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, 0x14) 13:12:06 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 13:12:06 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)=0x98) [ 228.686379][ T17] usb 4-1: new high-speed USB device number 4 using dummy_hcd 13:12:06 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080), 0x94) 13:12:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x41) 13:12:06 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8002, &(0x7f0000000280)=ANY=[], 0xa0) [ 228.946548][ T17] usb 4-1: Using ep0 maxpacket: 16 [ 229.066705][ T17] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=10.5e [ 229.084284][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.138708][ T17] usb 4-1: config 0 descriptor?? [ 229.426469][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 229.646671][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 229.661411][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 229.716579][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 229.746417][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 229.761056][ T17] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 229.827706][ T17] asix: probe of 4-1:0.0 failed with error -71 [ 229.849476][ T17] usb 4-1: USB disconnect, device number 4 [ 230.420779][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.666333][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 230.801269][ T7] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=10.5e [ 230.810408][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.825600][ T7] usb 4-1: config 0 descriptor?? 13:12:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x40) 13:12:08 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@sndinfo={0x1c}], 0x1c}, 0x0) 13:12:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x2000}}, @dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @prinfo={0x14}], 0x40}, 0x0) 13:12:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@authinfo={0x10}], 0x10}, 0x0) 13:12:08 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000100), 0x4) 13:12:08 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1000) [ 231.076449][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 231.097092][ T7] asix: probe of 4-1:0.0 failed with error -71 [ 231.107804][ T7] usb 4-1: USB disconnect, device number 5 13:12:08 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 13:12:08 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x301, 0x0) 13:12:08 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 13:12:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x4}]}}, &(0x7f0000000080)=""/132, 0x26, 0x84, 0x1}, 0x20) 13:12:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x7, 0x83, &(0x7f0000000140)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:08 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x119040, 0x0) 13:12:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 13:12:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x84, &(0x7f00000000c0)=""/132, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) 13:12:09 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 13:12:09 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000880)='/dev/admmidi#\x00', 0x2, 0x0) read$midi(r0, &(0x7f00000008c0)=""/125, 0x7d) 13:12:09 executing program 3: keyctl$unlink(0x15, 0x0, 0xffffffffffffffff) 13:12:09 executing program 1: keyctl$unlink(0x13, 0x0, 0xffffffffffffffff) 13:12:09 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00'}, 0x10) 13:12:09 executing program 2: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x44102) 13:12:09 executing program 5: bpf$PROG_LOAD(0xa, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:09 executing program 0: read$midi(0xffffffffffffffff, 0x0, 0x0) 13:12:09 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x1c, &(0x7f0000000600)=@string={0x1c, 0x3, "082f169f55d73ee847641ffe5d7d497f36fac4fa9fd962dac211"}}]}) 13:12:09 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 13:12:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r0) 13:12:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:09 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) [ 232.306384][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd 13:12:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:09 executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 13:12:09 executing program 5: socket$can_raw(0x2, 0x3, 0x6) 13:12:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x8004500f, &(0x7f0000000400)) 13:12:09 executing program 0: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x5, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x2, "92b8"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x4, 0x8, 0x4, 0x7, 0x8}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x81, 0xfb, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0xff, "a8c2", "e4e8"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xdd, 0x3, "", "a684"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0xbb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x25, 0x20, 0x8, 0xae}, 0xe2, &(0x7f0000000140)={0x5, 0xf, 0xe2, 0x5, [@generic={0xd, 0x10, 0x1, "fa64f08272d99a03b141"}, @generic={0xb1, 0x10, 0xa, "75ac0d6a5688a6fb713129e68f4df6d3132ed4ec4460d052ebdc7a7089d6ac5980bd2de9601fd1893427b48baa6a0b253787862e081f9636997f79d268c387662d381fc1e4958589c1f8e86bac78d62c0005f26136f1d4802c08e59bbfe2451af27ae75d2242ae70fa7bf5f066edb5174c8069cea9103d1e8af2fa14499827a34c3d634c2a7cdde5294605d44a68331aa03d4e2e1977552f423631b44ec14b1fb5f94e9bbf75ba3de0888c8086a8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x8, 0x0, 0x4, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x80, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x44, 0x7}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "5f5295b52280e9804f87309ec694268127e1c40581d11effb0e9f1e5fd4261122d75e494a9b84c30dab543e7c8c2f90e341ce7aeb2d0f6bff79dde2ca03e0a5f9667686489b87f177dcfc9c7fe58500e227da4f114580b97484b98f1afde0c8861879042ec701deb6a05550d36caab4770a64193290dc4f06bfcbe927d2b9d69d252e4d2045e15a79315988532ed29b79772541ed9db40af4a6c3a3b34f9cdbb570d3bcb9aaca4151d29812dbc1939f0c5fb"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x2, 0x8}}, 0x20) [ 232.556423][ T7] usb 2-1: Using ep0 maxpacket: 16 13:12:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105014, 0x0) 13:12:10 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000180)) [ 232.676680][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.694382][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.715875][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.766099][ T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.789190][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.804820][ T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 232.826596][ T9775] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.980552][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.011426][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.029148][ T7] usb 2-1: Product: syz [ 233.033343][ T7] usb 2-1: Manufacturer: ⼈鼖흕摇︟絝罉喝醙ᇂ [ 233.055338][ T7] usb 2-1: SerialNumber: syz [ 233.066386][ T9775] usb 1-1: Using ep0 maxpacket: 32 [ 233.206395][ T9775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.228746][ T9775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.346723][ T7] cdc_ncm 2-1:1.0: bind() failure [ 233.354314][ T7] cdc_ncm 2-1:1.1: bind() failure [ 233.377253][ T7] usb 2-1: USB disconnect, device number 2 [ 233.407239][ T9775] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.416452][ T9775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.436504][ T9775] usb 1-1: Product: Ј [ 233.440635][ T9775] usb 1-1: Manufacturer: 剟떕耢胩蝏鸰铆脦ׄ톁＞䋽ቡ甭铤뢩が뗚싈໹ᰴ껧킲뿶鷷Ⳟ㺠弊枖摨뢉᝿콽쟉壾๐索堔霋䭈蠌蝡䊐烬ժൕ쨶䞫꙰鍁ഩﱫ銾⭽榝勒틤帄꜕ᖓ薘뜩犗Ṕ꽀汊㬺老믍ൗ쬻겚ᖤ⤝ⶁᦼ﯅ [ 233.474179][ T9775] usb 1-1: SerialNumber: ф [ 233.836468][ T9775] usb 1-1: 0:2 : does not exist [ 233.870668][ T9775] usb 1-1: USB disconnect, device number 2 [ 234.076362][ T17] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 234.316352][ T17] usb 2-1: Using ep0 maxpacket: 16 [ 234.436444][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.448374][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.459507][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.470013][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.480668][ T17] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.491144][ T17] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 234.656990][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.666117][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.675675][ T17] usb 2-1: Product: syz [ 234.680701][ T17] usb 2-1: Manufacturer: ⼈鼖흕摇︟絝罉喝醙ᇂ [ 234.688546][ T17] usb 2-1: SerialNumber: syz 13:12:12 executing program 1: keyctl$unlink(0x11, 0x0, 0xffffffffffffffff) 13:12:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) read$midi(r0, &(0x7f00000002c0)=""/145, 0x91) 13:12:12 executing program 3: bpf$PROG_LOAD(0x1e, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:12 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0xec883, 0x0) 13:12:12 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "508b9d90"}, 0x0, 0x0, @userptr, 0x4}) 13:12:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x0, 0x4}, 0x40) [ 234.976406][ T17] cdc_ncm 2-1:1.0: bind() failure [ 235.014710][ T17] cdc_ncm 2-1:1.1: bind() failure 13:12:12 executing program 0: r0 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)=',\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', r0) [ 235.067366][ T17] usb 2-1: USB disconnect, device number 3 13:12:12 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5015, 0x0) 13:12:12 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8002, 0x0) 13:12:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) 13:12:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x1, &(0x7f0000000080)=@raw=[@alu], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:12 executing program 4: bpf$PROG_LOAD(0x13, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:12 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80045007, 0x0) 13:12:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5001, 0x0) 13:12:12 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 13:12:12 executing program 4: r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, 0xffffffffffffffff) 13:12:12 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, 