[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 45.678329][ T8415] sshd (8415) used greatest stack depth: 23160 bytes left Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. 2020/12/09 14:51:27 fuzzer started 2020/12/09 14:51:27 dialing manager at 10.128.0.26:44801 2020/12/09 14:51:28 syscalls: 3352 2020/12/09 14:51:28 code coverage: enabled 2020/12/09 14:51:28 comparison tracing: enabled 2020/12/09 14:51:28 extra coverage: enabled 2020/12/09 14:51:28 setuid sandbox: enabled 2020/12/09 14:51:28 namespace sandbox: enabled 2020/12/09 14:51:28 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/09 14:51:28 fault injection: enabled 2020/12/09 14:51:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/09 14:51:28 net packet injection: enabled 2020/12/09 14:51:28 net device setup: enabled 2020/12/09 14:51:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/09 14:51:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/09 14:51:28 USB emulation: enabled 2020/12/09 14:51:28 hci packet injection: enabled 2020/12/09 14:51:28 wifi device emulation: enabled 14:54:54 executing program 0: keyctl$clear(0x18, 0x0) 14:54:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fce264e9"}, 0x0, 0x0, @fd}) 14:54:54 executing program 2: clone(0x3029900, 0x0, 0x0, 0x0, 0x0) 14:54:54 executing program 3: r0 = memfd_create(&(0x7f0000000000)='{\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 14:54:54 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x0, 0x1}) 14:54:55 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syzkaller login: [ 261.571578][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 261.679231][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 261.797234][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 261.802594][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.811478][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.820178][ T8510] device bridge_slave_0 entered promiscuous mode [ 261.830406][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.858290][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.866550][ T8510] device bridge_slave_1 entered promiscuous mode [ 261.901804][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 261.933907][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.949656][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.024047][ T8516] IPVS: ftp: loaded support on port[0] = 21 [ 262.030005][ T8510] team0: Port device team_slave_0 added [ 262.033150][ T8510] team0: Port device team_slave_1 added [ 262.128064][ T8518] IPVS: ftp: loaded support on port[0] = 21 [ 262.178431][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.185420][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.227436][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.246735][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.253697][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.280595][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.335163][ T8520] IPVS: ftp: loaded support on port[0] = 21 [ 262.383144][ T8510] device hsr_slave_0 entered promiscuous mode [ 262.392009][ T8510] device hsr_slave_1 entered promiscuous mode [ 262.435096][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 262.460500][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 262.582500][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 262.792860][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.802741][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.813157][ T8512] device bridge_slave_0 entered promiscuous mode [ 262.826672][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 262.839771][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.846999][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.854482][ T8514] device bridge_slave_0 entered promiscuous mode [ 262.864640][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.871784][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.879894][ T8514] device bridge_slave_1 entered promiscuous mode [ 262.886838][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.894044][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.902802][ T8512] device bridge_slave_1 entered promiscuous mode [ 262.922043][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 262.973357][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.985433][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.995666][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.003025][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.010951][ T8516] device bridge_slave_0 entered promiscuous mode [ 263.020416][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.028132][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.035597][ T8516] device bridge_slave_1 entered promiscuous mode [ 263.049510][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.064549][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.100378][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.129084][ T8512] team0: Port device team_slave_0 added [ 263.141302][ T8512] team0: Port device team_slave_1 added [ 263.150511][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.179117][ T8514] team0: Port device team_slave_0 added [ 263.196946][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.204034][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.231494][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.244929][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.252512][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.279478][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.300648][ T8514] team0: Port device team_slave_1 added [ 263.313502][ T8510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.332544][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.340707][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.350216][ T8520] device bridge_slave_0 entered promiscuous mode [ 263.370271][ T8516] team0: Port device team_slave_0 added [ 263.379424][ T8510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.391487][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.399387][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.407890][ T8518] device bridge_slave_0 entered promiscuous mode [ 263.415345][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.424217][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.451624][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.463074][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.470343][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.478162][ T8520] device bridge_slave_1 entered promiscuous mode [ 263.493915][ T8516] team0: Port device team_slave_1 added [ 263.508376][ T8510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.521679][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.529211][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.538033][ T8518] device bridge_slave_1 entered promiscuous mode [ 263.546183][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.553117][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.580003][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.596484][ T34] Bluetooth: hci0: command 0x0409 tx timeout [ 263.614483][ T8510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.629006][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.641210][ T8512] device hsr_slave_0 entered promiscuous mode [ 263.649514][ T8512] device hsr_slave_1 entered promiscuous mode [ 263.658518][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.666430][ T8512] Cannot create hsr debugfs directory [ 263.678789][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.686221][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.712306][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.730633][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.738732][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.765062][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 263.771246][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.787397][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.815438][ T8520] team0: Port device team_slave_0 added [ 263.823479][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.868662][ T8514] device hsr_slave_0 entered promiscuous mode [ 263.876998][ T8514] device hsr_slave_1 entered promiscuous mode [ 263.883908][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.891666][ T8514] Cannot create hsr debugfs directory [ 263.899303][ T8520] team0: Port device team_slave_1 added [ 263.906734][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.918782][ T8516] device hsr_slave_0 entered promiscuous mode [ 263.925937][ T3074] Bluetooth: hci2: command 0x0409 tx timeout [ 263.932526][ T8516] device hsr_slave_1 entered promiscuous mode [ 263.940625][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.948377][ T8516] Cannot create hsr debugfs directory [ 263.995971][ T3074] Bluetooth: hci3: command 0x0409 tx timeout [ 264.022124][ T8518] team0: Port device team_slave_0 added [ 264.029463][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.037798][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.064452][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.091612][ T8518] team0: Port device team_slave_1 added [ 264.099296][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.106337][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.132566][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.156333][ T3074] Bluetooth: hci4: command 0x0409 tx timeout [ 264.171012][ T8520] device hsr_slave_0 entered promiscuous mode [ 264.179294][ T8520] device hsr_slave_1 entered promiscuous mode [ 264.185722][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.193324][ T8520] Cannot create hsr debugfs directory [ 264.236067][ T34] Bluetooth: hci5: command 0x0409 tx timeout [ 264.254159][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.264391][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.291400][ T8518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.333257][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.344296][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.371282][ T8518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.424834][ T8518] device hsr_slave_0 entered promiscuous mode [ 264.431781][ T8518] device hsr_slave_1 entered promiscuous mode [ 264.439220][ T8518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.447505][ T8518] Cannot create hsr debugfs directory [ 264.543198][ T8514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.593551][ T8514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.604539][ T8514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.633818][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.648017][ T8514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.675451][ T8516] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.700651][ T8512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.728470][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.744609][ T8516] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.754778][ T8516] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.767487][ T8512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.779525][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.788921][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.811773][ T8516] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.822518][ T8512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.835295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.848781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.858826][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.866582][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.882359][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.892201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.900683][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.907801][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.939523][ T8512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.968334][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.979271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.988388][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.001652][ T8520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.047182][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.055832][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.069726][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.080091][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.092198][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.101020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.111190][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.120248][ T8520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.131242][ T8520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.147986][ T8510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.160453][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.190459][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.199041][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.210729][ T8520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.250017][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.276399][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.283821][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.295249][ T8518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.310999][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.330419][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.342307][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.351245][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.359872][ T8518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.373944][ T8518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.394442][ T8518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.412667][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.422180][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.441744][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.449563][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.458690][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.495860][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.520535][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.530128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.539372][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.546505][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.554024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.562728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.571841][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.580794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.589239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.598088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.606593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.615097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.624049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.631823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.663120][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.671155][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.679443][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.687920][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.696792][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.705102][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.713645][ T3199] Bluetooth: hci0: command 0x041b tx timeout [ 265.715669][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.740088][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.752169][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.779243][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.788598][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.797964][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.819719][ T8510] device veth0_vlan entered promiscuous mode [ 265.831801][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.837232][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 265.840828][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.854856][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.861957][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.871386][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.880026][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.889375][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.919872][ T8510] device veth1_vlan entered promiscuous mode [ 265.935314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.945471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.954437][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.961592][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.970237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.978992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.987633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.996199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.004412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.013260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.021960][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.030351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.042078][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 266.048298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.061348][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.076412][ T3199] Bluetooth: hci3: command 0x041b tx timeout [ 266.077595][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.095273][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.105277][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.113578][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.122213][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.134444][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.151441][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.176682][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.185133][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.194422][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.201737][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.209532][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.218621][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.227694][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.234718][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.236172][ T3199] Bluetooth: hci4: command 0x041b tx timeout [ 266.243653][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.256757][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.273996][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.293214][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.316541][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 