0x0) 13:12:12 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x1, 0x0) read$dsp(r0, 0x0, 0x0) 13:12:13 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000280)) 13:12:13 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045002, 0x0) 13:12:13 executing program 5: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x5, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x2, "92b8"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x4, 0x8, 0x4, 0x7, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x0, 0xe0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x81, 0xfb, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0xff, "a8c2", "e4e8"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xdd, 0x3, "", "a684"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0xbb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x25, 0x20, 0x8, 0xae}, 0xe2, &(0x7f0000000140)={0x5, 0xf, 0xe2, 0x5, [@generic={0xd, 0x10, 0x1, "fa64f08272d99a03b141"}, @generic={0xb1, 0x10, 0xa, "75ac0d6a5688a6fb713129e68f4df6d3132ed4ec4460d052ebdc7a7089d6ac5980bd2de9601fd1893427b48baa6a0b253787862e081f9636997f79d268c387662d381fc1e4958589c1f8e86bac78d62c0005f26136f1d4802c08e59bbfe2451af27ae75d2242ae70fa7bf5f066edb5174c8069cea9103d1e8af2fa14499827a34c3d634c2a7cdde5294605d44a68331aa03d4e2e1977552f423631b44ec14b1fb5f94e9bbf75ba3de0888c8086a8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x8, 0x0, 0x4, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x80, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x44, 0x7}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "5f5295b52280e9804f87309ec694268127e1c40581d11effb0e9f1e5fd4261122d75e494a9b84c30dab543e7c8c2f90e341ce7aeb2d0f6bff79dde2ca03e0a5f9667686489b87f177dcfc9c7fe58500e227da4f114580b97484b98f1afde0c8861879042ec701deb6a05550d36caab4770a64193290dc4f06bfcbe927d2b9d69d252e4d2045e15a79315988532ed29b79772541ed9db40af4a6c3a3b34f9cdbb570d3bcb9aaca4151d29812dbc1939f0c5fb"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x2, 0x8}}, 0x20) 13:12:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0x2000000000000275, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:13 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 13:12:13 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bind$rds(r0, 0x0, 0x0) 13:12:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0xe2, &(0x7f0000000200)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 13:12:13 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 13:12:13 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000880)='/dev/admmidi#\x00', 0x2, 0x0) read$midi(r0, 0x0, 0x0) 13:12:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) [ 236.036346][ T17] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 236.288243][ T17] usb 6-1: Using ep0 maxpacket: 32 [ 236.417038][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.437491][ T17] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.620953][ T17] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.634605][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.655081][ T17] usb 6-1: Product: Ј [ 236.663171][ T17] usb 6-1: Manufacturer: 剟떕耢胩蝏鸰铆脦ׄ톁＞䋽ቡ甭铤뢩が뗚싈໹ᰴ껧킲뿶鷷Ⳟ㺠弊枖摨뢉᝿콽쟉壾๐索堔霋䭈蠌蝡䊐烬ժൕ쨶䞫꙰鍁ഩﱫ銾⭽榝勒틤帄꜕ᖓ薘뜩犗Ṕ꽀汊㬺老믍ൗ쬻겚ᖤ⤝ⶁᦼ﯅ [ 236.701840][ T17] usb 6-1: SerialNumber: ф [ 237.076542][ T17] usb 6-1: 0:2 : does not exist [ 237.110677][ T17] usb 6-1: USB disconnect, device number 5 13:12:14 executing program 5: syz_io_uring_setup(0x5bb0, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 13:12:14 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 13:12:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x100081, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5001, 0x0) 13:12:14 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0xa2, &(0x7f0000000100)=""/162, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) 13:12:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:12:14 executing program 1: bpf$PROG_LOAD(0x6, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:15 executing program 5: keyctl$unlink(0xe, 0x0, 0xffffffffffffffff) 13:12:15 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000006c0)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) read$dsp(r0, &(0x7f0000000100)=""/255, 0xff) 13:12:15 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x5, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x6}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x2, "92b8"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x4, 0x8, 0x4, 0x7, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x5, 0x67, 0xabb, 0x7, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x1, 0x4, [0xa, 0x3, 0x5, 0xa], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x5, 0x5, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x5, 0xe0, 0xf41, 0xcd, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x81, 0xfb, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0xff, "a8c2", "e4e8"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xdd, 0x3, "", "a684"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0xbb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x25, 0x20, 0x8, 0xae}, 0xe2, &(0x7f0000000140)={0x5, 0xf, 0xe2, 0x5, [@generic={0xd, 0x10, 0x1, "fa64f08272d99a03b141"}, @generic={0xb1, 0x10, 0xa, "75ac0d6a5688a6fb713129e68f4df6d3132ed4ec4460d052ebdc7a7089d6ac5980bd2de9601fd1893427b48baa6a0b253787862e081f9636997f79d268c387662d381fc1e4958589c1f8e86bac78d62c0005f26136f1d4802c08e59bbfe2451af27ae75d2242ae70fa7bf5f066edb5174c8069cea9103d1e8af2fa14499827a34c3d634c2a7cdde5294605d44a68331aa03d4e2e1977552f423631b44ec14b1fb5f94e9bbf75ba3de0888c8086a8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x8, 0x0, 0x4, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x80, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x44, 0x7}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "5f5295b52280e9804f87309ec694268127e1c40581d11effb0e9f1e5fd4261122d75e494a9b84c30dab543e7c8c2f90e341ce7aeb2d0f6bff79dde2ca03e0a5f9667686489b87f177dcfc9c7fe58500e227da4f114580b97484b98f1afde0c8861879042ec701deb6a05550d36caab4770a64193290dc4f06bfcbe927d2b9d69d252e4d2045e15a79315988532ed29b79772541ed9db40af4a6c3a3b34f9cdbb570d3bcb9aaca4151d29812dbc1939f0c5fb"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r1}}, 0x18) 13:12:15 executing program 0: keyctl$unlink(0x2, 0x0, 0xffffffffffffffff) 13:12:15 executing program 4: bpf$PROG_LOAD(0x11, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:15 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x5, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x6}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x4, 0x2, "92b8"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x4, 0x8, 0x4, 0x7, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x5, 0x67, 0xabb, 0x7, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x1, 0x4, [0xa, 0x3, 0x5, 0xa], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x5, 0x5, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x5, 0xe0, 0xf41, 0xcd, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x81, 0xfb, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0xff, "a8c2", "e4e8"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0xdd, 0x3, "", "a684"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf8, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x1, 0x4, 0xbb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2, 0x25, 0x20, 0x8, 0xae}, 0xe2, &(0x7f0000000140)={0x5, 0xf, 0xe2, 0x5, [@generic={0xd, 0x10, 0x1, "fa64f08272d99a03b141"}, @generic={0xb1, 0x10, 0xa, "75ac0d6a5688a6fb713129e68f4df6d3132ed4ec4460d052ebdc7a7089d6ac5980bd2de9601fd1893427b48baa6a0b253787862e081f9636997f79d268c387662d381fc1e4958589c1f8e86bac78d62c0005f26136f1d4802c08e59bbfe2451af27ae75d2242ae70fa7bf5f066edb5174c8069cea9103d1e8af2fa14499827a34c3d634c2a7cdde5294605d44a68331aa03d4e2e1977552f423631b44ec14b1fb5f94e9bbf75ba3de0888c8086a8"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x8, 0x0, 0x4, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x80, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x44, 0x7}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100a}}, {0xb4, &(0x7f0000000280)=@string={0xb4, 0x3, "5f5295b52280e9804f87309ec694268127e1c40581d11effb0e9f1e5fd4261122d75e494a9b84c30dab543e7c8c2f90e341ce7aeb2d0f6bff79dde2ca03e0a5f9667686489b87f177dcfc9c7fe58500e227da4f114580b97484b98f1afde0c8861879042ec701deb6a05550d36caab4770a64193290dc4f06bfcbe927d2b9d69d252e4d2045e15a79315988532ed29b79772541ed9db40af4a6c3a3b34f9cdbb570d3bcb9aaca4151d29812dbc1939f0c5fb"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f0000000440), r1}}, 0x18) 13:12:15 executing program 4: bpf$PROG_LOAD(0x23, 0x0, 0x0) [ 238.076368][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.176275][ T9808] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.326374][ T7] usb 2-1: Using ep0 maxpacket: 32 13:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010825bd7000fbdbdf2502000000050006008000000006"], 0x24}}, 0x0) 13:12:15 executing program 0: socket$inet6(0xa, 0x0, 0x845) 13:12:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r0) 13:12:15 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) [ 238.446360][ T9808] usb 6-1: Using ep0 maxpacket: 32 [ 238.456530][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.476433][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 13:12:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@raw=[@btf_id, @func], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x58, 0x0, &(0x7f0000001480)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done], 0x4, 0x0, &(0x7f00000015c0)="82608e68"}) 13:12:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 238.576638][ T9808] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.608779][ T9808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.667147][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.680276][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.698520][ T7] usb 2-1: Product: Ј [ 238.702819][ T7] usb 2-1: Manufacturer: 剟떕耢胩蝏鸰铆脦ׄ톁＞䋽ቡ甭铤뢩が뗚싈໹ᰴ껧킲뿶鷷Ⳟ㺠弊枖摨뢉᝿콽쟉壾๐索堔霋䭈蠌蝡䊐烬ժൕ쨶䞫꙰鍁ഩﱫ銾⭽榝勒틤帄꜕ᖓ薘뜩犗Ṕ꽀汊㬺老믍ൗ쬻겚ᖤ⤝ⶁᦼ﯅ [ 238.742931][ T7] usb 2-1: SerialNumber: ф [ 238.844244][ T9808] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.883882][ T9808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.914030][ T9808] usb 6-1: Product: Ј [ 238.927616][ T9808] usb 6-1: Manufacturer: 剟떕耢胩蝏鸰铆脦ׄ톁＞䋽ቡ甭铤뢩が뗚싈໹ᰴ껧킲뿶鷷Ⳟ㺠弊枖摨뢉᝿콽쟉壾๐索堔霋䭈蠌蝡䊐烬ժൕ쨶䞫꙰鍁ഩﱫ銾⭽榝勒틤帄꜕ᖓ薘뜩犗Ṕ꽀汊㬺老믍ൗ쬻겚ᖤ⤝ⶁᦼ﯅ [ 238.971011][ T9808] usb 6-1: SerialNumber: ф [ 239.158222][ T7] usb 2-1: 0:2 : does not exist [ 239.179315][ T7] usb 2-1: USB disconnect, device number 4 [ 239.366727][ T9808] usb 6-1: 0:2 : does not exist [ 239.396448][ T9808] usb 6-1: USB disconnect, device number 6 [ 239.806379][ T33] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 240.046311][ T33] usb 2-1: Using ep0 maxpacket: 32 [ 240.166577][ T33] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 240.177994][ T33] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.346855][ T33] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.355922][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.365365][ T33] usb 2-1: Product: Ј [ 240.370258][ T33] usb 2-1: Manufacturer: 剟떕耢胩蝏鸰铆脦ׄ톁＞䋽ቡ甭铤뢩が뗚싈໹ᰴ껧킲뿶鷷Ⳟ㺠弊枖摨뢉᝿콽쟉壾๐索堔霋䭈蠌蝡䊐烬ժൕ쨶䞫꙰鍁ഩﱫ銾⭽榝勒틤帄꜕ᖓ薘뜩犗Ṕ꽀汊㬺老믍ൗ쬻겚ᖤ⤝ⶁᦼ﯅ [ 240.399280][ T33] usb 2-1: SerialNumber: ф 13:12:18 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000200)=0x2) 13:12:18 executing program 0: pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0xd2}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 13:12:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x891, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x26}, 0x0) 13:12:18 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20002, 0x0) 13:12:18 executing program 5: bpf$PROG_LOAD(0x6, 0x0, 0x0) [ 240.776501][ T33] usb 2-1: 0:2 : does not exist [ 240.783813][ T33] usb 2-1: USB disconnect, device number 5 13:12:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:18 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="080100001000010028bd7000ffdbdf256374722d6165732d6e656f6e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffffffffffff000000000000000000000000000000000000000004000000200000000000000000000008000100e339000008000100001000000800010001000000080001000200000008"], 0x108}}, 0x0) 13:12:18 executing program 4: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x40040) 13:12:18 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000200)=@raw=[@btf_id], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1be69}, 0x78) 13:12:18 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x200000, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 13:12:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 13:12:18 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 13:12:18 executing program 2: socketpair(0x3, 0x0, 0x0, &(0x7f0000000380)) 13:12:18 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 13:12:18 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) 13:12:18 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000400)) 13:12:18 executing program 4: syz_io_uring_setup(0x2b6a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x38d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE, 0xfffffc00) 13:12:18 executing program 3: getresuid(0x0, 0x0, &(0x7f0000000280)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 13:12:18 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800000, 0xffffffffffffffff) 13:12:18 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 13:12:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 13:12:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 13:12:18 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 13:12:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:19 executing program 1: syz_io_uring_setup(0x5bb0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x136}, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 13:12:19 executing program 5: keyctl$unlink(0x7, 0x0, 0xffffffffffffffff) 13:12:19 executing program 4: r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) 13:12:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80045005, &(0x7f0000000400)) 13:12:19 executing program 3: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 13:12:19 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 13:12:19 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc0045005, &(0x7f0000000400)) 13:12:19 executing program 1: socketpair(0x23, 0x0, 0x5, &(0x7f0000000080)) 13:12:19 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0xc441, 0x0) 13:12:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 13:12:19 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000140)=""/187, 0x8, 0xbb, 0x1}, 0x20) 13:12:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:19 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:19 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0xb9300813c2d9dad9, 0x0, 0x0) 13:12:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 13:12:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 242.046352][ T33] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.173797][T11281] binder: 11278:11281 ioctl c018620b 0 returned -14 [ 242.286513][ T33] usb 4-1: Using ep0 maxpacket: 32 [ 242.406835][ T33] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.415588][ T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.428553][ T33] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.596665][ T33] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.605791][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.626714][ T33] usb 4-1: Product: syz [ 242.631039][ T33] usb 4-1: Manufacturer: syz [ 242.648495][ T33] usb 4-1: SerialNumber: syz [ 242.976604][ T33] usb 4-1: 0:2 : does not exist [ 243.002735][ T33] usb 4-1: USB disconnect, device number 6 [ 243.697657][ T8191] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.956274][ T8191] usb 4-1: Using ep0 maxpacket: 32 [ 244.076448][ T8191] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.085159][ T8191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.101824][ T8191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.266716][ T8191] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.276771][ T8191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.284902][ T8191] usb 4-1: Product: syz [ 244.289251][ T8191] usb 4-1: Manufacturer: syz [ 244.293927][ T8191] usb 4-1: SerialNumber: syz 13:12:22 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 13:12:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 13:12:22 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100)={0x1d, 0x0, 0x80000001}, 0x0) 13:12:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x404}, 0x40) 13:12:22 executing program 0: socket$can_raw(0x2, 0xa, 0x1) 13:12:22 executing program 4: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/255, 0xff) [ 244.636587][ T8191] usb 4-1: 0:2 : does not exist [ 244.669340][ T8191] usb 4-1: USB disconnect, device number 7 13:12:22 executing program 1: bpf$PROG_LOAD(0x22, 0x0, 0x0) 13:12:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000280)) 13:12:22 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d181225"}, 0x0, 0x0, @fd}) 13:12:22 executing program 2: bpf$PROG_LOAD(0xd, 0x0, 0x0) 13:12:22 executing program 3: bpf$PROG_LOAD(0x10, 0x0, 0x0) 13:12:22 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x11, r0, 0x0) 13:12:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="bd", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 13:12:22 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x76) 13:12:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x15, &(0x7f00000004c0)=""/21, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:22 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x0, 0x0) 13:12:22 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x18, &(0x7f0000000600)=@string={0x18, 0x3, "082f169f55d73ee847641ffe5d7d497f36fac4fa9fd9"}}]}) 13:12:22 executing program 3: syz_io_uring_setup(0x5bb0, &(0x7f0000000040), &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 13:12:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x5f5e0ff}, 0x20) 13:12:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="a7"], &(0x7f0000000540)='GPL\x00', 0x1, 0xbc, &(0x7f0000000580)=""/188, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:22 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 13:12:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], &(0x7f0000000140)=""/187, 0x118, 0xbb, 0x8}, 0x20) 13:12:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 13:12:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) 13:12:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) 13:12:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:12:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x8004500b, &(0x7f0000000400)) [ 245.686379][ T3002] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 245.926330][ T3002] usb 5-1: Using ep0 maxpacket: 16 [ 246.048719][ T3002] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.060876][ T3002] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.073918][ T3002] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.085566][ T3002] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.106777][ T3002] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.119896][ T3002] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 246.287244][ T3002] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.306706][ T3002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.315227][ T3002] usb 5-1: Product: syz [ 246.329287][ T3002] usb 5-1: Manufacturer: ⼈鼖흕摇︟絝罉喝醙 [ 246.346335][ T3002] usb 5-1: SerialNumber: syz [ 246.646890][ T3002] cdc_ncm 5-1:1.0: bind() failure [ 246.655754][ T3002] cdc_ncm 5-1:1.1: bind() failure [ 246.700122][ T3002] usb 5-1: USB disconnect, device number 2 [ 247.406489][ T9775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.676441][ T9775] usb 5-1: Using ep0 maxpacket: 16 [ 247.797065][ T9775] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.811747][ T9775] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.823604][ T9775] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.835106][ T9775] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 247.845580][ T9775] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.855870][ T9775] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 248.026562][ T9775] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.036608][ T9775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.045594][ T9775] usb 5-1: Product: syz [ 248.051814][ T9775] usb 5-1: Manufacturer: ⼈鼖흕摇︟絝罉喝醙 [ 248.059571][ T9775] usb 5-1: SerialNumber: syz 13:12:25 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) 13:12:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r1) 13:12:25 