266.327731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.335283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.344162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.353213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.363556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.372336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.381018][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.389677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.398460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.407837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.416839][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.423870][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.431756][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.440689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.449244][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.456350][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.463753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.472239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.481540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.497296][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.504999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.513593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.522129][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.531330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.541108][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.553611][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.564208][ T8514] device veth0_vlan entered promiscuous mode [ 266.571214][ T8510] device veth0_macvtap entered promiscuous mode [ 266.588827][ T8518] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.599595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.609721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.619133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.631219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.641222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.649278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.682531][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.691461][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.701277][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.711367][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.721113][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.729947][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.738470][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.747467][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.755838][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.764348][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.773083][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.781694][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.792568][ T8510] device veth1_macvtap entered promiscuous mode [ 266.805938][ T8514] device veth1_vlan entered promiscuous mode [ 266.832239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.841225][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.853845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.862487][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.871384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.880866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.890155][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.898731][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.906043][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.923549][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.963464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.972156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.981124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.989667][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.996790][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.005205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.013936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.023338][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.032129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.045832][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.068464][ T8514] device veth0_macvtap entered promiscuous mode [ 267.078104][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.087631][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.096645][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.105247][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.115079][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.124393][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.133105][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.142137][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.152084][ T8516] device veth0_vlan entered promiscuous mode [ 267.174298][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.184046][ T8514] device veth1_macvtap entered promiscuous mode [ 267.192867][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.202420][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.210945][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.225103][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.235207][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.262720][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.283484][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.292858][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.305134][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.325754][ T8516] device veth1_vlan entered promiscuous mode [ 267.335834][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.345419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.361069][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.370872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.380428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.389393][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.398502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.407557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.419075][ T8518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.435933][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 267.448630][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.459910][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.482499][ T8510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.491602][ T8510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.500738][ T8510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.509498][ T8510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.535712][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.543342][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.551736][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.559568][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.567662][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.576782][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.588663][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.600543][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.611747][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.639144][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.648626][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.659273][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.669336][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.680679][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.690199][ T3199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.708795][ T8514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.717801][ T8514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.728038][ T8514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.737013][ T8514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.757224][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 267.768152][ T8516] device veth0_macvtap entered promiscuous mode [ 267.785665][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.794368][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.806742][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.814719][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.827561][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.839753][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.880939][ T8516] device veth1_macvtap entered promiscuous mode [ 267.888787][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.897916][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.905926][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.915481][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.923062][ T3199] Bluetooth: hci1: command 0x040f tx timeout [ 267.929854][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.969430][ T8512] device veth0_vlan entered promiscuous mode [ 267.996253][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.004669][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.018724][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.036229][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.047827][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.058540][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.070019][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.076431][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 268.106193][ T8520] device veth0_vlan entered promiscuous mode [ 268.116419][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.124994][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.134242][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.145800][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.156476][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 268.176617][ T8512] device veth1_vlan entered promiscuous mode [ 268.218646][ T8520] device veth1_vlan entered promiscuous mode [ 268.231706][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.243179][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.253398][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.265468][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.278099][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.290398][ T8516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.313855][ T8516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.316312][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 268.323596][ T8516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.339504][ T8516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.368520][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.369810][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.380631][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.385423][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.399855][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 268.400807][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.415536][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.424960][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.434052][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.443128][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.503521][ T805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.531349][ T805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.572695][ T8520] device veth0_macvtap entered promiscuous mode [ 268.604400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.613950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.630034][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.639642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.648466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.656997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.665305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.675550][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.683761][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.691549][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.699773][ T8518] device veth0_vlan entered promiscuous mode [ 268.712340][ T8512] device veth0_macvtap entered promiscuous mode [ 268.723816][ T8520] device veth1_macvtap entered promiscuous mode [ 268.761407][ T8512] device veth1_macvtap entered promiscuous mode [ 268.768687][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.778502][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.779045][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.830517][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.841756][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.851609][ T8518] device veth1_vlan entered promiscuous mode [ 268.862703][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.881010][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.891901][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.902396][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.913510][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.923372][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.936403][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.948028][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.955350][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.964039][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.972385][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.980489][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.989144][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.997622][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.005201][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.013303][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.022021][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.033220][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.044625][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.056896][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.067823][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:55:03 executing program 0: select(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x1000}) [ 269.078299][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.088901][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.099265][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.110430][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.111816][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.150177][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.191979][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.214187][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:55:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) [ 269.244576][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.267895][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.292113][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.305360][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.315053][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.317308][ T898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.340964][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.347730][ T898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.364278][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.382152][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.391811][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.416075][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.430641][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.441923][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.452421][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.464636][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.475583][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.485492][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.496443][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:55:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) close(r1) [ 269.509730][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.526057][ T8512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.536159][ T8512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.545550][ T8512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.554573][ T8512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:55:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1, 0x4, 0x4, 0x7}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, r0}, 0x38) [ 269.569238][ T8520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.584311][ T8520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.607512][ T8520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.629609][ T8520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.666351][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 14:55:03 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x841) [ 269.675091][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.718547][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.732773][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 14:55:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x7af19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x64) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:55:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002540)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004050) [ 269.777974][ T8518] device veth0_macvtap entered promiscuous mode [ 269.838807][ T8518] device veth1_macvtap entered promiscuous mode [ 269.847215][ T34] Bluetooth: hci0: command 0x0419 tx timeout [ 269.969721][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.978491][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.982312][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.991885][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.993869][ T35] audit: type=1804 audit(1607525703.988:2): pid=9935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir860458312/syzkaller.lclUOq/3/memory.events" dev="sda1" ino=15740 res=1 errno=0 [ 270.010456][ C1] hrtimer: interrupt took 35088 ns [ 270.042401][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.052448][ T9831] Bluetooth: hci1: command 0x0419 tx timeout [ 270.062284][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.089600][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.101413][ T35] audit: type=1804 audit(1607525704.088:3): pid=9935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir860458312/syzkaller.lclUOq/3/memory.events" dev="sda1" ino=15740 res=1 errno=0 [ 270.113901][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.156576][ T17] Bluetooth: hci2: command 0x0419 tx timeout [ 270.195794][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.206577][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.223726][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.234839][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.253461][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 270.260042][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.279697][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.294945][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.313262][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.332798][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.360490][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.396791][ T17] Bluetooth: hci4: command 0x0419 tx timeout [ 270.407253][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.422463][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.431480][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.458001][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.477937][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 270.483246][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.494414][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.507116][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.518184][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.529933][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.540201][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.551086][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.563152][ T8518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.574802][ T8518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.588002][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.621976][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.636060][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.655258][ T8518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.665689][ T8518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.675080][ T8518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.684668][ T8518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.699280][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.707387][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.707420][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:04 executing program 1: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), 0x4) 14:55:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000080)='a', 0x1}, {&(0x7f0000001080)='-', 0x1}], 0x2}, 0x0) 14:55:04 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000100), 0x4) [ 270.725389][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.729374][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.745114][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.853538][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.913576][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.923197][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.941842][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.952078][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:05 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000040), 0x4) 14:55:05 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:55:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) 14:55:05 executing program 1: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) 14:55:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa50, 0x0) lstat(&(0x7f0000000000)='./file1\x00', 0x0) [ 270.985684][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:55:05 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @broadcast, @val, {@ipv6}}, 0x0) 14:55:05 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x18, 0x2}, 0xc) 14:55:05 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 14:55:05 executing program 0: select(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x2}, 0x0, 0x0) 14:55:05 executing program 4: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040), 0x4) 14:55:05 executing program 3: semget(0x3, 0x4, 0x243) 14:55:05 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv4}}, 0x0) 14:55:05 executing program 0: r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 14:55:05 executing program 5: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 14:55:05 executing program 4: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 14:55:05 executing program 3: r0 = socket$inet6(0x18, 0x1, 0x0) accept(r0, 0x0, 0x0) 14:55:05 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 14:55:05 executing program 2: getgroups(0x1, &(0x7f0000001240)=[0xffffffffffffffff]) 14:55:05 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 14:55:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)="382abac89754959cc399a5ef2ba1cc29580c9ffc12141317341f639becc4d0288a384fa74a0fa2f050480cd0773b8fecdb9d1b22562d8af7bb7c80b0732ec8a45377ed3b903e311cade3206484e05f011a39181f3c7b5b6a6bd10ed6fead322d5d57c45bbed3d87f021844f0e285dee5cdff2515addbed5975612e083bd115c499bcc647716479dea65c55c0477fa5a4e1", 0x91, 0x0, 0x0, 0x0) 14:55:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x1) 14:55:05 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd67d90143c1c4134148cd6938286015e13400000000fe80000000000000000000000000aa"], 0x0) 14:55:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="6fe3cff289b80c", 0x7}, {&(0x7f00000000c0)="df2e2150e6bc821bffc8e1605c565ee855a57123b0bcf92e1b51e9048beab3087881c7fd0b98d6eaeb15c1462ac593f1d0d673e372691ac66b7c005baa9a7f26", 0x40}, {&(0x7f0000000100)="79eafdc90dbe3aa4893810021d05c5b519403faee7ebe88fc003", 0x1a}, {&(0x7f0000000140)="8f030d40526108a8186713926e5944fa1e7ff5493fb0f18115ff6d319adfe9c38c1d251bbde9668d16381549d019affb", 0x30}, {0x0}, {&(0x7f00000002c0)='l', 0x1}], 0x6) 14:55:05 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 14:55:05 executing program 0: select(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0) 14:55:05 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) 14:55:05 executing program 4: syz_emit_ethernet(0x206, &(0x7f0000000100)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 14:55:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 14:55:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)=@abs={0x0, 0x0, 0x2}, 0x8) 14:55:05 executing program 2: setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) 14:55:05 executing program 4: munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:55:05 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, @val, {@ipv4}}, 0x0) 14:55:05 executing program 3: r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x6bb5d58273632ca0) 14:55:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 14:55:05 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 14:55:05 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="c427ec105a9f", @local, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @random="4b3f49fb952f", "0c5b095ad53e5beb0698f52f721204b6"}}}}, 0x0) 14:55:06 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @broadcast, @val, {@ipv4}}, 0x0) 14:55:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r0, 0x0, 0x0) 14:55:06 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 14:55:06 executing program 1: mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7) 14:55:06 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000000), 0x100000000000033c) 14:55:06 executing program 4: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0) 14:55:06 executing program 2: socket$inet6(0x18, 0x986bece5b3315fe9, 0x0) 14:55:06 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:55:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/67, 0x43}], 0x1}, 0x0) sendto$unix(r1, &(0x7f0000000040)="6133105979d45eedd55897858cb5ece3b7dd0e95b5a3ee29c2c1e443be440849a75d5a7aab3573701fc65f570e8fef852bac910837411a5c384f0cae2a0cac6a5d15afeb", 0x44, 0x0, 0x0, 0x0) 14:55:06 executing program 5: open$dir(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) 14:55:06 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000000600), 0x0) 14:55:06 executing program 4: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) 14:55:06 executing program 2: open$dir(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 14:55:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/67, 0x43}], 0x1}, 0x842) sendto$unix(r1, &(0x7f0000000000)="b4", 0x1, 0x0, 0x0, 0x0) 14:55:06 executing program 5: msgsnd(0x0, 0x0, 0x64, 0x0) 14:55:06 executing program 4: writev(0xffffffffffffffff, &(0x7f0000002840)=[{0x0}], 0x1) 14:55:06 executing program 3: socketpair(0x1, 0x0, 0x2, 0x0) 14:55:06 executing program 0: socketpair(0x0, 0x0, 0x2, 0x0) 14:55:06 executing program 1: socketpair(0x1, 0x8003, 0x2, 0x0) 14:55:06 executing program 2: pwritev(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 14:55:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) 14:55:06 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="81", 0x1}, {0x0}], 0x2}, 0x0) 14:55:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x8}, 0x40) 14:55:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x19, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2c40, 0x0) 14:55:07 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000014c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000080)="81", 0x1}, {&(0x7f00000000c0)="d3", 0x1}, {&(0x7f00000010c0)="94", 0x1}, {0x0}], 0x4, &(0x7f0000001400)=[@txtime={{0x18}}, @mark={{0x14}}], 0x30}, 0x2001c841) 14:55:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x418}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x2, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="85000000000000008700000900000000950000001f0000ca"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x8, 0x81}, &(0x7f0000000100)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000006c0)='syzkaller\x00', 0x75b, 0xed, &(0x7f0000000540)=""/237, 0x41100, 0x3, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x80000000}, 0x10}, 0x78) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a, 0x0, 0xffffffffffffffff, 0xffffffff, [], 0x0, 0xffffffffffffffff, 0x0, 0x80000000}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f00000000c0), 0x0}, 0x20) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 14:55:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000100)=""/4115, 0x2a, 0x1013, 0xfffffffe}, 0x20) 14:55:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000740)='GPL\x00', 0x4, 0xf8, &(0x7f0000000780)=""/248, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@map, 0xffffffffffffffff, 0x19}, 0x14) 14:55:07 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f00000006c0)=@framed={{}, [@jmp]}, &(0x7f0000000740)='GPL\x00', 0x4, 0xf8, &(0x7f0000000780)=""/248, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 2: perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x27ab}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 0: socketpair(0xa, 0x5, 0x100, &(0x7f0000000040)) 14:55:07 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) close(r0) 14:55:07 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x418}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e00"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x2, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="85000000000000008700000900000000950000001f0000ca"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x8, 0x81}, &(0x7f0000000100)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000006c0)='syzkaller\x00', 0x75b, 0xed, &(0x7f0000000540)=""/237, 0x41100, 0x3, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x80000000}, 0x10}, 0x78) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a, 0x0, 0xffffffffffffffff, 0xffffffff, [], 0x0, 0xffffffffffffffff, 0x0, 0x80000000}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f00000000c0), 0x0}, 0x20) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 14:55:07 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="c3db93d1817f41ad06c2875e4a248d9fe0d005935bf493c66575769f77e2340951116c0b03afebf1076eef7ff74114b215d875dfe237408560fabc61a46c260639f8daeed84f", 0x46}, {&(0x7f00000000c0)="7f2b0523ca9c6b63329c891ffdc188e34156b50049136e0dad6f7287cf2c52426533c1d2dc6d9eb83f4ef12a935fa9337ab9505779bd7a144f251c71714a419988172d41587b69b38aa964908aabf25c33a61b43c3fadff87ffa0e2164664c8c1bb9069dd7379f44d05a160b27a57759d2c72754e0f1216728e6c3feaaf3c988e639d67f641b11d8f9582ab19624db027419cea54175e8d91e772fa149246de9f14b53957a414037941264742a015e13289d601597df804cc528d9e06808eb9eff8165c952f97d47a1de25f19bf6900c3a7bf66e9a1576e579e0373fc80a2855d9b87541a9042411a1e7", 0xea}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x30}, 0x8002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)="d8", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000440)=""/194, 0x20000502}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r1}) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000340)=@ipx, 0x80, &(0x7f0000000640)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/11, 0xb}], 0x4, &(0x7f00000006c0)=""/28, 0x1c}, 0x10012) 14:55:07 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x8, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001e80)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}], 0x2}, 0x10040) 14:55:07 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) 14:55:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1c7}, 0x40) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f00000002", 0x12}, {&(0x7f0000000080)="afc0557310944f7e51384956ffb596e202", 0x11}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/144, 0x90}], 0x6, &(0x7f0000000780)=""/218, 0xda}, 0x22) 14:55:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x400}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x8}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 14:55:07 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="81", 0x1}, {&(0x7f00000000c0)="d3", 0x1}, {&(0x7f00000010c0)="94", 0x1}], 0x3}, 0x0) 14:55:07 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:07 executing program 5: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="c3db93d1817f41ad06c2875e4a248d9fe0d005935bf493c66575769f77e2340951116c0b03afebf1076eef7ff74114b215d875dfe2374085", 0x38}, {&(0x7f00000000c0)="7f2b0523ca9c6b63329c891ffdc188e34156b50049136e0dad6f7287cf2c52426533c1d2dc6d9eb83f4ef12a935fa9337ab9505779bd7a144f251c71714a419988172d41587b69b38aa964908aabf25c33a61b43c3fadff87ffa0e2164664c8c1bb9069dd7379f44d05a160b27a57759d2c72754e0f1216728e6c3feaaf3c988e639d67f641b11d8f9582ab19624db027419cea54175e8d91e772fa149246de9f14b53957a414037941264742a015e13289d601597df804cc528d9e06808eb9eff8165c952f97d47a1de25f19bf6900c3a7bf66e9a1576e579e0373fc80a2855d9b87541a9042411a1e7a3", 0xeb}, {&(0x7f00000001c0)="861b422a5bd83a", 0x7}, {&(0x7f0000000200)}], 0x4, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x30}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)="d8", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000440)=""/194, 0x20000502}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r1}) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000340)=@ipx, 0x80, &(0x7f0000000640)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/11, 0xb}], 0x4, &(0x7f00000006c0)=""/28, 0x1c}, 0x10012) 14:55:07 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 14:55:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 14:55:07 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="7f2b0523ca9c6b63329c891ffdc188e34156b50049136e0dad6f7287cf2c52426533c1d2dc6d9eb83f4ef12a935fa9337ab9505779bd7a144f251c71714a419988172d41587b69b38aa964908aabf25c33a61b43c3fadff87ffa0e2164664c8c1bb9069dd7379f44d05a160b27a57759d2c72754e0f1216728e6c3feaaf3c988e639d67f641b11d8f9582ab19624db027419cea54175e8d91e772fa149246de9f14b53957a414037941264742a015e13289d601597df804cc528d9e06808eb9eff8165c952f97d47a1de25f19bf6900c3a7bf66e9a1576e579e0373fc80a2855d9b87541a9042411a1e7a3", 0xeb}, {&(0x7f00000001c0)="861b422a5bd83a", 0x7}, {0x0}], 0x3, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x30}, 0x8002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)="d8", 0xfffffdef}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000440)=""/194, 0x20000502}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@ipx, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/28, 0x1c}, 0x0) 14:55:08 executing program 2: bpf$OBJ_GET_PROG(0x7, 0xfffffffffffffffe, 0x0) 14:55:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f37, 0x830, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:55:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:08 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000000b80)) 14:55:08 executing program 3: socketpair(0x2, 0x2, 0x88, &(0x7f00000000c0)) 14:55:08 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ppp\x00', 0x40, 0x0) 14:55:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func_proto]}}, &(0x7f00000004c0)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 14:55:08 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x402100, 0x0) 14:55:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/4088, 0x2f, 0x1000, 0x1}, 0x20) 14:55:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="6af9bd4849c10751dca36fd96f6f4991f3873a611330f00e0d08c1097109a955b7b5580686bc5ed959e39c29f7d99309ce0c4750b3534f052be3098214f8a3b9cb3264fdf532eaed8134caf9337c0f4a0d72649391351b31d341372db1411478de096e9ce2d08649c18b79b43250a630a7c4b71182df47baa933a2ad3a741fb3bf53069fddeadb6543d5e1968658fa096a1304769c987bef6ddd54903bba589eafd3af1c421b7dfeeadefe60ac8f50f74aeec3dbbfee60e2d6", 0xb9}, {&(0x7f0000001540)="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", 0xe08}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000440)=""/194, 0x20000502}], 0x2}, 0x0) 14:55:08 executing program 0: socketpair(0x2b, 0x801, 0x0, &(0x7f0000000000)) 14:55:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x3}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000640)='cpuacct.usage_percpu\x00', 0x0, 0x0) 14:55:08 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001440)="d8", 0xfffffdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000440)=""/194, 0x20000502}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 14:55:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000440)=@raw=[@ldst], &(0x7f0000000480)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000740)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:08 executing program 0: socketpair(0x11, 0xa, 0xffffffff, &(0x7f0000000100)) 14:55:08 executing program 5: bpf$ITER_CREATE(0x21, 0x0, 0x10) 14:55:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x2, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x12000005f) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:55:08 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200), 0x10) 14:55:08 executing program 2: socketpair(0x2, 0x2, 0x0, &(0x7f00000000c0)) 14:55:08 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:09 executing program 0: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001b40)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 14:55:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'rdma'}]}, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x0) 14:55:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0}, 0x78) 14:55:09 executing program 3: socketpair(0x2, 0x1, 0x4, &(0x7f0000000200)) 14:55:09 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) 14:55:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x7a}]}}, &(0x7f00000016c0)=""/146, 0x26, 0x92, 0x1}, 0x20) 14:55:09 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x10) 14:55:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x78) 14:55:09 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001e80)) recvmsg(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002200)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002280)=""/180, 0xb4}, {&(0x7f0000002340)=""/155, 0x9b}, {&(0x7f0000002400)=""/38, 0x26}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/100, 0x64}, {&(0x7f00000025c0)=""/247, 0xf7}], 0x6, &(0x7f0000002740)=""/121, 0x79}, 0x10040) 14:55:09 executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 14:55:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000f608e1086d0440081d1a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 14:55:09 executing program 4: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) 14:55:09 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902", @ANYBLOB="53f6"], 0x0) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 14:55:09 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) 14:55:09 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001e80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) 14:55:09 executing program 4: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff}}]}}}]}}]}}, 0x0) 14:55:09 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f00000055c0)={{0x12, 0x1, 0x0, 0xda, 0xc8, 0x4c, 0x0, 0x2040, 0x4901, 0xb3f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfd, 0xfd, 0x79, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0xfc, 0x0, [@generic={0x2, 0x24}]}}]}}]}}]}}, &(0x7f00000059c0)={0xa, &(0x7f0000005900)={0xa, 0x6, 0x201, 0x5, 0x0, 0x0, 0xff, 0xaf}, 0xb, &(0x7f0000005940)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000005980)=@lang_id={0x4, 0x3, 0x41f}}]}) 14:55:09 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x3bf, 0x0, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xd2, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x9, 0xd4, 0x1}, 