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xfffffff9) 13:12:25 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x18) 13:12:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 13:12:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4048805) [ 248.336502][ T9775] cdc_ncm 5-1:1.0: bind() failure [ 248.383636][ T9775] cdc_ncm 5-1:1.1: bind() failure 13:12:25 executing program 3: keyctl$unlink(0xb, 0x0, 0xffffffffffffffff) [ 248.445325][ T9775] usb 5-1: USB disconnect, device number 3 13:12:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x7fff) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5001, 0x0) 13:12:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x84, &(0x7f00000000c0)=""/132, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x4, 0x3, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:26 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="080100001000010028bd7000ffdbdf256374722d61"], 0x108}}, 0x0) 13:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010825bd7000fbdbdf2502000000050006008000000006001d"], 0x24}}, 0x0) 13:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 13:12:26 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x84180, 0x0) 13:12:26 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 248.835584][T11476] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 13:12:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000fff000000998f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100687372002400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1], 0x50}}, 0x0) 13:12:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x31303453}}) 13:12:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000003c0)="0200000056e334081d00200000000000", 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x111843, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) dup2(0xffffffffffffffff, r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002600)=ANY=[], 0x2bcf) 13:12:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x31303453}}) 13:12:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80045510, &(0x7f0000000380)=@usbdevfs_disconnect={0x0, 0x5516, 0x5}) [ 249.076095][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.156158][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:26 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendto$inet(r0, &(0x7f0000000d80)="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", 0x481, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000007a80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 13:12:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) dup2(r1, r0) 13:12:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x0, &(0x7f00000003c0), 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x31303453, 0x20}}) 13:12:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() setpriority(0x1, r2, 0x0) 13:12:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) close(0xffffffffffffffff) 13:12:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) dup2(r1, r0) 13:12:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, &(0x7f0000000380)=@usbdevfs_disconnect={0x0, 0x5516, 0x5}) 13:12:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) 13:12:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x0, &(0x7f00000003c0)="0200000056e334081d002000", 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x31303453}}) 13:12:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)=@usbdevfs_disconnect={0x0, 0x5516, 0x5}) 13:12:27 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xcb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x0, 0x0, 0x33424752}}) 13:12:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xcb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x0, 0x0, 0x31424752}}) 13:12:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x508}}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x5ebf15ff9110b791, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) [ 250.002884][T11572] usb usb6: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 13:12:27 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xcb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x0, 0x0, 0x30314142}}) 13:12:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x207, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 13:12:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xf401, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) 13:12:27 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000300)={@dev, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3fc2c3", 0x0, 0x0, 0x0, @loopback, @ipv4={[], [], @dev}}}}}, 0x0) 13:12:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) close(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004002, 0x0) pipe(0x0) splice(r0, 0x0, r1, 0x0, 0x11300, 0x0) 13:12:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xeb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="0200000056e334081d002000000000", 0xf) openat$zero(0xffffffffffffff9c, 0x0, 0x111843, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) dup2(r1, r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=r2, @ANYBLOB="8b1132f1bb109d0517b7c0a4e895d96a16317e2b454d04e687c89ab4904f91c1975ac45b4796661ec60b71558501791cfc709772fff9bccb7d3b97f7274d23", @ANYRESOCT=r3, @ANYRESHEX=r4], 0x2bcf) 13:12:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x207, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x94}}, 0x0) 13:12:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x6) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11, 0x12, r0, 0x0) 13:12:27 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 13:12:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x5ebf15ff9110b791, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 13:12:28 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0xcb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x0, 0x0, 0x31384142}}) 13:12:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:28 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7354000100009b12c31eae8429c1"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) socket(0x1e, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:12:28 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a00)={&(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0xfffffff9}}, 0x10, 0x0}, 0x0) 13:12:28 executing program 2: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10132) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 13:12:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x508}}], 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x5ebf15ff9110b791, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 13:12:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x802c550a, &(0x7f0000000380)) [ 252.085267][ T2986] blk_update_request: I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 252.097954][ T2986] Buffer I/O error on dev loop7, logical block 32, lost async page write 13:12:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xeb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="0200000056e334081d002000000000", 0xf) openat$zero(0xffffffffffffff9c, 0x0, 0x111843, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) r1 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) dup2(r1, r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYRESOCT=r2, @ANYBLOB="8b1132f1bb109d0517b7c0a4e895d96a16317e2b454d04e687c89ab4904f91c1975ac45b4796661ec60b71558501791cfc709772fff9bccb7d3b97f7274d23", @ANYRESOCT=r3, @ANYRESHEX=r4], 0x2bcf) 13:12:29 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 13:12:29 executing program 4: syz_genetlink_get_family_id$nl80211(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x10132) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 13:12:29 executing program 5: bpf$PROG_LOAD(0x2, 0x0, 0x7) 13:12:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:29 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delneigh={0x24, 0x1d, 0x0, 0x0, 0x0, {}, [@NDA_VNI={0x8}]}, 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b8020780200110005", 0x18, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:12:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)) [ 252.579103][T11797] usb usb6: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 13:12:30 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:12:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 252.761670][ T2987] blk_update_request: I/O error, dev loop7, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 252.778508][ T2987] Buffer I/O error on dev loop7, logical block 32, lost async page write 13:12:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:30 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 253.230027][T11828] blk_update_request: I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 13:12:31 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x7fffffd}) 13:12:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 13:12:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:31 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000180)=""/48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "0bf96f1172ea4ad9aa3460047bddecf3"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x88f}, @NL80211_ATTR_PMKID={0x14, 0x55, "7d6523a7e1491f56b0bfae1fde509a8b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x4c}}, 0x4044800) 13:12:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x7fffffd}) 13:12:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000003c0)="0200000056e334081d00200000000000", 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) openat$zero(0xffffffffffffff9c, 0x0, 0x111843, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x5522, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) dup2(r2, r1) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, 0x0) 13:12:31 executing program 4: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 253.723720][ T2987] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.740425][ T2987] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 253.752396][ T2987] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.773326][ T2987] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 253.787804][ T2987] blk_update_request: I/O error, dev loop7, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.807927][ T2987] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 253.819071][ T2987] blk_update_request: I/O error, dev