0xf, &(0x7f0000000940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2c, 0x3}]}}) 14:55:09 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 276.056599][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.077064][ T9913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 276.216681][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 276.224329][ T9814] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 276.256833][ T3199] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 276.297147][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 276.312379][ T9831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 276.416665][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=1a.1d [ 276.427134][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.445634][ T7] usb 1-1: config 0 descriptor?? [ 276.456587][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 276.456698][ T9913] usb 4-1: config index 0 descriptor too short (expected 63059, got 96) [ 276.477654][ T9913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.489844][ T9913] usb 4-1: config 0 has no interfaces? [ 276.497767][ T3199] usb 6-1: Using ep0 maxpacket: 8 [ 276.509324][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 276.577022][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 276.596849][ T9814] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 276.599774][ T9831] usb 3-1: Using ep0 maxpacket: 32 [ 276.626927][ T9913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.642475][ T9913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.646729][ T3199] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 276.662139][ T9913] usb 4-1: Product: syz [ 276.668750][ T9913] usb 4-1: Manufacturer: syz [ 276.690786][ T9913] usb 4-1: config 0 descriptor?? [ 276.776849][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 276.786403][ T9814] usb 5-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.40 [ 276.786794][ T9831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.797740][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.809668][ T9831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.815741][ T9814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.827047][ T9831] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.841836][ T5] usb 2-1: Product: syz [ 276.846054][ T9831] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 276.848695][ T3199] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.864337][ T9831] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.867450][ T5] usb 2-1: Manufacturer: syz [ 276.878072][ T9831] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 276.881710][ T9814] usb 5-1: Product: syz [ 276.895562][ T3199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.903826][ T5] usb 2-1: SerialNumber: syz [ 276.909146][ T9814] usb 5-1: Manufacturer: syz [ 276.913831][ T9814] usb 5-1: SerialNumber: syz [ 276.923136][ T3199] usb 6-1: Product: syz [ 276.928671][ T3199] usb 6-1: Manufacturer: syz [ 276.933594][ T3199] usb 6-1: SerialNumber: syz [ 276.960063][T10339] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 276.962741][ T9913] usb 4-1: USB disconnect, device number 2 [ 276.972834][T10344] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 276.979899][ T7] gspca_stv06xx: I2C: Read error writing address: -71 [ 276.988569][ T5] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 277.008212][ T3199] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 277.018294][ T9814] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 277.057166][ T9831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.068667][ T7] usb 1-1: USB disconnect, device number 2 [ 277.072273][ T9831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.120103][ T9831] usb 3-1: Product: syz [ 277.130067][ T9831] usb 3-1: Manufacturer: syz [ 277.134889][ T9831] usb 3-1: SerialNumber: syz [ 277.192154][T10341] udc-core: couldn't find an available UDC or it's busy [ 277.205298][T10341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.214793][ T9814] usb 2-1: USB disconnect, device number 2 [ 277.236239][ T9913] usb 6-1: USB disconnect, device number 2 [ 277.244191][ T3199] usb 5-1: USB disconnect, device number 2 [ 277.392798][T10348] udc-core: couldn't find an available UDC or it's busy [ 277.400309][T10348] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.446839][ T9831] cdc_ncm 3-1:1.0: bind() failure [ 277.454211][ T9831] cdc_ncm 3-1:1.1: bind() failure [ 277.472529][ T9831] usb 3-1: USB disconnect, device number 2 [ 277.786793][ T9913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 277.936695][ T9785] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.976828][ T9831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 278.006702][ T3199] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 278.017355][ T9814] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 278.036837][ T9913] usb 1-1: Using ep0 maxpacket: 8 [ 278.176671][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 278.187492][ T9913] usb 1-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=1a.1d [ 278.200967][ T9913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.218731][ T9913] usb 1-1: config 0 descriptor?? [ 278.232680][ T9831] usb 2-1: Using ep0 maxpacket: 16 [ 278.246916][ T3199] usb 6-1: Using ep0 maxpacket: 8 [ 278.272144][ T9913] gspca_main: STV06xx-2.14.0 probing 046d:0840 14:55:12 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) [ 278.346811][ T9785] usb 4-1: config index 0 descriptor too short (expected 63059, got 96) [ 278.355437][ T9785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.367537][ T9785] usb 4-1: config 0 has no interfaces? [ 278.369244][ T3199] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 278.386503][ T9814] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 278.407409][ T9831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 278.426726][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 278.507063][ T9785] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.516320][ T9785] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.525389][ T9785] usb 4-1: Product: syz [ 278.530745][ T9785] usb 4-1: Manufacturer: syz [ 278.539471][ T9785] usb 4-1: config 0 descriptor?? [ 278.548474][ T9913] usb 1-1: USB disconnect, device number 3 [ 278.552212][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.566341][ T3199] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.575846][ T9814] usb 5-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.40 [ 278.595738][ T9814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.604855][ T3199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.617071][ T9831] usb 2-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 278.619098][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.642357][ T9831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.651142][ T9814] usb 5-1: Product: syz [ 278.655299][ T9814] usb 5-1: Manufacturer: syz [ 278.661091][ T3199] usb 6-1: Product: syz [ 278.665260][ T3199] usb 6-1: Manufacturer: syz [ 278.679948][ T9831] usb 2-1: Product: syz [ 278.684005][ T9814] usb 5-1: SerialNumber: syz [ 278.689872][ T3199] usb 6-1: SerialNumber: syz [ 278.691052][ T9831] usb 2-1: Manufacturer: syz 14:55:12 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 278.695000][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.711627][ T9831] usb 2-1: SerialNumber: syz [ 278.717697][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.729396][T10344] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.747783][ T3199] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 278.757674][T10339] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.790255][ T9814] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 278.790273][ T9831] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 14:55:12 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x188100, 0x0) 14:55:12 executing program 1: pipe(&(0x7f0000000ac0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 278.798540][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.839025][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 14:55:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000005c0)='NLBL_MGMT\x00') 14:55:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:13 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)='|', 0x1}], 0x1) [ 278.882835][ T3199] usb 4-1: USB disconnect, device number 3 [ 278.908500][ T9814] usb 5-1: USB disconnect, device number 3 14:55:13 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0xffff0000}, 0x8) [ 278.944320][ T5] usb 2-1: USB disconnect, device number 3 [ 278.956999][ T9913] usb 1-1: new high-speed USB device number 4 using dummy_hcd 14:55:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000000000103f1b0000", @ANYBLOB="030000000000000020001280080001"], 0x48}}, 0x0) [ 278.996796][T10347] usb 6-1: USB disconnect, device number 3 14:55:13 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000100)='rxrpc_s\x00', 0x0, 0xfffffffffffffffd) 14:55:13 executing program 5: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00'}, 0x10) 14:55:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') [ 279.106837][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.126892][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.134960][ T7] usb 3-1: Product: syz [ 279.177204][T10499] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.201587][ T7] usb 3-1: can't set config #1, error -71 [ 279.211899][T10502] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.221629][ T9913] usb 1-1: Using ep0 maxpacket: 16 [ 279.226490][ T7] usb 3-1: USB disconnect, device number 3 [ 279.256809][ T3199] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 279.367072][ T9913] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 279.497169][ T3199] usb 4-1: Using ep0 maxpacket: 32 [ 279.607038][ T9913] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 279.616121][ T9913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.639916][ T3199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.645496][ T9913] usb 1-1: Product: syz [ 279.651138][ T3199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.665117][ T3199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.666981][ T9913] usb 1-1: Manufacturer: syz [ 279.674950][ T3199] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.691872][ T3199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.700353][ T9913] usb 1-1: SerialNumber: syz [ 279.703631][ T3199] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 279.761288][ T9913] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 279.876996][ T3199] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.890749][ T3199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.904152][ T3199] usb 4-1: Product: syz [ 279.912299][ T3199] usb 4-1: Manufacturer: syz [ 279.924393][ T3199] usb 4-1: SerialNumber: syz [ 279.963025][T10347] usb 1-1: USB disconnect, device number 4 [ 280.185117][T10465] udc-core: couldn't find an available UDC or it's busy [ 280.200366][T10465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 280.276969][ T3199] cdc_ncm 4-1:1.0: bind() failure [ 280.284795][ T3199] cdc_ncm 4-1:1.1: bind() failure [ 280.357143][ T3199] usb 4-1: USB disconnect, device number 4 [ 280.736789][ T9831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 280.996820][ T9831] usb 1-1: Using ep0 maxpacket: 16 [ 281.006906][ T3199] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 281.127042][ T9831] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 281.247040][ T3199] usb 4-1: Using ep0 maxpacket: 32 [ 281.336880][ T9831] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 281.346185][ T9831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.358511][ T9831] usb 1-1: Product: syz [ 281.362654][ T9831] usb 1-1: Manufacturer: syz [ 281.369958][ T9831] usb 1-1: SerialNumber: syz [ 281.371816][ T3199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:55:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000007a00)=[{0x0}, {0x0}, {&(0x7f0000007900)="c1", 0x1}], 0x3) [ 281.386052][ T3199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.395994][ T3199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.406923][ T3199] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.416643][ T3199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.426880][ T3199] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 281.430038][ T9831] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 281.524354][ T9831] usb 1-1: USB disconnect, device number 5 [ 281.597088][ T3199] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.609024][ T3199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.620585][ T3199] usb 4-1: Product: syz [ 281.625082][ T3199] usb 4-1: Manufacturer: syz [ 281.629848][ T3199] usb 4-1: SerialNumber: syz 14:55:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:15 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000007680)='/dev/null\x00', 0x0, 0x0) 14:55:15 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', 0x0, 0x0, 0x0) 14:55:15 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:55:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:16 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz1\x00', 0x200002, 0x0) 14:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000001480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) [ 281.906891][ T3199] cdc_ncm 4-1:1.0: bind() failure [ 281.943994][ T3199] cdc_ncm 4-1:1.1: bind() failure [ 282.010576][ T3199] usb 4-1: USB disconnect, device number 5 14:55:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000980)=0x1a, 0x4) 14:55:16 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f0000007600)) 14:55:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:55:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)="fa0cb126561ed21b34cbdeceaf40e262", 0x10}], 0x1) [ 282.411544][ T9814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 282.722188][ T9814] usb 1-1: Using ep0 maxpacket: 16 [ 282.861225][ T9814] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 283.046963][ T9814] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 283.056332][ T9814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.065981][ T9814] usb 1-1: Product: syz [ 283.070761][ T9814] usb 1-1: Manufacturer: syz [ 283.075654][ T9814] usb 1-1: SerialNumber: syz [ 283.123948][ T9814] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 283.332230][ T7] usb 1-1: USB disconnect, device number 6 14:55:17 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:55:17 executing program 5: pipe(&(0x7f0000000ac0)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 14:55:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:17 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) 14:55:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0xee00, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0x1be, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') 14:55:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003a80)={0x0}}, 0x0) 14:55:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x101, 0x4) 14:55:18 executing program 4: pipe(&(0x7f0000000ac0)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 14:55:18 executing program 3: socket$inet(0x2, 0x0, 0x321d91) 14:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 14:55:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) [ 284.247054][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 284.506981][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 284.627644][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 284.797085][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 284.806354][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.814744][ T7] usb 1-1: Product: syz [ 284.819451][ T7] usb 1-1: Manufacturer: syz [ 284.824068][ T7] usb 1-1: SerialNumber: syz [ 284.868680][ T7] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 285.080577][ T7] usb 1-1: USB disconnect, device number 7 14:55:19 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001c80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x400}}]}}}]}}]}}, 0x0) 14:55:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000b80)={'ip6gre0\x00', 0x0}) 14:55:19 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001400), 0x4) 14:55:19 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, 0xfffffffffffffffd) 14:55:19 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b6", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x1}}}, 0x78) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 14:55:19 executing program 5: memfd_create(&(0x7f00000010c0)='}\\}_]{O,\xac\x00', 0x2) 14:55:19 executing program 5: add_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 14:55:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="b385b3"], 0x14}}, 0x0) 14:55:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611204000000000061134c0000000000bf200000000000005600000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000012000000070600000ee60000bf050000000000007e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2a5a968694aeb0743e32dc819b6cf5c8ac86f8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16f00000080172ba7cbebe17488a210d739a0c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed96649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7af0697d36edf2590248d46d1e827f3472f4445d253887a5ad103649a7a17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d0000000000000000005f58d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea000000000000000000000000000000000000000032059e98aac1f780fad603e6c515a745b5b592464f22425b2c0505"], &(0x7f0000000100)='GPL\x00'}, 0x48) 14:55:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r0) 14:55:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:55:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005280)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x40012180, 0x0) [ 285.658648][T10702] ptrace attach of "/root/syz-executor.2"[10700] was attempted by "/root/syz-executor.2"[10702] [ 285.940052][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 286.217123][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 286.347578][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 286.527288][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 286.536543][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.545335][ T7] usb 1-1: Product: syz [ 286.549956][ T7] usb 1-1: Manufacturer: syz [ 286.554595][ T7] usb 1-1: SerialNumber: syz [ 286.609027][ T7] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 286.821526][ T7] usb 1-1: USB disconnect, device number 8 14:55:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40010101) 14:55:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, 0x0, 0x0) 14:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000001140)={0x10}, 0x10}], 0x2}, 0x0) 14:55:21 executing program 4: mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:55:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5d, 0x7, 0x7, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xd}}, 0x40) 14:55:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "36a4338a3df9643b14271fcb33b1401a"}, 0x11, 0x3) 14:55:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)="fa", 0x1}], 0x1) 14:55:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={0x0}}, 0x0) 14:55:21 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000), 0x10) 14:55:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:21 executing program 1: pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) 14:55:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200100, 0x0) 14:55:21 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') 14:55:21 executing program 2: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, 0xfffffffffffffffd) 14:55:21 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18}, 0x18) 14:55:21 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) 14:55:21 executing program 3: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000140)="e9", 0x1, 0xffffffffffffffff) 14:55:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x88020000, 0x130, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x110, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}, @common=@inet=@set2={{0x28, 'set\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 14:55:21 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xc000, 0x0) 14:55:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:21 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) 14:55:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7de954244cef7baf48e6d2885a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a860c00269c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d707859a919cc9548a349980d1ccdce27f94bc074c27f81070545cab5d5b0da0f0575cc2727e8d974927676468582d8621c3ac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b00127473e6ba922aff649609d40b449ccba3ce8d530ffff19a6471baae2a83b2d36bff764b13831034694a6aad86df08a2c7b2235dc99de9aa3e6b77c7a2877261ed72da90864987f30926c9013eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000000000000000008f02712c3d8fc4e2686e21a855e823927196d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc424d1bafe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893d3626ab5becbcdb887af2c85c2d9ab09b57d3c4406d273650bf7b2ff4602aec5eea200000064881c560c371a08e051af02188c51de75de04e1cddef46bca2ed5c171474e42eace4b17914a6d531060cd70e8019fc4147efcfa564625332bd76d558d1a4ca446caa5ca2febb9b4d0758781713979c1e46b759a3f01eef4c74c9ce43b73315c01384dcceb2ba73ebe683d0384e23de78c81db613cba6b8dda952dc185d6086d5ab6e665137b7b32433ae605b3a8cd9a6295c1543f786598c4400ffa3a835f539f484a8bdfb23f82fd4c0cd77f8ce2cdea748032a6db00a06207717fdbd28aed2da9a7bacf07a6e4641042420f304cd531d78dbfa92ccd35c2ba66f1f66a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 14:55:21 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x260000, 0x0) [ 287.790362][T10790] Cannot find set identified by id 0 to match 14:55:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:21 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/bsg\x00', 0x0, 0x0) 14:55:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:22 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x6000, 0x0) 14:55:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x21, 0x0, &(0x7f0000001280)) 14:55:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) socket$nl_route(0x10, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xc, &(0x7f00000002c0)={0x23, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r0, 0x0, 0xffff) 14:55:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x35, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 14:55:22 executing program 0: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x69d7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfcfdffff, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f602020314af000314006c0000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 14:55:22 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x402, 0x0) 14:55:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000047c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 14:55:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') 14:55:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8920, &(0x7f00000004c0)={'bond_slave_1\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 14:55:22 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x24000, 0x0) 14:55:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r0, 0x3) 14:55:22 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 14:55:22 executing program 5: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x48, 0xfffffffffffffff8) 14:55:22 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000080)) [ 288.511480][T10836] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 14:55:22 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f00000004c0)) [ 288.580222][T10836] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 14:55:22 executing program 1: r0 = io_uring_setup(0x79fb, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) [ 288.685937][T10836] loop0: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 288.706506][T10836] loop0: p1 start 335741103 is beyond EOD, truncated [ 288.884518][T10836] loop0: p4 size 2097152 extends beyond EOD, truncated [ 288.896687][T10836] loop0: p5 start 335741103 is beyond EOD, truncated [ 288.904563][T10836] loop0: p6 start 335741103 is beyond EOD, truncated [ 288.913694][T10836] loop0: p7 start 335741103 is beyond EOD, truncated [ 288.924083][T10836] loop0: p8 start 335741103 is beyond EOD, truncated [ 288.932029][T10836] loop0: p9 start 335741103 is beyond EOD, truncated [ 288.939867][T10836] loop0: p10 start 335741103 is beyond EOD, truncated [ 288.946900][T10836] loop0: p11 start 335741103 is beyond EOD, truncated [ 288.953877][T10836] loop0: p12 start 335741103 is beyond EOD, truncated [ 288.961229][T10836] loop0: p13 start 335741103 is beyond EOD, truncated [ 288.970009][T10836] loop0: p14 start 335741103 is beyond EOD, truncated [ 288.977209][T10836] loop0: p15 start 335741103 is beyond EOD, truncated [ 288.984338][T10836] loop0: p16 start 335741103 is beyond EOD, truncated [ 288.991732][T10836] loop0: p17 start 335741103 is beyond EOD, truncated [ 288.999133][T10836] loop0: p18 start 335741103 is beyond EOD, truncated [ 289.006032][T10836] loop0: p19 start 335741103 is beyond EOD, truncated [ 289.013624][T10836] loop0: p20 start 335741103 is beyond EOD, truncated [ 289.022207][T10836] loop0: p21 start 335741103 is beyond EOD, truncated [ 289.032046][T10836] loop0: p22 start 335741103 is beyond EOD, truncated [ 289.039089][T10836] loop0: p23 start 335741103 is beyond EOD, truncated [ 289.046025][T10836] loop0: p24 start 335741103 is beyond EOD, truncated [ 289.053227][T10836] loop0: p25 start 335741103 is beyond EOD, truncated [ 289.060593][T10836] loop0: p26 start 335741103 is beyond EOD, truncated [ 289.067733][T10836] loop0: p27 start 335741103 is beyond EOD, truncated [ 289.074750][T10836] loop0: p28 start 335741103 is beyond EOD, truncated [ 289.081870][T10836] loop0: p29 start 335741103 is beyond EOD, truncated [ 289.088935][T10836] loop0: p30 start 335741103 is beyond EOD, truncated [ 289.095784][T10836] loop0: p31 start 335741103 is beyond EOD, truncated [ 289.102820][T10836] loop0: p32 start 335741103 is beyond EOD, truncated [ 289.109819][T10836] loop0: p33 start 335741103 is beyond EOD, truncated [ 289.116697][T10836] loop0: p34 start 335741103 is beyond EOD, truncated [ 289.124221][T10836] loop0: p35 start 335741103 is beyond EOD, truncated [ 289.131095][T10836] loop0: p36 start 335741103 is beyond EOD, truncated [ 289.140081][T10836] loop0: p37 start 335741103 is beyond EOD, truncated [ 289.146866][T10836] loop0: p38 start 335741103 is beyond EOD, truncated [ 289.153715][T10836] loop0: p39 start 335741103 is beyond EOD, truncated [ 289.160574][T10836] loop0: p40 start 335741103 is beyond EOD, truncated [ 289.167419][T10836] loop0: p41 start 335741103 is beyond EOD, truncated [ 289.174175][T10836] loop0: p42 start 335741103 is beyond EOD, truncated [ 289.180985][T10836] loop0: p43 start 335741103 is beyond EOD, truncated [ 289.187816][T10836] loop0: p44 start 335741103 is beyond EOD, truncated [ 289.194566][T10836] loop0: p45 start 335741103 is beyond EOD, truncated [ 289.201421][T10836] loop0: p46 start 335741103 is beyond EOD, truncated [ 289.208470][T10836] loop0: p47 start 335741103 is beyond EOD, truncated [ 289.215692][T10836] loop0: p48 start 335741103 is beyond EOD, truncated [ 289.223351][T10836] loop0: p49 start 335741103 is beyond EOD, truncated [ 289.230437][T10836] loop0: p50 start 335741103 is beyond EOD, truncated [ 289.237268][T10836] loop0: p51 start 335741103 is beyond EOD, truncated [ 289.244026][T10836] loop0: p52 start 335741103 is beyond EOD, truncated [ 289.251397][T10836] loop0: p53 start 335741103 is beyond EOD, truncated [ 289.258907][T10836] loop0: p54 start 335741103 is beyond EOD, truncated [ 289.265736][T10836] loop0: p55 start 335741103 is beyond EOD, truncated [ 289.273189][T10836] loop0: p56 start 335741103 is beyond EOD, truncated [ 289.280420][T10836] loop0: p57 start 335741103 is beyond EOD, truncated [ 289.287526][T10836] loop0: p58 start 335741103 is beyond EOD, truncated [ 289.294320][T10836] loop0: p59 start 335741103 is beyond EOD, truncated [ 289.301642][T10836] loop0: p60 start 335741103 is beyond EOD, truncated [ 289.308899][T10836] loop0: p61 start 335741103 is beyond EOD, truncated [ 289.315694][T10836] loop0: p62 start 335741103 is beyond EOD, truncated [ 289.323731][T10836] loop0: p63 start 335741103 is beyond EOD, truncated [ 289.330607][T10836] loop0: p64 start 335741103 is beyond EOD, truncated [ 289.337660][T10836] loop0: p65 start 335741103 is beyond EOD, truncated [ 289.344521][T10836] loop0: p66 start 335741103 is beyond EOD, truncated [ 289.351385][T10836] loop0: p67 start 335741103 is beyond EOD, truncated [ 289.358402][T10836] loop0: p68 start 335741103 is beyond EOD, truncated [ 289.365298][T10836] loop0: p69 start 335741103 is beyond EOD, truncated [ 289.373190][T10836] loop0: p70 start 335741103 is beyond EOD, truncated [ 289.380536][T10836] loop0: p71 start 335741103 is beyond EOD, truncated [ 289.387488][T10836] loop0: p72 start 335741103 is beyond EOD, truncated [ 289.394290][T10836] loop0: p73 start 335741103 is beyond EOD, truncated [ 289.401820][T10836] loop0: p74 start 335741103 is beyond EOD, truncated [ 289.408785][T10836] loop0: p75 start 335741103 is beyond EOD, truncated [ 289.415594][T10836] loop0: p76 start 335741103 is beyond EOD, truncated [ 289.422494][T10836] loop0: p77 start 335741103 is beyond EOD, truncated [ 289.429633][T10836] loop0: p78 start 335741103 is beyond EOD, truncated [ 289.436516][T10836] loop0: p79 start 335741103 is beyond EOD, truncated [ 289.443795][T10836] loop0: p80 start 335741103 is beyond EOD, truncated [ 289.450762][T10836] loop0: p81 start 335741103 is beyond EOD, truncated [ 289.457758][T10836] loop0: p82 start 335741103 is beyond EOD, truncated [ 289.464979][T10836] loop0: p83 start 335741103 is beyond EOD, truncated [ 289.472013][T10836] loop0: p84 start 335741103 is beyond EOD, truncated [ 289.480749][T10836] loop0: p85 start 335741103 is beyond EOD, truncated [ 289.488695][T10836] loop0: p86 start 335741103 is beyond EOD, truncated [ 289.495912][T10836] loop0: p87 start 335741103 is beyond EOD, truncated [ 289.503673][T10836] loop0: p88 start 335741103 is beyond EOD, truncated [ 289.512305][T10836] loop0: p89 start 335741103 is beyond EOD, truncated [ 289.524004][T10836] loop0: p90 start 335741103 is beyond EOD, truncated [ 289.533975][T10836] loop0: p91 start 335741103 is beyond EOD, truncated [ 289.545183][T10836] loop0: p92 start 335741103 is beyond EOD, truncated [ 289.553906][T10836] loop0: p93 start 335741103 is beyond EOD, truncated [ 289.561159][T10836] loop0: p94 start 335741103 is beyond EOD, truncated [ 289.568444][T10836] loop0: p95 start 335741103 is beyond EOD, truncated [ 289.575499][T10836] loop0: p96 start 335741103 is beyond EOD, truncated [ 289.582711][T10836] loop0: p97 start 335741103 is beyond EOD, truncated [ 289.590089][T10836] loop0: p98 start 335741103 is beyond EOD, truncated [ 289.597026][T10836] loop0: p99 start 335741103 is beyond EOD, truncated [ 289.604051][T10836] loop0: p100 start 335741103 is beyond EOD, truncated [ 289.611381][T10836] loop0: p101 start 335741103 is beyond EOD, truncated [ 289.618559][T10836] loop0: p102 start 335741103 is beyond EOD, truncated [ 289.625652][T10836] loop0: p103 start 335741103 is beyond EOD, truncated [ 289.633071][T10836] loop0: p104 start 335741103 is beyond EOD, truncated [ 289.640348][T10836] loop0: p105 start 335741103 is beyond EOD, truncated [ 289.648513][T10836] loop0: p106 start 335741103 is beyond EOD, truncated [ 289.655384][T10836] loop0: p107 start 335741103 is beyond EOD, truncated [ 289.663488][T10836] loop0: p108 start 335741103 is beyond EOD, truncated [ 289.670601][T10836] loop0: p109 start 335741103 is beyond EOD, truncated [ 289.678198][T10836] loop0: p110 start 335741103 is beyond EOD, truncated [ 289.685201][T10836] loop0: p111 start 335741103 is beyond EOD, truncated [ 289.692490][T10836] loop0: p112 start 335741103 is beyond EOD, truncated [ 289.699813][T10836] loop0: p113 start 335741103 is beyond EOD, truncated [ 289.706742][T10836] loop0: p114 start 335741103 is beyond EOD, truncated [ 289.714081][T10836] loop0: p115 start 335741103 is beyond EOD, truncated [ 289.721404][T10836] loop0: p116 start 335741103 is beyond EOD, truncated [ 289.728564][T10836] loop0: p117 start 335741103 is beyond EOD, truncated [ 289.735947][T10836] loop0: p118 start 335741103 is beyond EOD, truncated [ 289.743132][T10836] loop0: p119 start 335741103 is beyond EOD, truncated [ 289.750082][T10836] loop0: p120 start 335741103 is beyond EOD, truncated [ 289.757024][T10836] loop0: p121 start 335741103 is beyond EOD, truncated [ 289.764000][T10836] loop0: p122 start 335741103 is beyond EOD, truncated [ 289.771625][T10836] loop0: p123 start 335741103 is beyond EOD, truncated [ 289.778592][T10836] loop0: p124 start 335741103 is beyond EOD, truncated [ 289.785460][T10836] loop0: p125 start 335741103 is beyond EOD, truncated [ 289.792386][T10836] loop0: p126 start 335741103 is beyond EOD, truncated [ 289.799463][T10836] loop0: p127 start 335741103 is beyond EOD, truncated [ 289.806555][T10836] loop0: p128 start 335741103 is beyond EOD, truncated [ 289.814732][T10836] loop0: p129 start 335741103 is beyond EOD, truncated [ 289.821810][T10836] loop0: p130 start 335741103 is beyond EOD, truncated [ 289.829619][T10836] loop0: p131 start 335741103 is beyond EOD, truncated [ 289.836909][T10836] loop0: p132 start 335741103 is beyond EOD, truncated [ 289.845061][T10836] loop0: p133 start 335741103 is beyond EOD, truncated [ 289.852591][T10836] loop0: p134 start 335741103 is beyond EOD, truncated [ 289.859812][T10836] loop0: p135 start 335741103 is beyond EOD, truncated [ 289.866876][T10836] loop0: p136 start 335741103 is beyond EOD, truncated [ 289.874535][T10836] loop0: p137 start 335741103 is beyond EOD, truncated [ 289.881762][T10836] loop0: p138 start 335741103 is beyond EOD, truncated [ 289.888902][T10836] loop0: p139 start 335741103 is beyond EOD, truncated [ 289.896080][T10836] loop0: p140 start 335741103 is beyond EOD, truncated [ 289.903522][T10836] loop0: p141 start 335741103 is beyond EOD, truncated [ 289.910757][T10836] loop0: p142 start 335741103 is beyond EOD, truncated [ 289.917977][T10836] loop0: p143 start 335741103 is beyond EOD, truncated [ 289.925008][T10836] loop0: p144 start 335741103 is beyond EOD, truncated [ 289.934877][T10836] loop0: p145 start 335741103 is beyond EOD, truncated [ 289.943119][T10836] loop0: p146 start 335741103 is beyond EOD, truncated [ 289.950710][T10836] loop0: p147 start 335741103 is beyond EOD, truncated [ 289.958253][T10836] loop0: p148 start 335741103 is beyond EOD, truncated [ 289.965147][T10836] loop0: p149 start 335741103 is beyond EOD, truncated [ 289.972371][T10836] loop0: p150 start 335741103 is beyond EOD, truncated [ 289.980012][T10836] loop0: p151 start 335741103 is beyond EOD, truncated [ 289.986936][T10836] loop0: p152 start 335741103 is beyond EOD, truncated [ 289.994162][T10836] loop0: p153 start 335741103 is beyond EOD, truncated [ 290.001482][T10836] loop0: p154 start 335741103 is beyond EOD, truncated [ 290.008700][T10836] loop0: p155 start 335741103 is beyond EOD, truncated [ 290.016258][T10836] loop0: p156 start 335741103 is beyond EOD, truncated [ 290.023210][T10836] loop0: p157 start 335741103 is beyond EOD, truncated [ 290.030432][T10836] loop0: p158 start 335741103 is beyond EOD, truncated [ 290.041561][T10836] loop0: p159 start 335741103 is beyond EOD, truncated [ 290.049477][T10836] loop0: p160 start 335741103 is beyond EOD, truncated [ 290.056361][T10836] loop0: p161 start 335741103 is beyond EOD, truncated [ 290.063293][T10836] loop0: p162 start 335741103 is beyond EOD, truncated [ 290.070212][T10836] loop0: p163 start 335741103 is beyond EOD, truncated [ 290.077050][T10836] loop0: p164 start 335741103 is beyond EOD, truncated [ 290.083971][T10836] loop0: p165 start 335741103 is beyond EOD, truncated [ 290.090873][T10836] loop0: p166 start 335741103 is beyond EOD, truncated [ 290.097795][T10836] loop0: p167 start 335741103 is beyond EOD, truncated [ 290.104636][T10836] loop0: p168 start 335741103 is beyond EOD, truncated [ 290.111512][T10836] loop0: p169 start 335741103 is beyond EOD, truncated [ 290.118435][T10836] loop0: p170 start 335741103 is beyond EOD, truncated [ 290.125540][T10836] loop0: p171 start 335741103 is beyond EOD, truncated [ 290.132451][T10836] loop0: p172 start 335741103 is beyond EOD, truncated [ 290.139375][T10836] loop0: p173 start 335741103 is beyond EOD, truncated [ 290.146508][T10836] loop0: p174 start 335741103 is beyond EOD, truncated [ 290.154699][T10836] loop0: p175 start 335741103 is beyond EOD, truncated [ 290.161906][T10836] loop0: p176 start 335741103 is beyond EOD, truncated [ 290.170240][T10836] loop0: p177 start 335741103 is beyond EOD, truncated [ 290.178116][T10836] loop0: p178 start 335741103 is beyond EOD, truncated [ 290.185280][T10836] loop0: p179 start 335741103 is beyond EOD, truncated [ 290.193754][T10836] loop0: p180 start 335741103 is beyond EOD, truncated [ 290.200875][T10836] loop0: p181 start 335741103 is beyond EOD, truncated [ 290.208159][T10836] loop0: p182 start 335741103 is beyond EOD, truncated [ 290.215086][T10836] loop0: p183 start 335741103 is beyond EOD, truncated [ 290.222160][T10836] loop0: p184 start 335741103 is beyond EOD, truncated [ 290.229614][T10836] loop0: p185 start 335741103 is beyond EOD, truncated [ 290.236560][T10836] loop0: p186 start 335741103 is beyond EOD, truncated [ 290.244257][T10836] loop0: p187 start 335741103 is beyond EOD, truncated [ 290.251523][T10836] loop0: p188 start 335741103 is beyond EOD, truncated [ 290.259140][T10836] loop0: p189 start 335741103 is beyond EOD, truncated [ 290.266081][T10836] loop0: p190 start 335741103 is beyond EOD, truncated [ 290.274194][T10836] loop0: p191 start 335741103 is beyond EOD, truncated [ 290.281477][T10836] loop0: p192 start 335741103 is beyond EOD, truncated [ 290.289245][T10836] loop0: p193 start 335741103 is beyond EOD, truncated [ 290.296362][T10836] loop0: p194 start 335741103 is beyond EOD, truncated [ 290.303462][T10836] loop0: p195 start 335741103 is beyond EOD, truncated [ 290.310795][T10836] loop0: p196 start 335741103 is beyond EOD, truncated [ 290.318925][T10836] loop0: p197 start 335741103 is beyond EOD, truncated [ 290.325967][T10836] loop0: p198 start 335741103 is beyond EOD, truncated [ 290.333132][T10836] loop0: p199 start 335741103 is beyond EOD, truncated [ 290.340553][T10836] loop0: p200 start 335741103 is beyond EOD, truncated [ 290.349148][T10836] loop0: p201 start 335741103 is beyond EOD, truncated [ 290.356155][T10836] loop0: p202 start 335741103 is beyond EOD, truncated [ 290.363235][T10836] loop0: p203 start 335741103 is beyond