loop7, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.836376][ T2987] Buffer I/O error on dev loop7, logical block 3, lost async page write 13:12:31 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={0x0, 0x0, 0x18}, 0x10) [ 253.860544][ T2986] blk_update_request: I/O error, dev loop7, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 253.887361][ T2986] Buffer I/O error on dev loop7, logical block 4, lost async page write 13:12:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 13:12:31 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_issue_flush\x00'}, 0x10) 13:12:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 13:12:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x4, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20}, 0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000003c0)="0200000056e334081d00200000000000", 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) openat$zero(0xffffffffffffff9c, 0x0, 0x111843, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x5522, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1143042, 0x0) dup2(r2, r1) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, 0x0) 13:12:31 executing program 1: syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1, 0x8480) [ 254.380189][ T2987] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 254.395618][ T2987] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 254.409278][ T2987] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 13:12:31 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0x0) 13:12:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @local}) [ 254.424606][ T2987] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 254.437583][ T2987] Buffer I/O error on dev loop7, logical block 2, lost async page write 13:12:32 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$tipc(r0, 0x0, &(0x7f00000000c0)) 13:12:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 13:12:32 executing program 4: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 13:12:32 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vcsa\x00', 0x0, 0x0) setns(r0, 0x0) 13:12:32 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 13:12:32 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x10, &(0x7f0000000780)={0xfffffffb}, 0x8) 13:12:32 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) 13:12:32 executing program 1: fsopen(&(0x7f0000000140)='adfs\x00', 0x0) 13:12:32 executing program 2: pipe2$9p(0x0, 0x7000) 13:12:32 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 13:12:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 13:12:32 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 13:12:32 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x100) 13:12:32 executing program 3: syz_usb_connect(0x6, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa, 0xc, 0xa4, 0x0, 0x13d3, 0x3311, 0x6a17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0xb0, 0xe2}}]}}]}}, 0x0) 13:12:32 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, &(0x7f0000000040)) 13:12:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x80) 13:12:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 13:12:32 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vcsa\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000001b80)='\'.]].{\x00', &(0x7f0000001bc0)='./file0\x00', 0xffffffffffffffff) 13:12:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:33 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 13:12:33 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) 13:12:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x74, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040815}, 0x40040044) 13:12:33 executing program 2: syz_genetlink_get_family_id$smc(0x0) 13:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580)='batadv\x00') 13:12:33 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000001380)='SMC_PNETID\x00') 13:12:33 executing program 3: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000600), 0x0) 13:12:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 13:12:33 executing program 1: pipe2$9p(&(0x7f0000000600), 0x0) 13:12:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x0) 13:12:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:33 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x26240, 0x0) 13:12:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xdd4, 0xffffffffffffffff, 0x1}, 0x40) 13:12:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)) 13:12:33 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 13:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4}]}, 0x24}}, 0x0) 13:12:33 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6}]}) 13:12:33 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@in={0x2, 0x0, @dev}, 0x80) 13:12:33 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 13:12:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) 13:12:33 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/pid\x00') 13:12:34 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2008088}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) 13:12:34 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) 13:12:34 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/vcsa\x00', 0x0, 0x0) 13:12:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:34 executing program 2: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x79d001) 13:12:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) [ 256.978750][ T34] audit: type=1326 audit(1607951554.459:24): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0x0 13:12:34 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x803, 0x0) 13:12:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000180)=0x80) 13:12:34 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002900)='mptcp_pm\x00') 13:12:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$tipc(r0, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10) 13:12:34 executing program 4: pipe2$9p(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/loop-control\x00', 0x0, 0x0) [ 257.189684][ T34] audit: type=1326 audit(1607951554.669:25): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f0e549 code=0x0 13:12:34 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x4, &(0x7f0000000780)={0xfffffffb}, 0x8) 13:12:34 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:34 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vsock\x00', 0x101800, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/loop-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0)='batadv\x00') 13:12:34 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) 13:12:34 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000880), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x0, 0x0) 13:12:34 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x2) 13:12:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81, 0x4, 0x5, 0x4795}, {0x6, 0x0, 0x0, 0x7ff}]}) 13:12:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6}]}) 13:12:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x79d001) 13:12:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x1}]}}, &(0x7f00000002c0)=""/229, 0x26, 0xe5, 0x1}, 0x20) 13:12:35 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 257.831460][ T34] audit: type=1326 audit(1607951555.309:26): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fd1549 code=0x0 13:12:35 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002400)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:12:35 executing program 4: add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='.', 0x1, 0xfffffffffffffffb) [ 257.964799][T12119] Unknown ioctl 1075598596 [ 257.996282][ T34] audit: type=1326 audit(1607951555.469:27): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12110 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff9549 code=0x0 13:12:35 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:35 executing program 3: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/pid\x00') 13:12:35 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') pipe(&(0x7f0000000a80)) 13:12:35 executing program 4: syz_emit_ethernet(0x256, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0ea0b", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af0402"}, {0x0, 0x1, "ffffefffa0f8ca1cc8000800"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92326a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb99e5ff38403946f5ab6560d2d0124624cc383bf15d4fe6b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255518751501f4d980e61c2d908a95c5f4a1a2367bc591dd8b094822ff0642a18b79f7c5eba31fb68b2d734a6671e27182aee4de24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba423999086baa39eb8164e240069f656d3a057ecf894222a141123f5acaa556b9f30dcab2b90aa23e667016effc5dc49dfb58d8931"}]}}}}}}, 0x0) [ 258.435944][T12131] IPv6: addrconf: prefix option has invalid lifetime [ 258.460018][T12131] IPv6: addrconf: prefix option has invalid lifetime 13:12:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x28) [ 258.631150][ T34] audit: type=1326 audit(1607951556.109:28): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fd1549 code=0x0 13:12:36 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) 13:12:36 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x6, &(0x7f0000000780)={0xfffffffb}, 0x8) 13:12:36 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/slabinfo\x00', 0x0, 0x0) 13:12:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x0) 13:12:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000003c0)=@framed={{}, [@initr0]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @local, 0x0, 0x7ff}) 13:12:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 13:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) 13:12:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f00000003c0)=@framed={{}, [@func, @initr0]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20040811, 0x0, 0x0) 13:12:36 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:36 executing program 3: pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, &(0x7f0000000640)={0x18}, 0x18) write$P9_RXATTRCREATE(r0, &(0x7f0000000ac0)={0x7}, 0x7) 13:12:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81, 0x4, 0x5, 0x4795}, {0x6}]}) 13:12:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 13:12:37 executing program 3: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) 13:12:37 