EOD, truncated [ 290.370803][T10836] loop0: p204 start 335741103 is beyond EOD, truncated [ 290.378980][T10836] loop0: p205 start 335741103 is beyond EOD, truncated [ 290.385968][T10836] loop0: p206 start 335741103 is beyond EOD, truncated [ 290.394003][T10836] loop0: p207 start 335741103 is beyond EOD, truncated [ 290.402165][T10836] loop0: p208 start 335741103 is beyond EOD, truncated [ 290.409822][T10836] loop0: p209 start 335741103 is beyond EOD, truncated [ 290.416769][T10836] loop0: p210 start 335741103 is beyond EOD, truncated [ 290.423831][T10836] loop0: p211 start 335741103 is beyond EOD, truncated [ 290.431439][T10836] loop0: p212 start 335741103 is beyond EOD, truncated [ 290.439005][T10836] loop0: p213 start 335741103 is beyond EOD, truncated [ 290.445899][T10836] loop0: p214 start 335741103 is beyond EOD, truncated [ 290.453827][T10836] loop0: p215 start 335741103 is beyond EOD, truncated [ 290.462427][T10836] loop0: p216 start 335741103 is beyond EOD, truncated [ 290.469615][T10836] loop0: p217 start 335741103 is beyond EOD, truncated [ 290.476709][T10836] loop0: p218 start 335741103 is beyond EOD, truncated [ 290.484090][T10836] loop0: p219 start 335741103 is beyond EOD, truncated [ 290.491324][T10836] loop0: p220 start 335741103 is beyond EOD, truncated [ 290.498406][T10836] loop0: p221 start 335741103 is beyond EOD, truncated [ 290.505272][T10836] loop0: p222 start 335741103 is beyond EOD, truncated [ 290.512335][T10836] loop0: p223 start 335741103 is beyond EOD, truncated [ 290.519327][T10836] loop0: p224 start 335741103 is beyond EOD, truncated [ 290.526300][T10836] loop0: p225 start 335741103 is beyond EOD, truncated [ 290.533249][T10836] loop0: p226 start 335741103 is beyond EOD, truncated [ 290.540379][T10836] loop0: p227 start 335741103 is beyond EOD, truncated [ 290.547320][T10836] loop0: p228 start 335741103 is beyond EOD, truncated [ 290.554624][T10836] loop0: p229 start 335741103 is beyond EOD, truncated [ 290.561882][T10836] loop0: p230 start 335741103 is beyond EOD, truncated [ 290.570491][T10836] loop0: p231 start 335741103 is beyond EOD, truncated [ 290.577495][T10836] loop0: p232 start 335741103 is beyond EOD, truncated [ 290.584450][T10836] loop0: p233 start 335741103 is beyond EOD, truncated [ 290.591417][T10836] loop0: p234 start 335741103 is beyond EOD, truncated [ 290.599274][T10836] loop0: p235 start 335741103 is beyond EOD, truncated [ 290.606177][T10836] loop0: p236 start 335741103 is beyond EOD, truncated [ 290.613123][T10836] loop0: p237 start 335741103 is beyond EOD, truncated [ 290.620095][T10836] loop0: p238 start 335741103 is beyond EOD, truncated [ 290.626958][T10836] loop0: p239 start 335741103 is beyond EOD, truncated [ 290.633916][T10836] loop0: p240 start 335741103 is beyond EOD, truncated [ 290.640912][T10836] loop0: p241 start 335741103 is beyond EOD, truncated [ 290.648185][T10836] loop0: p242 start 335741103 is beyond EOD, truncated 14:55:24 executing program 0: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x69d7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfcfdffff, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f602020314af000314006c0000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 14:55:24 executing program 5: io_uring_setup(0x3d93, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x1, 0x3aa}) 14:55:24 executing program 4: syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000180)={0x0, 0x0, 0xb, 0x0}) 14:55:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x83, 0x0, &(0x7f0000000280)) 14:55:24 executing program 2: clone3(&(0x7f0000000180)={0x10040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x40, 0x3}]}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40f40, 0x0) r4 = gettid() r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='bcache_btree_insert_key\x00', r1}, 0x10) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r5, 0x3) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x28201, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r6, 0x0) pidfd_open(r4, 0x0) r7 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x7, 0x2, 0x6, 0x7}, {0x0, 0xa7, 0x1f, 0x7}, {0x8738, 0x4, 0x4, 0x3ff}, {0x4, 0x81, 0xf4}, {0x8, 0x3f, 0x0, 0x962}, {0x1, 0x7f, 0x1, 0x4}]}) pidfd_getfd(r7, r2, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000300)) 14:55:24 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev, @dev, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "9e004b9bd165ae0f"}}}}, 0x0) [ 290.656075][T10836] loop0: p243 start 335741103 is beyond EOD, truncated [ 290.663308][T10836] loop0: p244 start 335741103 is beyond EOD, truncated [ 290.670855][T10836] loop0: p245 start 335741103 is beyond EOD, truncated [ 290.677801][T10836] loop0: p246 start 335741103 is beyond EOD, truncated [ 290.684650][T10836] loop0: p247 start 335741103 is beyond EOD, truncated [ 290.691731][T10836] loop0: p248 start 335741103 is beyond EOD, truncated [ 290.698648][T10836] loop0: p249 start 335741103 is beyond EOD, truncated 14:55:24 executing program 1: openat$zero(0xffffffffffffff9c, 0x0, 0x404000, 0x0) [ 290.705492][T10836] loop0: p250 start 335741103 is beyond EOD, truncated [ 290.713299][T10836] loop0: p251 start 335741103 is beyond EOD, truncated [ 290.720371][T10836] loop0: p252 start 335741103 is beyond EOD, truncated [ 290.730259][T10836] loop0: p253 start 335741103 is beyond EOD, truncated [ 290.737351][T10836] loop0: p254 start 335741103 is beyond EOD, truncated [ 290.744203][T10836] loop0: p255 start 335741103 is beyond EOD, truncated 14:55:24 executing program 3: select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 14:55:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x64, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 14:55:25 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x105200, 0x0) [ 290.896967][ T35] audit: type=1326 audit(1607525724.887:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10885 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460f5a code=0x0 14:55:25 executing program 1: io_uring_setup(0x6095, &(0x7f0000000100)={0x0, 0x1000000, 0x8}) 14:55:25 executing program 1: userfaultfd(0x93029cd12d2bcddf) [ 291.060356][T10896] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 291.088238][T10896] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 291.152876][T10896] loop0: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 291.157287][T10896] loop0: p1 start 335741103 is beyond EOD, truncated [ 291.289151][T10896] loop0: p4 size 2097152 extends beyond EOD, truncated [ 291.303043][T10896] loop0: p5 start 335741103 is beyond EOD, truncated [ 291.311366][T10896] loop0: p6 start 335741103 is beyond EOD, truncated [ 291.319694][T10896] loop0: p7 start 335741103 is beyond EOD, truncated [ 291.326600][T10896] loop0: p8 start 335741103 is beyond EOD, truncated [ 291.334441][T10896] loop0: p9 start 335741103 is beyond EOD, truncated [ 291.337436][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 291.345319][T10896] loop0: p10 start 335741103 is beyond EOD, truncated [ 291.356178][T10896] loop0: p11 start 335741103 is beyond EOD, truncated [ 291.365287][T10896] loop0: p12 start 335741103 is beyond EOD, truncated [ 291.383599][T10896] loop0: p13 start 335741103 is beyond EOD, truncated [ 291.391603][T10896] loop0: p14 start 335741103 is beyond EOD, truncated [ 291.405302][T10896] loop0: p15 start 335741103 is beyond EOD, truncated [ 291.413309][T10896] loop0: p16 start 335741103 is beyond EOD, truncated [ 291.427099][T10896] loop0: p17 start 335741103 is beyond EOD, truncated [ 291.434908][T10896] loop0: p18 start 335741103 is beyond EOD, truncated [ 291.454626][T10896] loop0: p19 start 335741103 is beyond EOD, truncated [ 291.462913][T10896] loop0: p20 start 335741103 is beyond EOD, truncated [ 291.473387][T10896] loop0: p21 start 335741103 is beyond EOD, truncated [ 291.481145][T10896] loop0: p22 start 335741103 is beyond EOD, truncated [ 291.488739][T10896] loop0: p23 start 335741103 is beyond EOD, truncated [ 291.495718][T10896] loop0: p24 start 335741103 is beyond EOD, truncated [ 291.503865][T10896] loop0: p25 start 335741103 is beyond EOD, truncated [ 291.511509][T10896] loop0: p26 start 335741103 is beyond EOD, truncated [ 291.520174][T10896] loop0: p27 start 335741103 is beyond EOD, truncated [ 291.527951][T10896] loop0: p28 start 335741103 is beyond EOD, truncated [ 291.534886][T10896] loop0: p29 start 335741103 is beyond EOD, truncated [ 291.543948][T10896] loop0: p30 start 335741103 is beyond EOD, truncated [ 291.551502][T10896] loop0: p31 start 335741103 is beyond EOD, truncated [ 291.561042][T10896] loop0: p32 start 335741103 is beyond EOD, truncated [ 291.569106][T10896] loop0: p33 start 335741103 is beyond EOD, truncated [ 291.580342][T10896] loop0: p34 start 335741103 is beyond EOD, truncated [ 291.588162][T10896] loop0: p35 start 335741103 is beyond EOD, truncated [ 291.595149][T10896] loop0: p36 start 335741103 is beyond EOD, truncated [ 291.603178][T10896] loop0: p37 start 335741103 is beyond EOD, truncated [ 291.611707][T10896] loop0: p38 start 335741103 is beyond EOD, truncated [ 291.619316][T10896] loop0: p39 start 335741103 is beyond EOD, truncated [ 291.626308][T10896] loop0: p40 start 335741103 is beyond EOD, truncated [ 291.634991][T10896] loop0: p41 start 335741103 is beyond EOD, truncated [ 291.642640][T10896] loop0: p42 start 335741103 is beyond EOD, truncated [ 291.650729][T10896] loop0: p43 start 335741103 is beyond EOD, truncated [ 291.661292][T10896] loop0: p44 start 335741103 is beyond EOD, truncated [ 291.673083][ T35] audit: type=1326 audit(1607525725.677:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10885 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460f5a code=0x0 [ 291.674561][T10896] loop0: p45 start 335741103 is beyond EOD, truncated [ 291.713186][T10896] loop0: p46 start 335741103 is beyond EOD, truncated [ 291.725871][T10896] loop0: p47 start 335741103 is beyond EOD, truncated [ 291.736867][T10896] loop0: p48 start 335741103 is beyond EOD, truncated [ 291.770709][T10896] loop0: p49 start 335741103 is beyond EOD, truncated [ 291.788486][T10896] loop0: p50 start 335741103 is beyond EOD, truncated [ 291.802208][T10896] loop0: p51 start 335741103 is beyond EOD, truncated [ 291.809720][T10896] loop0: p52 start 335741103 is beyond EOD, truncated [ 291.816543][T10896] loop0: p53 start 335741103 is beyond EOD, truncated [ 291.824786][T10896] loop0: p54 start 335741103 is beyond EOD, truncated [ 291.832568][T10896] loop0: p55 start 335741103 is beyond EOD, truncated [ 291.841530][T10896] loop0: p56 start 335741103 is beyond EOD, truncated [ 291.849389][T10896] loop0: p57 start 335741103 is beyond EOD, truncated [ 291.856316][T10896] loop0: p58 start 335741103 is beyond EOD, truncated [ 291.871189][T10896] loop0: p59 start 335741103 is beyond EOD, truncated [ 291.884097][T10896] loop0: p60 start 335741103 is beyond EOD, truncated [ 291.891556][T10896] loop0: p61 start 335741103 is beyond EOD, truncated [ 291.899020][T10896] loop0: p62 start 335741103 is beyond EOD, truncated [ 291.905882][T10896] loop0: p63 start 335741103 is beyond EOD, truncated [ 291.914271][T10896] loop0: p64 start 335741103 is beyond EOD, truncated [ 291.921769][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.931014][T10896] loop0: p65 start 335741103 is beyond EOD, truncated [ 291.938718][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.946907][T10896] loop0: p66 start 335741103 is beyond EOD, truncated [ 291.959125][ T7] usb 6-1: Product: syz [ 291.964880][T10896] loop0: p67 start 335741103 is beyond EOD, truncated [ 291.972613][ T7] usb 6-1: Manufacturer: syz [ 291.977522][ T7] usb 6-1: SerialNumber: syz [ 291.982887][T10896] loop0: p68 start 335741103 is beyond EOD, truncated [ 292.017717][T10896] loop0: p69 start 335741103 is beyond EOD, truncated [ 292.024590][T10896] loop0: p70 start 335741103 is beyond EOD, truncated [ 292.038096][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 292.042939][T10896] loop0: p71 start 335741103 is beyond EOD, truncated [ 292.113451][T10896] loop0: p72 start 335741103 is beyond EOD, truncated [ 292.139315][T10896] loop0: p73 start 335741103 is beyond EOD, truncated [ 292.149299][T10896] loop0: p74 start 335741103 is beyond EOD, truncated [ 292.156289][T10896] loop0: p75 start 335741103 is beyond EOD, truncated [ 292.164527][T10896] loop0: p76 start 335741103 is beyond EOD, truncated [ 292.171849][T10896] loop0: p77 start 335741103 is beyond EOD, truncated [ 292.179614][T10896] loop0: p78 start 335741103 is beyond EOD, truncated [ 292.186460][T10896] loop0: p79 start 335741103 is beyond EOD, truncated [ 292.193709][T10896] loop0: p80 start 335741103 is beyond EOD, truncated [ 292.200704][T10896] loop0: p81 start 335741103 is beyond EOD, truncated [ 292.207661][T10896] loop0: p82 start 335741103 is beyond EOD, truncated [ 292.214688][T10896] loop0: p83 start 335741103 is beyond EOD, truncated [ 292.224322][T10896] loop0: p84 start 335741103 is beyond EOD, truncated [ 292.231387][T10896] loop0: p85 start 335741103 is beyond EOD, truncated [ 292.238696][T10896] loop0: p86 start 335741103 is beyond EOD, truncated [ 292.245567][T10896] loop0: p87 start 335741103 is beyond EOD, truncated [ 292.252407][T10896] loop0: p88 start 335741103 is beyond EOD, truncated [ 292.259457][T10896] loop0: p89 start 335741103 is beyond EOD, truncated [ 292.266814][T10896] loop0: p90 start 335741103 is beyond EOD, truncated [ 292.274683][T10896] loop0: p91 start 335741103 is beyond EOD, truncated [ 292.281818][T10896] loop0: p92 start 335741103 is beyond EOD, truncated [ 292.289129][T10896] loop0: p93 start 335741103 is beyond EOD, truncated [ 292.296224][T10896] loop0: p94 start 335741103 is beyond EOD, truncated [ 292.303561][T10896] loop0: p95 start 335741103 is beyond EOD, truncated [ 292.310883][T10896] loop0: p96 start 335741103 is beyond EOD, truncated [ 292.318489][T10896] loop0: p97 start 335741103 is beyond EOD, truncated [ 292.325375][T10896] loop0: p98 start 335741103 is beyond EOD, truncated [ 292.332385][T10896] loop0: p99 start 335741103 is beyond EOD, truncated [ 292.339749][T10896] loop0: p100 start 335741103 is beyond EOD, truncated [ 292.346722][T10896] loop0: p101 start 335741103 is beyond EOD, truncated [ 292.354041][T10896] loop0: p102 start 335741103 is beyond EOD, truncated [ 292.361414][T10896] loop0: p103 start 335741103 is beyond EOD, truncated [ 292.369099][T10896] loop0: p104 start 335741103 is beyond EOD, truncated [ 292.376218][T10896] loop0: p105 start 335741103 is beyond EOD, truncated [ 292.383261][T10896] loop0: p106 start 335741103 is beyond EOD, truncated [ 292.390492][T10896] loop0: p107 start 335741103 is beyond EOD, truncated [ 292.399734][T10896] loop0: p108 start 335741103 is beyond EOD, truncated [ 292.406620][T10896] loop0: p109 start 335741103 is beyond EOD, truncated [ 292.414679][T10896] loop0: p110 start 335741103 is beyond EOD, truncated [ 292.422092][T10896] loop0: p111 start 335741103 is beyond EOD, truncated [ 292.429398][T10896] loop0: p112 start 335741103 is beyond EOD, truncated [ 292.436635][T10896] loop0: p113 start 335741103 is beyond EOD, truncated [ 292.443874][T10896] loop0: p114 start 335741103 is beyond EOD, truncated [ 292.451753][T10896] loop0: p115 start 335741103 is beyond EOD, truncated [ 292.459111][T10896] loop0: p116 start 335741103 is beyond EOD, truncated [ 292.465995][T10896] loop0: p117 start 335741103 is beyond EOD, truncated [ 292.473723][T10896] loop0: p118 start 335741103 is beyond EOD, truncated [ 292.481051][T10896] loop0: p119 start 335741103 is beyond EOD, truncated [ 292.488231][T10896] loop0: p120 start 335741103 is beyond EOD, truncated [ 292.495186][T10896] loop0: p121 start 335741103 is beyond EOD, truncated [ 292.502647][T10896] loop0: p122 start 335741103 is beyond EOD, truncated [ 292.509605][T10896] loop0: p123 start 335741103 is beyond EOD, truncated [ 292.516490][T10896] loop0: p124 start 335741103 is beyond EOD, truncated [ 292.523491][T10896] loop0: p125 start 335741103 is beyond EOD, truncated [ 292.530445][T10896] loop0: p126 start 335741103 is beyond EOD, truncated [ 292.537410][T10896] loop0: p127 start 335741103 is beyond EOD, truncated [ 292.544275][T10896] loop0: p128 start 335741103 is beyond EOD, truncated [ 292.551323][T10896] loop0: p129 start 335741103 is beyond EOD, truncated [ 292.560415][T10896] loop0: p130 start 335741103 is beyond EOD, truncated [ 292.567877][T10896] loop0: p131 start 335741103 is beyond EOD, truncated [ 292.574925][T10896] loop0: p132 start 335741103 is beyond EOD, truncated [ 292.581866][T10896] loop0: p133 start 335741103 is beyond EOD, truncated [ 292.589445][T10896] loop0: p134 start 335741103 is beyond EOD, truncated [ 292.596516][T10896] loop0: p135 start 335741103 is beyond EOD, truncated [ 292.604011][T10896] loop0: p136 start 335741103 is beyond EOD, truncated [ 292.611083][T10896] loop0: p137 start 335741103 is beyond EOD, truncated [ 292.618028][T10896] loop0: p138 start 335741103 is beyond EOD, truncated [ 292.624874][T10896] loop0: p139 start 335741103 is beyond EOD, truncated [ 292.631773][T10896] loop0: p140 start 335741103 is beyond EOD, truncated [ 292.638786][T10896] loop0: p141 start 335741103 is beyond EOD, truncated [ 292.645616][T10896] loop0: p142 start 335741103 is beyond EOD, truncated [ 292.652510][T10896] loop0: p143 start 335741103 is beyond EOD, truncated [ 292.659517][T10896] loop0: p144 start 335741103 is beyond EOD, truncated [ 292.666349][T10896] loop0: p145 start 335741103 is beyond EOD, truncated [ 292.674133][T10896] loop0: p146 start 335741103 is beyond EOD, truncated [ 292.681644][T10896] loop0: p147 start 335741103 is beyond EOD, truncated [ 292.689324][T10896] loop0: p148 start 335741103 is beyond EOD, truncated [ 292.696167][T10896] loop0: p149 start 335741103 is beyond EOD, truncated [ 292.703866][T10896] loop0: p150 start 335741103 is beyond EOD, truncated [ 292.711424][T10896] loop0: p151 start 335741103 is beyond EOD, truncated [ 292.720052][T10896] loop0: p152 start 335741103 is beyond EOD, truncated [ 292.726953][T10896] loop0: p153 start 335741103 is beyond EOD, truncated [ 292.733928][T10896] loop0: p154 start 335741103 is beyond EOD, truncated [ 292.740949][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.740955][T10896] loop0: p155 start 335741103 is beyond EOD, truncated [ 292.756936][T10896] loop0: p156 start 335741103 is beyond EOD, truncated [ 292.764203][T10896] loop0: p157 start 335741103 is beyond EOD, truncated [ 292.771169][T10896] loop0: p158 start 335741103 is beyond EOD, truncated [ 292.779866][T10896] loop0: p159 start 335741103 is beyond EOD, truncated [ 292.786704][T10896] loop0: p160 start 335741103 is beyond EOD, truncated [ 292.793788][T10896] loop0: p161 start 335741103 is beyond EOD, truncated [ 292.801087][T10896] loop0: p162 start 335741103 is beyond EOD, truncated [ 292.808718][T10896] loop0: p163 start 335741103 is beyond EOD, truncated [ 292.815572][T10896] loop0: p164 start 335741103 is beyond EOD, truncated [ 292.822493][T10896] loop0: p165 start 335741103 is beyond EOD, truncated [ 292.829420][T10896] loop0: p166 start 335741103 is beyond EOD, truncated [ 292.836273][T10896] loop0: p167 start 335741103 is beyond EOD, truncated [ 292.843188][T10896] loop0: p168 start 335741103 is beyond EOD, truncated [ 292.850122][T10896] loop0: p169 start 335741103 is beyond EOD, truncated [ 292.856953][T10896] loop0: p170 start 335741103 is beyond EOD, truncated [ 292.863841][T10896] loop0: p171 start 335741103 is beyond EOD, truncated [ 292.870775][T10896] loop0: p172 start 335741103 is beyond EOD, truncated [ 292.877737][T10896] loop0: p173 start 335741103 is beyond EOD, truncated [ 292.884579][T10896] loop0: p174 start 335741103 is beyond EOD, truncated [ 292.892195][T10896] loop0: p175 start 335741103 is beyond EOD, truncated [ 292.899773][T10896] loop0: p176 start 335741103 is beyond EOD, truncated [ 292.908033][T10896] loop0: p177 start 335741103 is beyond EOD, truncated [ 292.914964][T10896] loop0: p178 start 335741103 is beyond EOD, truncated [ 292.922203][T10896] loop0: p179 start 335741103 is beyond EOD, truncated [ 292.929433][T10896] loop0: p180 start 335741103 is beyond EOD, truncated [ 292.936282][T10896] loop0: p181 start 335741103 is beyond EOD, truncated [ 292.944140][T10896] loop0: p182 start 335741103 is beyond EOD, truncated [ 292.951397][T10896] loop0: p183 start 335741103 is beyond EOD, truncated [ 292.958706][T10896] loop0: p184 start 335741103 is beyond EOD, truncated [ 292.965547][T10896] loop0: p185 start 335741103 is beyond EOD, truncated [ 292.972551][T10896] loop0: p186 start 335741103 is beyond EOD, truncated [ 292.979776][T10896] loop0: p187 start 335741103 is beyond EOD, truncated [ 292.986625][T10896] loop0: p188 start 335741103 is beyond EOD, truncated [ 292.993515][T10896] loop0: p189 start 335741103 is beyond EOD, truncated [ 293.000664][T10896] loop0: p190 start 335741103 is beyond EOD, truncated [ 293.011048][T10896] loop0: p191 start 335741103 is beyond EOD, truncated [ 293.018033][T10896] loop0: p192 start 335741103 is beyond EOD, truncated [ 293.025049][T10896] loop0: p193 start 335741103 is beyond EOD, truncated [ 293.031948][T10896] loop0: p194 start 335741103 is beyond EOD, truncated [ 293.038920][T10896] loop0: p195 start 335741103 is beyond EOD, truncated [ 293.045767][T10896] loop0: p196 start 335741103 is beyond EOD, truncated [ 293.052671][T10896] loop0: p197 start 335741103 is beyond EOD, truncated [ 293.059646][T10896] loop0: p198 start 335741103 is beyond EOD, truncated [ 293.066480][T10896] loop0: p199 start 335741103 is beyond EOD, truncated [ 293.074117][T10896] loop0: p200 start 335741103 is beyond EOD, truncated [ 293.081122][T10896] loop0: p201 start 335741103 is beyond EOD, truncated [ 293.088052][T10896] loop0: p202 start 335741103 is beyond EOD, truncated [ 293.094897][T10896] loop0: p203 start 335741103 is beyond EOD, truncated [ 293.101837][T10896] loop0: p204 start 335741103 is beyond EOD, truncated [ 293.108734][T10896] loop0: p205 start 335741103 is beyond EOD, truncated [ 293.115914][T10896] loop0: p206 start 335741103 is beyond EOD, truncated [ 293.125213][T10896] loop0: p207 start 335741103 is beyond EOD, truncated [ 293.132827][T10896] loop0: p208 start 335741103 is beyond EOD, truncated [ 293.140056][T10896] loop0: p209 start 335741103 is beyond EOD, truncated [ 293.146919][T10896] loop0: p210 start 335741103 is beyond EOD, truncated [ 293.154902][ T3199] usb 6-1: USB disconnect, device number 4 [ 293.164174][T10896] loop0: p211 start 335741103 is beyond EOD, truncated [ 293.173023][T10896] loop0: p212 start 335741103 is beyond EOD, truncated [ 293.180003][T10896] loop0: p213 start 335741103 is beyond EOD, truncated [ 293.186845][T10896] loop0: p214 start 335741103 is beyond EOD, truncated [ 293.193752][T10896] loop0: p215 start 335741103 is beyond EOD, truncated [ 293.201003][T10896] loop0: p216 start 335741103 is beyond EOD, truncated [ 293.209133][T10896] loop0: p217 start 335741103 is beyond EOD, truncated [ 293.216297][T10896] loop0: p218 start 335741103 is beyond EOD, truncated [ 293.223568][T10896] loop0: p219 start 335741103 is beyond EOD, truncated [ 293.231876][T10896] loop0: p220 start 335741103 is beyond EOD, truncated [ 293.239421][T10896] loop0: p221 start 335741103 is beyond EOD, truncated [ 293.246352][T10896] loop0: p222 start 335741103 is beyond EOD, truncated [ 293.253324][T10896] loop0: p223 start 335741103 is beyond EOD, truncated [ 293.260292][T10896] loop0: p224 start 335741103 is beyond EOD, truncated [ 293.267414][T10896] loop0: p225 start 335741103 is beyond EOD, truncated [ 293.274564][T10896] loop0: p226 start 335741103 is beyond EOD, truncated [ 293.281955][T10896] loop0: p227 start 335741103 is beyond EOD, truncated [ 293.288903][T10896] loop0: p228 start 335741103 is beyond EOD, truncated [ 293.295760][T10896] loop0: p229 start 335741103 is beyond EOD, truncated [ 293.302994][T10896] loop0: p230 start 335741103 is beyond EOD, truncated [ 293.309959][T10896] loop0: p231 start 335741103 is beyond EOD, truncated [ 293.317162][T10896] loop0: p232 start 335741103 is beyond EOD, truncated [ 293.324092][T10896] loop0: p233 start 335741103 is beyond EOD, truncated [ 293.331922][T10896] loop0: p234 start 335741103 is beyond EOD, truncated [ 293.339897][T10896] loop0: p235 start 335741103 is beyond EOD, truncated [ 293.347142][T10896] loop0: p236 start 335741103 is beyond EOD, truncated [ 293.354503][T10896] loop0: p237 start 335741103 is beyond EOD, truncated [ 293.363288][T10896] loop0: p238 start 335741103 is beyond EOD, truncated [ 293.370687][T10896] loop0: p239 start 335741103 is beyond EOD, truncated [ 293.378082][T10896] loop0: p240 start 335741103 is beyond EOD, truncated [ 293.384975][T10896] loop0: p241 start 335741103 is beyond EOD, truncated [ 293.392177][T10896] loop0: p242 start 335741103 is beyond EOD, truncated [ 293.399135][T10896] loop0: p243 start 335741103 is beyond EOD, truncated [ 293.406095][T10896] loop0: p244 start 335741103 is beyond EOD, truncated [ 293.413212][T10896] loop0: p245 start 335741103 is beyond EOD, truncated 14:55:27 executing program 0: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x69d7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfcfdffff, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f602020314af000314006c0000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 14:55:27 executing program 1: io_uring_setup(0x6095, &(0x7f0000000040)) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x79fb, &(0x7f0000000100)) 14:55:27 executing program 4: clone3(&(0x7f0000000000)={0x10008900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:27 executing program 2: io_setup(0x6af, &(0x7f0000000000)=0x0) io_destroy(r0) 14:55:27 executing program 3: bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) [ 293.420469][T10896] loop0: p246 start 335741103 is beyond EOD, truncated [ 293.427412][T10896] loop0: p247 start 335741103 is beyond EOD, truncated [ 293.434279][T10896] loop0: p248 start 335741103 is beyond EOD, truncated [ 293.441236][T10896] loop0: p249 start 335741103 is beyond EOD, truncated [ 293.449390][T10896] loop0: p250 start 335741103 is beyond EOD, truncated [ 293.457179][T10896] loop0: p251 start 335741103 is beyond EOD, truncated 14:55:27 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x322e286405e41d6c) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x20000010) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002a00)={&(0x7f0000000d00), 0xc, &(0x7f00000029c0)={&(0x7f0000000d40)={0xec4, 0x0, 0x0, 0x70bd2c, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac, {0x9, 0x4}}, 0x3f, @void}}, @NL80211_ATTR_FRAME={0x2e1, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x5, 0x40}}, @ver_80211n={0x0, 0x8, 0x1}}, 0x0, 0x0, @random=0x401, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x6}}, [{0xdd, 0xe9, "1f117e760d6e7c5096b9776c425a39f40cc671a623faa4391e2f8d1b8a456b100b0a095b39544de8df29f1e97700fe8e81db84da44954ffc0d1de086b424dfa3a288c26577c66d0047d95247006f768d0cbd1e481e90fc5a7aa7c7da0087e6e4268ddfd3e78104625e1fb1bb87b0a5b8968353b3b51a62299f7ad8cb7c3f73f371a16ccb3cc973a1eb0927e80827f1060559de50bd9a61358475ddd90f4eb6fd9e2055d26d2f7c2f85a710239bbb5168cea3196fd77bb9601803985e7ac06773e92038f68156358507e748045fbbcf6fc9745788c010458ad72ee6c0dc338cc41a33ff4c5b20a1044f"}, {0xdd, 0x79, "529191275ba98a5804d430af84084c409b034ffff54a17f28ffa0af0aa2a7320a7d8bda5a359d801be99667d856fa53a60b54e89e9d48009249907db50ed6ccaf1861952dbacb255fbfcf860d783c04c1a434f9edab948d993005c52fd10da6c3ba7fc71b9a7695e4d35caa368dcd8e82dfb3f1f8f8fd40284"}, {0xdd, 0x79, "4b77177e21cad27c250357a89ca9d128cbd5d4acfae2a97e4f31715faa4b961d16fe68eedd665a4968b807adc827822a3e647b618e2732aa926aa21add0c742862d4b16c868cb5fe9fcc01e6ea1786c1e3abfa72218778e2dee3c4e3e16c9de7a6f0f2cdd208aaafc115979fecb6e6ed504fa83ca0097e1922"}, {0xdd, 0xbc, "ec318c2b89185be5c73e08404b2d5bc04137521e20ab50a36e47d545db6b91b2ff0504c82081260a41f7aaf902aecb82f8b46b97cd36cc52e7805134709486d6ac8a6c9b49425fbaca35978c5b13e23e57b9d649c78b14e9ee0107d1b0c3973bec055f862e1069e122cc6d20ecadf5e68622612b1842f4eb60f3a11c82381d76ccc986615ddf491b4366ef4be50036f8fc29dc479ed992a1c38ddbdd872f5e91fce991b152bcbf4cacf8702a59d40bb6f5f948a43bf6841c13bd0afc"}]}}, @NL80211_ATTR_FRAME={0xb8c, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="fe44953d617e"}, {0xe, 0x0, 0x0, 0x0, 0x20}}, {@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7fc1}, @broadcast, @random="2d3a737e163a", @from_mac=@broadcast}}}, @a_msdu=[{@device_b, @device_a, 0xb45, "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"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xec4}}, 0x0) 14:55:27 executing program 0: setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x100, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x69d7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfcfdffff, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f602020314af000314006c0000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) [ 293.464999][T10896] loop0: p252 start 335741103 is beyond EOD, truncated [ 293.472462][T10896] loop0: p253 start 335741103 is beyond EOD, truncated [ 293.479826][T10896] loop0: p254 start 335741103 is beyond EOD, truncated [ 293.486743][T10896] loop0: p255 start 335741103 is beyond EOD, truncated 14:55:27 executing program 3: select(0x40, &(0x7f0000000140)={0x3}, 0x0, &(0x7f00000001c0), 0x0) [ 293.767738][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 293.775625][ T7] ath9k_htc: Failed to initialize the device [ 293.840800][T10973] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 293.857061][T10973] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 293.865488][ T3199] usb 6-1: ath9k_htc: USB layer deinitialized [ 293.918875][T10973] loop0: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 293.922479][T10973] loop0: p1 start 335741103 is beyond EOD, truncated [ 294.041359][T10973] loop0: p4 size 2097152 extends beyond EOD, truncated [ 294.051073][T10973] loop0: p5 start 335741103 is beyond EOD, truncated [ 294.058311][T10973] loop0: p6 start 335741103 is beyond EOD, truncated [ 294.065089][T10973] loop0: p7 start 335741103 is beyond EOD, truncated [ 294.073611][T10973] loop0: p8 start 335741103 is beyond EOD, truncated [ 294.083067][T10973] loop0: p9 start 335741103 is beyond EOD, truncated [ 294.090285][T10973] loop0: p10 start 335741103 is beyond EOD, truncated [ 294.097992][T10973] loop0: p11 start 335741103 is beyond EOD, truncated [ 294.105064][T10973] loop0: p12 start 335741103 is beyond EOD, truncated [ 294.112236][T10973] loop0: p13 start 335741103 is beyond EOD, truncated [ 294.119615][T10973] loop0: p14 start 335741103 is beyond EOD, truncated [ 294.126644][T10973] loop0: p15 start 335741103 is beyond EOD, truncated [ 294.133585][T10973] loop0: p16 start 335741103 is beyond EOD, truncated [ 294.142551][T10973] loop0: p17 start 335741103 is beyond EOD, truncated [ 294.149583][T10973] loop0: p18 start 335741103 is beyond EOD, truncated [ 294.156397][T10973] loop0: p19 start 335741103 is beyond EOD, truncated [ 294.164692][T10973] loop0: p20 start 335741103 is beyond EOD, truncated 14:55:28 executing program 5: openat$vfio(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 14:55:28 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) 14:55:28 executing program 4: getegid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 14:55:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x42, &(0x7f0000000080), 0x8) 14:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x811) [ 294.173137][T10973] loop0: p21 start 335741103 is beyond EOD, truncated [ 294.180504][T10973] loop0: p22 start 335741103 is beyond EOD, truncated [ 294.187896][T10973] loop0: p23 start 335741103 is beyond EOD, truncated [ 294.194734][T10973] loop0: p24 start 335741103 is beyond EOD, truncated [ 294.201606][T10973] loop0: p25 start 335741103 is beyond EOD, truncated [ 294.208640][T10973] loop0: p26 start 335741103 is beyond EOD, truncated [ 294.215799][T10973] loop0: p27 start 335741103 is beyond EOD, truncated 14:55:28 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/41, 0x29) 14:55:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x141602) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x1ff]}) [ 294.222729][T10973] loop0: p28 start 335741103 is beyond EOD, truncated [ 294.229696][T10973] loop0: p29 start 335741103 is beyond EOD, truncated [ 294.236515][T10973] loop0: p30 start 335741103 is beyond EOD, truncated [ 294.245340][T10973] loop0: p31 start 335741103 is beyond EOD, truncated [ 294.253760][T10973] loop0: p32 start 335741103 is beyond EOD, truncated [ 294.262188][T10973] loop0: p33 start 335741103 is beyond EOD, truncated [ 294.269855][T10973] loop0: p34 start 335741103 is beyond EOD, truncated 14:55:28 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) 14:55:28 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x4000) [ 294.276848][T10973] loop0: p35 start 335741103 is beyond EOD, truncated [ 294.297506][T10973] loop0: p36 start 335741103 is beyond EOD, truncated [ 294.310251][T10973] loop0: p37 start 335741103 is beyond EOD, truncated 14:55:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) [ 294.327429][ T3199] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.340070][T10973] loop0: p38 start 335741103 is beyond EOD, truncated [ 294.360728][T10973] loop0: p39 start 335741103 is beyond EOD, truncated [ 294.382520][T10973] loop0: p40 start 335741103 is beyond EOD, truncated [ 294.425437][T10973] loop0: p41 start 335741103 is beyond EOD, truncated [ 294.441514][T11006] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 294.464753][T10973] loop0: p42 start 335741103 is beyond EOD, truncated [ 294.488776][T10973] loop0: p43 start 335741103 is beyond EOD, truncated [ 294.537840][T10973] loop0: p44 start 335741103 is beyond EOD, truncated [ 294.552188][T10973] loop0: p45 start 335741103 is beyond EOD, truncated [ 294.561467][T10973] loop0: p46 start 335741103 is beyond EOD, truncated [ 294.571838][T10973] loop0: p47 start 335741103 is beyond EOD, truncated [ 294.578926][T10973] loop0: p48 start 335741103 is beyond EOD, truncated [ 294.585902][T10973] loop0: p49 start 335741103 is beyond EOD, truncated [ 294.593614][T10973] loop0: p50 start 335741103 is beyond EOD, truncated [ 294.600727][T10973] loop0: p51 start 335741103 is beyond EOD, truncated [ 294.608292][T10973] loop0: p52 start 335741103 is beyond EOD, truncated [ 294.615090][T10973] loop0: p53 start 335741103 is beyond EOD, truncated [ 294.622402][T10973] loop0: p54 start 335741103 is beyond EOD, truncated [ 294.629826][T10973] loop0: p55 start 335741103 is beyond EOD, truncated [ 294.636862][T10973] loop0: p56 start 335741103 is beyond EOD, truncated [ 294.645585][T10973] loop0: p57 start 335741103 is beyond EOD, truncated [ 294.655768][T10973] loop0: p58 start 335741103 is beyond EOD, truncated [ 294.663191][T10973] loop0: p59 start 335741103 is beyond EOD, truncated [ 294.671252][T10973] loop0: p60 start 335741103 is beyond EOD, truncated [ 294.678689][T10973] loop0: p61 start 335741103 is beyond EOD, truncated [ 294.685564][T10973] loop0: p62 start 335741103 is beyond EOD, truncated [ 294.692394][T10973] loop0: p63 start 335741103 is beyond EOD, truncated [ 294.699325][T10973] loop0: p64 start 335741103 is beyond EOD, truncated [ 294.706078][T10973] loop0: p65 start 335741103 is beyond EOD, truncated [ 294.712867][T10973] loop0: p66 start 335741103 is beyond EOD, truncated [ 294.719912][T10973] loop0: p67 start 335741103 is beyond EOD, truncated [ 294.726668][T10973] loop0: p68 start 335741103 is beyond EOD, truncated [ 294.733521][T10973] loop0: p69 start 335741103 is beyond EOD, truncated [ 294.740434][T10973] loop0: p70 start 335741103 is beyond EOD, truncated [ 294.747206][T10973] loop0: p71 start 335741103 is beyond EOD, truncated [ 294.754604][T10973] loop0: p72 start 335741103 is beyond EOD, truncated [ 294.761620][T10973] loop0: p73 start 335741103 is beyond EOD, truncated [ 294.768479][T10973] loop0: p74 start 335741103 is beyond EOD, truncated [ 294.775273][T10973] loop0: p75 start 335741103 is beyond EOD, truncated [ 294.782451][T10973] loop0: p76 start 335741103 is beyond EOD, truncated [ 294.789897][T10973] loop0: p77 start 335741103 is beyond EOD, truncated [ 294.796687][T10973] loop0: p78 start 335741103 is beyond EOD, truncated [ 294.803530][T10973] loop0: p79 start 335741103 is beyond EOD, truncated [ 294.810370][T10973] loop0: p80 start 335741103 is beyond EOD, truncated [ 294.817190][T10973] loop0: p81 start 335741103 is beyond EOD, truncated [ 294.823977][T10973] loop0: p82 start 335741103 is beyond EOD, truncated [ 294.830990][T10973] loop0: p83 start 335741103 is beyond EOD, truncated [ 294.837831][T10973] loop0: p84 start 335741103 is beyond EOD, truncated [ 294.844585][T10973] loop0: p85 start 335741103 is beyond EOD, truncated [ 294.851394][T10973] loop0: p86 start 335741103 is beyond EOD, truncated [ 294.858831][T10973] loop0: p87 start 335741103 is beyond EOD, truncated [ 294.865587][T10973] loop0: p88 start 335741103 is beyond EOD, truncated [ 294.872410][T10973] loop0: p89 start 335741103 is beyond EOD, truncated [ 294.880987][T10973] loop0: p90 start 335741103 is beyond EOD, truncated [ 294.887975][T10973] loop0: p91 start 335741103 is beyond EOD, truncated [ 294.894732][T10973] loop0: p92 start 335741103 is beyond EOD, truncated [ 294.901532][T10973] loop0: p93 start 335741103 is beyond EOD, truncated [ 294.908371][T10973] loop0: p94 start 335741103 is beyond EOD, truncated [ 294.915126][T10973] loop0: p95 start 335741103 is beyond EOD, truncated [ 294.921942][T10973] loop0: p96 start 335741103 is beyond EOD, truncated [ 294.928762][T10973] loop0: p97 start 335741103 is beyond EOD, truncated [ 294.935505][T10973] loop0: p98 start 335741103 is beyond EOD, truncated [ 294.942315][T10973] loop0: p99 start 335741103 is beyond EOD, truncated [ 294.949125][T10973] loop0: p100 start 335741103 is beyond EOD, truncated [ 294.956363][T10973] loop0: p101 start 335741103 is beyond EOD, truncated [ 294.963366][T10973] loop0: p102 start 335741103 is beyond EOD, truncated [ 294.970433][T10973] loop0: p103 start 335741103 is beyond EOD, truncated [ 294.977281][T10973] loop0: p104 start 335741103 is beyond EOD, truncated [ 294.984192][T10973] loop0: p105 start 335741103 is beyond EOD, truncated [ 294.992003][T10973] loop0: p106 start 335741103 is beyond EOD, truncated [ 294.999755][T10973] loop0: p107 start 335741103 is beyond EOD, truncated [ 295.006605][T10973] loop0: p108 start 335741103 is beyond EOD, truncated [ 295.014846][T10973] loop0: p109 start 335741103 is beyond EOD, truncated [ 295.022537][T10973] loop0: p110 start 335741103 is beyond EOD, truncated [ 295.029712][T10973] loop0: p111 start 335741103 is beyond EOD, truncated [ 295.036595][T10973] loop0: p112 start 335741103 is beyond EOD, truncated [ 295.044104][T10973] loop0: p113 start 335741103 is beyond EOD, truncated [ 