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) 13:12:37 executing program 2: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 259.687242][T12174] print_req_error: 44 callbacks suppressed [ 259.687328][T12174] blk_update_request: I/O error, dev loop7, sector 5 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.704814][T12174] buffer_io_error: 41 callbacks suppressed [ 259.704900][T12174] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 259.720489][T12174] blk_update_request: I/O error, dev loop7, sector 6 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.732373][T12174] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 259.748110][T12174] blk_update_request: I/O error, dev loop7, sector 7 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.759462][T12174] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 259.768490][T12174] blk_update_request: I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.779838][T12174] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 259.788629][T12174] blk_update_request: I/O error, dev loop7, sector 9 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.799894][T12174] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 259.809140][T12174] blk_update_request: I/O error, dev loop7, sector 10 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.820589][T12174] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 259.829560][T12174] blk_update_request: I/O error, dev loop7, sector 11 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.840960][T12174] Buffer I/O error on dev loop7, logical block 11, lost async page write [ 259.849817][T12174] blk_update_request: I/O error, dev loop7, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.861200][T12174] Buffer I/O error on dev loop7, logical block 12, lost async page write [ 259.870267][T12174] blk_update_request: I/O error, dev loop7, sector 13 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.881729][T12174] Buffer I/O error on dev loop7, logical block 13, lost async page write [ 259.890627][T12174] blk_update_request: I/O error, dev loop7, sector 14 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 259.901995][T12174] Buffer I/O error on dev loop7, logical block 14, lost async page write 13:12:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}], 0x300, 0x43, 0x0) [ 260.049822][ T34] audit: type=1326 audit(1607951557.529:29): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12179 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f1a549 code=0x0 13:12:37 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 13:12:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffff8, 0x4) 13:12:37 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) epoll_create(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 260.233254][T12195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:12:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)) 13:12:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 260.303824][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:12:38 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 13:12:38 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000000), 0x8) 13:12:38 executing program 3: mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) 13:12:38 executing program 2: mkdir(&(0x7f00000005c0)='./file0\x00', 0x8) 13:12:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 260.821202][ T34] audit: type=1326 audit(1607951558.299:30): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12179 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f1a549 code=0x0 13:12:38 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 13:12:38 executing program 2: socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights], 0x18}, 0x0) 13:12:38 executing program 3: syz_open_dev$loop(&(0x7f0000000840)='/dev/loop#\x00', 0x0, 0x0) 13:12:38 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@init={0x14}, @sndinfo={0x1c, 0x84, 0x4, {0x0, 0x10}}, @sndrcv={0x2c}], 0x5c}, 0x0) 13:12:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) 13:12:38 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 13:12:38 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:38 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 13:12:38 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000100)=0x3, 0x4) 13:12:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/237, 0xed}, 0x82) 13:12:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4) 13:12:38 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0x200}, 0xa0) 13:12:38 executing program 5: open$dir(&(0x7f0000000100)='./file1\x00', 0x200, 0xc4) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 13:12:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)=0x98) 13:12:39 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000100)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="0e", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000840000000100000075007f0005000000140000008400000001000000080004002906ba3f2c000000840000000200f0"], 0x54}, 0x20080) 13:12:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:39 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 13:12:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1d00", 0x44, 0x2f, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0) 13:12:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:39 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0x24}, 0x0) 13:12:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x85a60003}, 0x10) 13:12:39 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f00000002c0), &(0x7f0000000300)=0x18) 13:12:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"bc5cfef4c6af98e44c05731630fa22cb555a47abc2323181cd9994d72783"}) 13:12:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:39 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) 13:12:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x541b, 0x0) 13:12:39 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="a9c96d0caafa", @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7d9d1d", 0x44, 0x4, 0x0, @loopback={0x4}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0) 13:12:39 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0xffffffffffffffff) 13:12:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0}}) 13:12:39 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x0) 13:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)={0x0, 0x24}}, 0x0) 13:12:39 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x82000000) 13:12:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@v={0x93, 0x0, 0xa0, 0x0, @generic}) 13:12:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x65, 0x0, 0x0) 13:12:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x12, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:39 executing program 1: syz_io_uring_setup(0x264b, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 13:12:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x17, 0x0, 0x0) 13:12:39 executing program 3: r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x1, &(0x7f0000000000)={@multicast1, @multicast1, @private}, 0xc) 13:12:39 executing program 5: syz_open_dev$binderN(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x0) 13:12:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:39 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 13:12:40 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) 13:12:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x1a, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:40 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000002d80)='batadv\x00') 13:12:40 executing program 3: openat$mice(0xffffffffffffff9c, 0x0, 0x8080) openat$mice(0xffffffffffffff9c, &(0x7f0000000780)='/dev/input/mice\x00', 0x48481) 13:12:40 executing program 4: io_setup(0x20, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 13:12:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:40 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002ec0)={0x2020}, 0x2020) 13:12:40 executing program 2: ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) write$sequencer(r0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) io_setup(0x8000, &(0x7f0000000280)) 13:12:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000180)={0x0, 0x2, "e1a6"}, &(0x7f00000002c0)=0xa) 13:12:40 executing program 3: syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400800) 13:12:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x22, 0x0, 0x0) 13:12:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) 13:12:40 executing program 5: mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/60) 13:12:40 executing program 3: r0 = socket(0x26, 0x5, 0x0) ioctl$TIOCSISO7816(r0, 0x80108906, 0x0) 13:12:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback=0x7f000300, @multicast2}, 0xc) 13:12:40 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x321002, 0x0) 13:12:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getpid() r0 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x82}]}) 13:12:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x78, 0x0, 0x0) 13:12:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x13, 0x0, 0x0) 13:12:40 executing program 4: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 13:12:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:40 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 13:12:40 executing program 2: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') 13:12:40 executing program 5: r0 = socket(0x26, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) 13:12:40 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) openat(r0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) 13:12:41 executing program 4: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x208303) 13:12:41 executing program 1: syz_emit_ethernet(0x82, &(0x7f00000015c0)={@remote, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7d9d1d", 0x4c, 0x2f, 0x0, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment={0x33}]}}}}}, 0x0) 13:12:41 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/cuse\x00', 0x2, 0x0) 13:12:41 executing program 2: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9850}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @multicast1}, &(0x7f0000000480)=0xc) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x6, 0xb3a}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=ANY=[@ANYBLOB="5400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e6576650000", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 13:12:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0x541e, 0x0) 13:12:41 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0x4008b100, 0x0) 13:12:41 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) [ 263.933753][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:41 executing program 3: io_setup(0x20, &(0x7f0000000000)) 13:12:41 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 13:12:41 executing program 5: syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) io_setup(0xffffffc0, &(0x7f0000000000)) 13:12:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x19c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "2a046b5cdb5ccff3ef8c9058d7b3786e88f59e46f6416944ef0f8eb036c72c43385e35536aa880033e80a0d30b6af4c545e7eeb4dc8da8000000003e7e557b9d36f9c90535b9781ed8974f9484703eb47ac1df4475cdf8d53eaa8aa1f22fc6c475b652e8ad3bbbc87c4a3fe50a203472e35822eac1d0f7009cf7147a82091cd56cdf5ec9bb1a7f3b760977eb9f52bbc0d7a17de0850dda4074f9d8f4338050f1d1a6fece633377"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "82fcb9726699cd18da1789948aacdedb5e932d5212bc2ca40755"}}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ffffff7}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 264.048317][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x0, 0x0, 0x7) 13:12:41 executing program 2: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9850}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @multicast1}, &(0x7f0000000480)=0xc) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_RESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x6, 0xb3a}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d00)=ANY=[@ANYBLOB="5400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e6576650000", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 13:12:41 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, 0x0, 0x0) 13:12:41 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000780)='/dev/input/mice\x00', 0x48481) 13:12:41 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x22243) 13:12:41 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 13:12:41 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x11, 0x0, 0x0, 0x4b) [ 264.509575][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.530881][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x8, 0x0, 0x0) 13:12:42 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd607d9d1d004c040000000000000000000000ffff"], 0x0) 13:12:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x6c, 0x705}, 0x20}}, 0x0) 13:12:42 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x0, 0x0) 13:12:42 executing program 5: syz_emit_ethernet(0xfffffdef, &(0x7f00000015c0)={@remote, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7d9d1d", 0x4c, 0x2f, 0x0, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment]}}}}}, 0x0) [ 264.760316][ T2986] print_req_error: 19 callbacks suppressed [ 264.760336][ T2986] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 264.777612][ T2986] buffer_io_error: 18 callbacks suppressed [ 264.777623][ T2986] Buffer I/O error on dev loop7, logical block 0, lost async page write 13:12:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x22, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1496d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 264.886918][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd 13:12:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0xf, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x75, 0x0, 0x0) [ 265.120220][ T2986] blk_update_request: I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 265.132109][ T2986] Buffer I/O error on dev loop7, logical block 16, lost async page write [ 265.143204][ T2986] blk_update_request: I/O error, dev loop7, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 265.154944][ T2986] Buffer I/O error on dev loop7, logical block 17, lost async page write [ 265.164449][ T2986] blk_update_request: I/O error, dev loop7, sector 144 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 265.176645][ T2986] Buffer I/O error on dev loop7, logical block 18, lost async page write [ 265.185192][ T2986] blk_update_request: I/O error, dev loop7, sector 152 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 265.196997][ T2986] Buffer I/O error on dev loop7, logical block 19, lost async page write [ 265.210680][ T2987] blk_update_request: I/O error, dev loop7, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 265.222438][ T2987] Buffer I/O error on dev loop7, logical block 20, lost async page write [ 265.247108][ T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 265.255819][ T7] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 265.305554][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.366885][ T7] usb 5-1: language id specifier not provided by device, defaulting to English [ 265.506581][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.521411][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.539163][ T7] usb 5-1: Product: syz [ 265.549732][ T7] usb 5-1: SerialNumber: syz [ 265.888509][ T7] usb 5-1: 0:2 : does not exist [ 265.957349][ T7] usb 5-1: USB disconnect, device number 4 [ 266.586355][ T9451] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 266.968884][ T9451] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 266.979040][ T9451] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 266.990006][ T9451] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.046953][ T9451] usb 5-1: language id specifier not provided by device, defaulting to English [ 267.176982][ T9451] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.186659][ T9451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.194751][ T9451] usb 5-1: Product: syz [ 267.199709][ T9451] usb 5-1: SerialNumber: syz 13:12:44 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000002c0)=@string={0x2}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 13:12:44 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) write$sequencer(r0, 0x0, 0x0) 13:12:44 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) 13:12:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}, 0x40) 13:12:44 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xa2001, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18}, 0x18) 13:12:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 267.526605][ T9451] usb 5-1: 0:2 : does not exist [ 267.555656][ T9451] usb 5-1: USB disconnect, device number 5 13:12:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x82, 0x0, 0x0) 13:12:45 executing program 5: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0xffffffffffffffff) 13:12:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 13:12:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x18, 0x0, 0x0) [ 267.719621][ T2987] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 13:12:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r0, 0x0) [ 268.046500][ T9451] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 268.427057][ T9451] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 268.435777][ T9451] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 268.458914][ T9451] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.507138][ T9451] usb 5-1: language id specifier not provided by device, defaulting to English [ 268.637059][ T9451] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.656935][ T9451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.665098][ T9451] usb 5-1: Product: syz [ 268.685434][ T9451] usb 5-1: SerialNumber: syz [ 269.071112][ T9451] usb 5-1: 0:2 : does not exist [ 269.098815][ T9451] usb 5-1: USB disconnect, device number 6 13:12:47 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) 13:12:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 13:12:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0xa, 0x0, @dev}, 0x10) 13:12:47 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) 13:12:47 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x109200, 0x0) 13:12:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:47 executing program 2: setrlimit(0x7, &(0x7f0000000040)) 13:12:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10) 13:12:47 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000100)={[0x4000, 0x6000, 0x2000, 0x4000], 0x8, 0x1, 0x1f}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x48000) 13:12:47 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/audio1\x00', 0x8001, 0x0) [ 269.707886][ T2987] blk_update_request: I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 269.719593][ T2987] Buffer I/O error on dev loop7, logical block 80, lost async page write 13:12:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:47 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 13:12:47 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) read$hiddev(r0, &(0x7f00000000c0)=""/51, 0x33) write$sequencer(r1, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, [0x317, 0x9, 0x80000000, 0x9cd2]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 13:12:47 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000), 0x4) shmat(0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000feb000/0x13000)=nil, 0x4000) 13:12:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x16, 0x0, 0x0) 13:12:47 executing program 5: syz_genetlink_get_family_id$batadv(0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 13:12:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x2a, 0x0, 0x0) 13:12:47 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2002, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f000000c880)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f000000c900)='/dev/input/mice\x00', 0x40) 13:12:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x1e, 0x0, 0x0) 13:12:48 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) 13:12:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 13:12:48 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xb101, 0x0) [ 270.611020][ T2987] blk_update_request: I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 270.622454][ T2987] Buffer I/O error on dev loop7, logical block 64, lost async page write 13:12:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x32, 0x0, 0x0) 13:12:48 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x82000000) 13:12:48 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2}, 0xc) 13:12:48 executing program 0: getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:48 executing program 4: sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:12:48 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x101040}, 0x2f) 13:12:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x31, 0x0, 0x0) 13:12:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x8, 0x0, 0x0) 13:12:48 executing program 1: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 13:12:48 executing program 3: waitid(0x3, 0x0, 0x0, 0x2, 0x0) 13:12:48 executing program 2: syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 271.121097][T12694] blk_update_request: I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 13:12:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x6, 0x0, 0x25bf}) 13:12:48 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) 13:12:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x25, 0x0, 0x0) 13:12:48 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) 13:12:48 executing program 0: getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:48 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@random="d62c84d99180", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3217af", 0xc, 0x0, 0x0, @empty, @private0, {[@srh={0x2f}], "ee8876a4"}}}}}, 0x0) 13:12:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x6, 0x0, 0x25bf}) 13:12:49 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000100)={"bc5cfef4c6af98e44c05731630fa22cb555a47abc2323181cd9994d72783", 0x6}) 13:12:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) syz_usb_connect$uac1(0x3, 0xa5, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x1e0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "8027"}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x57, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x0, 0xc0}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x9, "", 'B'}, @as_header={0x7}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x3ff}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xba, 0x0, 0x2, {0x7}}}}}}}]}}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:12:49 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x4080) 13:12:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2}, 0xc) [ 271.560739][ T2986] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 13:12:49 executing program 0: getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000300, @loopback, @multicast2}, 0xc) 13:12:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x4b) 13:12:49 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) 13:12:49 executing program 2: ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) 13:12:49 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) 13:12:49 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:49 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x1000)=nil], 0x0, 0x0, 0x0) [ 272.246908][ T8191] usb 4-1: new high-speed USB device number 8 using dummy_hcd 13:12:49 executing program 1: ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) io_setup(0x8000, &(0x7f0000000280)) [ 272.470004][ T2987] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 272.626761][ T8191] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 272.635489][ T8191] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 272.659019][ T8191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.826712][ T8191] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.840432][ T8191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.855385][ T8191] usb 4-1: Product: syz [ 272.863040][ T8191] usb 4-1: Manufacturer: syz [ 272.873958][ T8191] usb 4-1: SerialNumber: syz [ 273.206682][ T8191] usb 4-1: 0:2 : does not exist [ 273.237244][ T8191] usb 4-1: USB disconnect, device number 8 13:12:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmat(0x0, &(0x7f0000feb000/0x13000)=nil, 0x4000) 13:12:51 executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 13:12:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x8}]}) 13:12:51 executing program 4: syz_usbip_server_init(0x1) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x80000000, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xffffffff}, 0x10}, 0x78) r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4000, 0x42) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880)='/dev/cachefiles\x00', 0x100, 0x0) 13:12:51 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:51 executing program 1: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x3, 0xffffffffffffffff, 0x0) [ 273.715685][T12817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 273.722479][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 13:12:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xab08, 0x0) 13:12:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x21, 0x0, 0x0) [ 273.793870][T12823] vhci_hcd: connection closed [ 273.796726][ T21] vhci_hcd: stop threads 13:12:51 executing program 1: syz_io_uring_setup(0x5e9b, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 273.872211][ T21] vhci_hcd: release socket [ 273.901606][ T21] vhci_hcd: disconnect device 13:12:51 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 13:12:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x6, 0x0, 0x0) 13:12:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x60}}, 0x10) 13:12:51 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) 13:12:51 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000080)={@remote, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7d9d1d", 0x4c, 0x4, 0x0, @ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x3c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}]}}}}}, 0x0) 13:12:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) [ 274.299002][T12817] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(3) [ 274.305562][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.384678][T12859] vhci_hcd: connection closed [ 274.385377][ T223] ================================================================== [ 274.398349][ T223] BUG: KASAN: null-ptr-deref in kthread_stop+0x90/0x720 [ 274.405310][ T223] Write of size 4 at addr 000000000000001c by task kworker/u4:5/223 [ 274.413308][ T223] [ 274.415651][ T223] CPU: 1 PID: 223 Comm: kworker/u4:5 Not tainted 5.10.0-rc7-syzkaller #0 [ 274.424058][ T223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.434129][ T223] Workqueue: usbip_event event_handler [ 274.439595][ T223] Call Trace: [ 274.442893][ T223] dump_stack+0x107/0x163 [ 274.447234][ T223] ? kthread_stop+0x90/0x720 [ 274.451835][ T223] ? kthread_stop+0x90/0x720 [ 274.456442][ T223] kasan_report.cold+0x5/0x37 [ 274.461138][ T223] ? kthread_stop+0x90/0x720 [ 274.465742][ T223] check_memory_region+0x13d/0x180 [ 274.471300][ T223] kthread_stop+0x90/0x720 [ 274.475728][ T223] vhci_shutdown_connection+0x17f/0x340 [ 274.481282][ T223] ? event_handler+0x14c/0x4f0 [ 274.486054][ T223] ? kfree+0xdb/0x360 [ 274.490067][ T223] event_handler+0x1f0/0x4f0 [ 274.494678][ T223] process_one_work+0x933/0x15a0 [ 274.499648][ T223] ? lock_release+0x710/0x710 [ 274.504395][ T223] ? pwq_dec_nr_in_flight+0x320/0x320 [ 274.509786][ T223] ? rwlock_bug.part.0+0x90/0x90 [ 274.514744][ T223] ? _raw_spin_lock_irq+0x41/0x50 [ 274.519794][ T223] worker_thread+0x64c/0x1120 [ 274.524494][ T223] ? process_one_work+0x15a0/0x15a0 [ 274.529740][ T223] kthread+0x3b1/0x4a0 [ 274.533825][ T223] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 274.539822][ T223] ret_from_fork+0x1f/0x30 [ 274.544261][ T223] ================================================================== [ 274.552332][ T223] Disabling lock debugging due to kernel taint [ 274.573518][ T223] Kernel panic - not syncing: panic_on_warn set ... 13:12:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x16, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 13:12:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x31, &(0x7f0000000040)={@multicast1, @loopback, @multicast2}, 0xc) 13:12:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 13:12:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x0, 0x1e0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @format_type_i_continuous={0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x1f, 0x1f}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x40}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xba, 0xc3, 0x2, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 13:12:52 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 274.580138][ T223] CPU: 0 PID: 223 Comm: kworker/u4:5 Tainted: G B 5.10.0-rc7-syzkaller #0 [ 274.589934][ T223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.600010][ T223] Workqueue: usbip_event event_handler [ 274.605466][ T223] Call Trace: [ 274.608756][ T223] dump_stack+0x107/0x163 [ 274.613123][ T223] ? kthread_associate_blkcg+0x6e0/0x700 [ 274.618755][ T223] panic+0x306/0x73d [ 274.622650][ T223] ? __warn_printk+0xf3/0xf3 [ 274.627237][ T223] ? preempt_schedule_common+0x59/0xc0 13:12:52 executing program 5: sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) [ 274.632697][ T223] ? kthread_stop+0x90/0x720 [ 274.637285][ T223] ? preempt_schedule_thunk+0x16/0x18 [ 274.642655][ T223] ? trace_hardirqs_on+0x51/0x1c0 [ 274.647678][ T223] ? kthread_stop+0x90/0x720 [ 274.652264][ T223] ? kthread_stop+0x90/0x720 [ 274.656857][ T223] end_report+0x58/0x5e [ 274.661011][ T223] kasan_report.cold+0xd/0x37 [ 274.665689][ T223] ? kthread_stop+0x90/0x720 [ 274.670309][ T223] check_memory_region+0x13d/0x180 [ 274.675424][ T223] kthread_stop+0x90/0x720 [ 274.679841][ T223] vhci_shutdown_connection+0x17f/0x340 [ 274.685386][ T223] ? event_handler+0x14c/0x4f0 [ 274.690147][ T223] ? kfree+0xdb/0x360 [ 274.694132][ T223] event_handler+0x1f0/0x4f0 [ 274.698750][ T223] process_one_work+0x933/0x15a0 [ 274.703688][ T223] ? lock_release+0x710/0x710 [ 274.708368][ T223] ? pwq_dec_nr_in_flight+0x320/0x320 [ 274.713738][ T223] ? rwlock_bug.part.0+0x90/0x90 [ 274.718673][ T223] ? _raw_spin_lock_irq+0x41/0x50 [ 274.723774][ T223] worker_thread+0x64c/0x1120 [ 274.728430][ T223] ? process_one_work+0x15a0/0x15a0 [ 274.733608][ T223] kthread+0x3b1/0x4a0 [ 274.737688][ T223] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 274.743560][ T223] ret_from_fork+0x1f/0x30 [ 274.748467][ T223] Kernel Offset: disabled [ 274.752784][ T223] Rebooting in 86400 seconds..