295.051259][T10973] loop0: p114 start 335741103 is beyond EOD, truncated [ 295.059138][T10973] loop0: p115 start 335741103 is beyond EOD, truncated [ 295.066102][T10973] loop0: p116 start 335741103 is beyond EOD, truncated [ 295.072991][T10973] loop0: p117 start 335741103 is beyond EOD, truncated [ 295.079899][T10973] loop0: p118 start 335741103 is beyond EOD, truncated [ 295.086740][T10973] loop0: p119 start 335741103 is beyond EOD, truncated [ 295.093639][T10973] loop0: p120 start 335741103 is beyond EOD, truncated [ 295.102231][T10973] loop0: p121 start 335741103 is beyond EOD, truncated [ 295.109140][T10973] loop0: p122 start 335741103 is beyond EOD, truncated [ 295.115981][T10973] loop0: p123 start 335741103 is beyond EOD, truncated [ 295.122961][T10973] loop0: p124 start 335741103 is beyond EOD, truncated [ 295.129928][T10973] loop0: p125 start 335741103 is beyond EOD, truncated [ 295.136999][T10973] loop0: p126 start 335741103 is beyond EOD, truncated [ 295.143924][T10973] loop0: p127 start 335741103 is beyond EOD, truncated [ 295.150828][T10973] loop0: p128 start 335741103 is beyond EOD, truncated [ 295.157926][T10973] loop0: p129 start 335741103 is beyond EOD, truncated [ 295.165210][T10973] loop0: p130 start 335741103 is beyond EOD, truncated [ 295.172134][T10973] loop0: p131 start 335741103 is beyond EOD, truncated [ 295.179056][T10973] loop0: p132 start 335741103 is beyond EOD, truncated [ 295.185985][T10973] loop0: p133 start 335741103 is beyond EOD, truncated [ 295.192860][T10973] loop0: p134 start 335741103 is beyond EOD, truncated [ 295.206846][T10973] loop0: p135 start 335741103 is beyond EOD, truncated [ 295.214277][T10973] loop0: p136 start 335741103 is beyond EOD, truncated [ 295.221756][T10973] loop0: p137 start 335741103 is beyond EOD, truncated [ 295.229151][T10973] loop0: p138 start 335741103 is beyond EOD, truncated [ 295.236052][T10973] loop0: p139 start 335741103 is beyond EOD, truncated [ 295.243401][T10973] loop0: p140 start 335741103 is beyond EOD, truncated [ 295.250479][T10973] loop0: p141 start 335741103 is beyond EOD, truncated [ 295.257972][T10973] loop0: p142 start 335741103 is beyond EOD, truncated [ 295.265314][T10973] loop0: p143 start 335741103 is beyond EOD, truncated [ 295.272468][T10973] loop0: p144 start 335741103 is beyond EOD, truncated [ 295.281526][T10973] loop0: p145 start 335741103 is beyond EOD, truncated [ 295.288487][T10973] loop0: p146 start 335741103 is beyond EOD, truncated [ 295.295347][T10973] loop0: p147 start 335741103 is beyond EOD, truncated [ 295.302634][T10973] loop0: p148 start 335741103 is beyond EOD, truncated [ 295.309953][T10973] loop0: p149 start 335741103 is beyond EOD, truncated [ 295.316816][T10973] loop0: p150 start 335741103 is beyond EOD, truncated [ 295.323716][T10973] loop0: p151 start 335741103 is beyond EOD, truncated [ 295.331148][T10973] loop0: p152 start 335741103 is beyond EOD, truncated [ 295.339802][T10973] loop0: p153 start 335741103 is beyond EOD, truncated [ 295.346667][T10973] loop0: p154 start 335741103 is beyond EOD, truncated [ 295.353854][T10973] loop0: p155 start 335741103 is beyond EOD, truncated [ 295.360865][T10973] loop0: p156 start 335741103 is beyond EOD, truncated [ 295.369086][T10973] loop0: p157 start 335741103 is beyond EOD, truncated [ 295.375949][T10973] loop0: p158 start 335741103 is beyond EOD, truncated [ 295.383080][T10973] loop0: p159 start 335741103 is beyond EOD, truncated [ 295.390016][T10973] loop0: p160 start 335741103 is beyond EOD, truncated [ 295.396970][T10973] loop0: p161 start 335741103 is beyond EOD, truncated [ 295.404148][T10973] loop0: p162 start 335741103 is beyond EOD, truncated [ 295.411106][T10973] loop0: p163 start 335741103 is beyond EOD, truncated [ 295.418137][T10973] loop0: p164 start 335741103 is beyond EOD, truncated [ 295.425001][T10973] loop0: p165 start 335741103 is beyond EOD, truncated [ 295.432411][T10973] loop0: p166 start 335741103 is beyond EOD, truncated [ 295.439886][T10973] loop0: p167 start 335741103 is beyond EOD, truncated [ 295.446784][T10973] loop0: p168 start 335741103 is beyond EOD, truncated [ 295.453918][T10973] loop0: p169 start 335741103 is beyond EOD, truncated [ 295.464583][T10973] loop0: p170 start 335741103 is beyond EOD, truncated [ 295.472362][T10973] loop0: p171 start 335741103 is beyond EOD, truncated [ 295.479568][T10973] loop0: p172 start 335741103 is beyond EOD, truncated [ 295.486566][T10973] loop0: p173 start 335741103 is beyond EOD, truncated [ 295.493491][T10973] loop0: p174 start 335741103 is beyond EOD, truncated [ 295.500415][T10973] loop0: p175 start 335741103 is beyond EOD, truncated [ 295.507285][T10973] loop0: p176 start 335741103 is beyond EOD, truncated [ 295.514204][T10973] loop0: p177 start 335741103 is beyond EOD, truncated [ 295.521099][T10973] loop0: p178 start 335741103 is beyond EOD, truncated [ 295.528021][T10973] loop0: p179 start 335741103 is beyond EOD, truncated [ 295.534860][T10973] loop0: p180 start 335741103 is beyond EOD, truncated [ 295.541792][T10973] loop0: p181 start 335741103 is beyond EOD, truncated [ 295.548715][T10973] loop0: p182 start 335741103 is beyond EOD, truncated [ 295.555742][T10973] loop0: p183 start 335741103 is beyond EOD, truncated [ 295.562637][T10973] loop0: p184 start 335741103 is beyond EOD, truncated [ 295.570161][T10973] loop0: p185 start 335741103 is beyond EOD, truncated [ 295.577110][T10973] loop0: p186 start 335741103 is beyond EOD, truncated [ 295.585375][T10973] loop0: p187 start 335741103 is beyond EOD, truncated [ 295.592698][T10973] loop0: p188 start 335741103 is beyond EOD, truncated [ 295.600241][T10973] loop0: p189 start 335741103 is beyond EOD, truncated [ 295.608190][T10973] loop0: p190 start 335741103 is beyond EOD, truncated [ 295.615267][T10973] loop0: p191 start 335741103 is beyond EOD, truncated [ 295.622478][T10973] loop0: p192 start 335741103 is beyond EOD, truncated [ 295.629575][T10973] loop0: p193 start 335741103 is beyond EOD, truncated [ 295.636454][T10973] loop0: p194 start 335741103 is beyond EOD, truncated [ 295.643691][T10973] loop0: p195 start 335741103 is beyond EOD, truncated [ 295.650781][T10973] loop0: p196 start 335741103 is beyond EOD, truncated [ 295.658351][T10973] loop0: p197 start 335741103 is beyond EOD, truncated [ 295.665228][T10973] loop0: p198 start 335741103 is beyond EOD, truncated [ 295.673155][T10973] loop0: p199 start 335741103 is beyond EOD, truncated [ 295.680955][T10973] loop0: p200 start 335741103 is beyond EOD, truncated [ 295.687966][T10973] loop0: p201 start 335741103 is beyond EOD, truncated [ 295.694948][T10973] loop0: p202 start 335741103 is beyond EOD, truncated [ 295.702352][T10973] loop0: p203 start 335741103 is beyond EOD, truncated [ 295.709766][T10973] loop0: p204 start 335741103 is beyond EOD, truncated [ 295.716681][T10973] loop0: p205 start 335741103 is beyond EOD, truncated [ 295.723658][T10973] loop0: p206 start 335741103 is beyond EOD, truncated [ 295.730700][T10973] loop0: p207 start 335741103 is beyond EOD, truncated [ 295.737629][T10973] loop0: p208 start 335741103 is beyond EOD, truncated [ 295.744472][T10973] loop0: p209 start 335741103 is beyond EOD, truncated [ 295.751515][T10973] loop0: p210 start 335741103 is beyond EOD, truncated [ 295.758687][T10973] loop0: p211 start 335741103 is beyond EOD, truncated [ 295.765629][T10973] loop0: p212 start 335741103 is beyond EOD, truncated [ 295.772902][T10973] loop0: p213 start 335741103 is beyond EOD, truncated [ 295.780733][T10973] loop0: p214 start 335741103 is beyond EOD, truncated [ 295.787750][T10973] loop0: p215 start 335741103 is beyond EOD, truncated [ 295.794596][T10973] loop0: p216 start 335741103 is beyond EOD, truncated [ 295.801604][T10973] loop0: p217 start 335741103 is beyond EOD, truncated [ 295.808631][T10973] loop0: p218 start 335741103 is beyond EOD, truncated [ 295.815487][T10973] loop0: p219 start 335741103 is beyond EOD, truncated [ 295.822392][T10973] loop0: p220 start 335741103 is beyond EOD, truncated [ 295.829291][T10973] loop0: p221 start 335741103 is beyond EOD, truncated [ 295.836124][T10973] loop0: p222 start 335741103 is beyond EOD, truncated [ 295.843032][T10973] loop0: p223 start 335741103 is beyond EOD, truncated [ 295.849944][T10973] loop0: p224 start 335741103 is beyond EOD, truncated [ 295.856786][T10973] loop0: p225 start 335741103 is beyond EOD, truncated [ 295.863681][T10973] loop0: p226 start 335741103 is beyond EOD, truncated [ 295.871277][T10973] loop0: p227 start 335741103 is beyond EOD, truncated [ 295.879139][T10973] loop0: p228 start 335741103 is beyond EOD, truncated [ 295.886008][T10973] loop0: p229 start 335741103 is beyond EOD, truncated [ 295.893117][T10973] loop0: p230 start 335741103 is beyond EOD, truncated [ 295.900327][T10973] loop0: p231 start 335741103 is beyond EOD, truncated [ 295.907209][T10973] loop0: p232 start 335741103 is beyond EOD, truncated [ 295.914305][T10973] loop0: p233 start 335741103 is beyond EOD, truncated [ 295.924538][T10973] loop0: p234 start 335741103 is beyond EOD, truncated [ 295.931472][T10973] loop0: p235 start 335741103 is beyond EOD, truncated [ 295.938783][T10973] loop0: p236 start 335741103 is beyond EOD, truncated [ 295.945612][T10973] loop0: p237 start 335741103 is beyond EOD, truncated [ 295.952606][T10973] loop0: p238 start 335741103 is beyond EOD, truncated [ 295.959830][T10973] loop0: p239 start 335741103 is beyond EOD, truncated [ 295.966751][T10973] loop0: p240 start 335741103 is beyond EOD, truncated [ 295.973809][T10973] loop0: p241 start 335741103 is beyond EOD, truncated [ 295.981763][T10973] loop0: p242 start 335741103 is beyond EOD, truncated 14:55:30 executing program 3: syz_mount_image$ufs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000c40)='./file0\x00', 0x0, 0x0) 14:55:30 executing program 1: socketpair(0x36, 0x0, 0x0, &(0x7f0000000000)) 14:55:30 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x10000, 0x0) 14:55:30 executing program 5: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x29, 0x800, 0x5) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000d00), 0xc, 0x0}, 0x4) [ 295.990312][T10973] loop0: p243 start 335741103 is beyond EOD, truncated [ 295.997156][T10973] loop0: p244 start 335741103 is beyond EOD, truncated [ 296.004996][T10973] loop0: p245 start 335741103 is beyond EOD, truncated [ 296.012346][T10973] loop0: p246 start 335741103 is beyond EOD, truncated [ 296.019566][T10973] loop0: p247 start 335741103 is beyond EOD, truncated [ 296.026449][T10973] loop0: p248 start 335741103 is beyond EOD, truncated [ 296.033831][T10973] loop0: p249 start 335741103 is beyond EOD, truncated 14:55:30 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x28201, 0x0) 14:55:30 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 14:55:30 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340), 0x8) [ 296.041065][T10973] loop0: p250 start 335741103 is beyond EOD, truncated [ 296.048471][T10973] loop0: p251 start 335741103 is beyond EOD, truncated [ 296.055353][T10973] loop0: p252 start 335741103 is beyond EOD, truncated [ 296.062570][T10973] loop0: p253 start 335741103 is beyond EOD, truncated [ 296.069625][T10973] loop0: p254 start 335741103 is beyond EOD, truncated [ 296.076506][T10973] loop0: p255 start 335741103 is beyond EOD, truncated 14:55:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x3, 0x0, &(0x7f0000000280)) [ 296.126439][ T4895] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 296.142821][ T4895] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 14:55:30 executing program 4: clone3(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:55:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x8}, 0x0) 14:55:30 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 14:55:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:30 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e63a, [{{0x9, 0x2, 0x22e3354a1c870aba}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x64, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 296.175939][ T4895] loop0: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 14:55:30 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f0000000040)) 14:55:30 executing program 1: io_uring_setup(0x3d93, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3aa}) [ 296.176123][ T4895] loop0: p1 start 335741103 is beyond EOD, truncated 14:55:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) [ 296.357830][ T4895] loop0: p4 size 2097152 extends beyond EOD, truncated [ 296.366142][ T4895] loop0: p5 start 335741103 is beyond EOD, truncated [ 296.392915][ T4895] loop0: p6 start 335741103 is beyond EOD, truncated 14:55:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) [ 296.412133][ T4895] loop0: p7 start 335741103 is beyond EOD, truncated [ 296.437305][ T4895] loop0: p8 start 335741103 is beyond EOD, truncated [ 296.450665][ T35] audit: type=1326 audit(1607525730.457:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460f5a code=0x0 [ 296.465289][ T4895] loop0: p9 start 335741103 is beyond EOD, truncated [ 296.491585][ T4895] loop0: p10 start 335741103 is beyond EOD, truncated [ 296.504916][ T4895] loop0: p11 start 335741103 is beyond EOD, truncated [ 296.526505][ T4895] loop0: p12 start 335741103 is beyond EOD, truncated [ 296.547186][ T4895] loop0: p13 start 335741103 is beyond EOD, truncated [ 296.573212][ T4895] loop0: p14 start 335741103 is beyond EOD, truncated [ 296.581631][ T4895] loop0: p15 start 335741103 is beyond EOD, truncated [ 296.596290][ T4895] loop0: p16 start 335741103 is beyond EOD, truncated [ 296.604948][ T4895] loop0: p17 start 335741103 is beyond EOD, truncated [ 296.615206][ T4895] loop0: p18 start 335741103 is beyond EOD, truncated [ 296.622526][ T4895] loop0: p19 start 335741103 is beyond EOD, truncated [ 296.629824][ T4895] loop0: p20 start 335741103 is beyond EOD, truncated [ 296.636612][ T4895] loop0: p21 start 335741103 is beyond EOD, truncated [ 296.643494][ T4895] loop0: p22 start 335741103 is beyond EOD, truncated [ 296.650559][ T4895] loop0: p23 start 335741103 is beyond EOD, truncated [ 296.657338][ T4895] loop0: p24 start 335741103 is beyond EOD, truncated [ 296.664672][ T4895] loop0: p25 start 335741103 is beyond EOD, truncated [ 296.672149][ T4895] loop0: p26 start 335741103 is beyond EOD, truncated [ 296.679752][ T4895] loop0: p27 start 335741103 is beyond EOD, truncated [ 296.686701][ T4895] loop0: p28 start 335741103 is beyond EOD, truncated [ 296.693026][ T9913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 296.693707][ T4895] loop0: p29 start 335741103 is beyond EOD, truncated [ 296.708405][ T4895] loop0: p30 start 335741103 is beyond EOD, truncated [ 296.715267][ T4895] loop0: p31 start 335741103 is beyond EOD, truncated [ 296.722583][ T4895] loop0: p32 start 335741103 is beyond EOD, truncated [ 296.733319][ T4895] loop0: p33 start 335741103 is beyond EOD, truncated [ 296.740855][ T4895] loop0: p34 start 335741103 is beyond EOD, truncated [ 296.748095][ T4895] loop0: p35 start 335741103 is beyond EOD, truncated [ 296.755129][ T4895] loop0: p36 start 335741103 is beyond EOD, truncated [ 296.762269][ T4895] loop0: p37 start 335741103 is beyond EOD, truncated [ 296.770115][ T4895] loop0: p38 start 335741103 is beyond EOD, truncated [ 296.777058][ T4895] loop0: p39 start 335741103 is beyond EOD, truncated [ 296.784174][ T4895] loop0: p40 start 335741103 is beyond EOD, truncated [ 296.784188][ T4895] loop0: p41 start 335741103 is beyond EOD, truncated [ 296.784198][ T4895] loop0: p42 start 335741103 is beyond EOD, truncated [ 296.784207][ T4895] loop0: p43 start 335741103 is beyond EOD, truncated [ 296.784216][ T4895] loop0: p44 start 335741103 is beyond EOD, truncated [ 296.784226][ T4895] loop0: p45 start 335741103 is beyond EOD, truncated [ 296.784242][ T4895] loop0: p46 start 335741103 is beyond EOD, truncated [ 296.833320][ T4895] loop0: p47 start 335741103 is beyond EOD, truncated [ 296.840258][ T4895] loop0: p48 start 335741103 is beyond EOD, truncated [ 296.847157][ T4895] loop0: p49 start 335741103 is beyond EOD, truncated [ 296.854029][ T4895] loop0: p50 start 335741103 is beyond EOD, truncated [ 296.860844][ T4895] loop0: p51 start 335741103 is beyond EOD, truncated [ 296.867752][ T4895] loop0: p52 start 335741103 is beyond EOD, truncated [ 296.874511][ T4895] loop0: p53 start 335741103 is beyond EOD, truncated [ 296.881366][ T4895] loop0: p54 start 335741103 is beyond EOD, truncated [ 296.888190][ T4895] loop0: p55 start 335741103 is beyond EOD, truncated [ 296.894941][ T4895] loop0: p56 start 335741103 is beyond EOD, truncated [ 296.902014][ T4895] loop0: p57 start 335741103 is beyond EOD, truncated [ 296.908840][ T4895] loop0: p58 start 335741103 is beyond EOD, truncated [ 296.915588][ T4895] loop0: p59 start 335741103 is beyond EOD, truncated [ 296.922392][ T4895] loop0: p60 start 335741103 is beyond EOD, truncated [ 296.929214][ T4895] loop0: p61 start 335741103 is beyond EOD, truncated [ 296.935968][ T4895] loop0: p62 start 335741103 is beyond EOD, truncated [ 296.942861][ T4895] loop0: p63 start 335741103 is beyond EOD, truncated [ 296.951522][ T4895] loop0: p64 start 335741103 is beyond EOD, truncated [ 296.959315][ T4895] loop0: p65 start 335741103 is beyond EOD, truncated [ 296.966181][ T4895] loop0: p66 start 335741103 is beyond EOD, truncated [ 296.973101][ T4895] loop0: p67 start 335741103 is beyond EOD, truncated [ 296.980103][ T9913] usb 4-1: too many configurations: 58, using maximum allowed: 8 [ 296.982830][ T4895] loop0: p68 start 335741103 is beyond EOD, truncated [ 296.995242][ T4895] loop0: p69 start 335741103 is beyond EOD, truncated [ 297.002682][ T4895] loop0: p70 start 335741103 is beyond EOD, truncated [ 297.009573][ T4895] loop0: p71 start 335741103 is beyond EOD, truncated [ 297.016325][ T4895] loop0: p72 start 335741103 is beyond EOD, truncated [ 297.023729][ T4895] loop0: p73 start 335741103 is beyond EOD, truncated [ 297.031953][ T4895] loop0: p74 start 335741103 is beyond EOD, truncated [ 297.038862][ T4895] loop0: p75 start 335741103 is beyond EOD, truncated [ 297.045761][ T4895] loop0: p76 start 335741103 is beyond EOD, truncated [ 297.052628][ T4895] loop0: p77 start 335741103 is beyond EOD, truncated [ 297.059448][ T4895] loop0: p78 start 335741103 is beyond EOD, truncated [ 297.066196][ T4895] loop0: p79 start 335741103 is beyond EOD, truncated [ 297.073075][ T9913] usb 4-1: config index 0 descriptor too short (expected 2746, got 72) [ 297.075942][ T4895] loop0: p80 start 335741103 is beyond EOD, truncated [ 297.089501][ T4895] loop0: p81 start 335741103 is beyond EOD, truncated [ 297.096256][ T4895] loop0: p82 start 335741103 is beyond EOD, truncated [ 297.103184][ T4895] loop0: p83 start 335741103 is beyond EOD, truncated [ 297.110278][ T4895] loop0: p84 start 335741103 is beyond EOD, truncated [ 297.117032][ T4895] loop0: p85 start 335741103 is beyond EOD, truncated [ 297.124072][ T4895] loop0: p86 start 335741103 is beyond EOD, truncated [ 297.130876][ T4895] loop0: p87 start 335741103 is beyond EOD, truncated [ 297.137700][ T4895] loop0: p88 start 335741103 is beyond EOD, truncated [ 297.144451][ T4895] loop0: p89 start 335741103 is beyond EOD, truncated [ 297.151249][ T4895] loop0: p90 start 335741103 is beyond EOD, truncated [ 297.157688][ T9913] usb 4-1: config index 1 descriptor too short (expected 2746, got 72) [ 297.158064][ T4895] loop0: p91 start 335741103 is beyond EOD, truncated [ 297.175414][ T4895] loop0: p92 start 335741103 is beyond EOD, truncated [ 297.182241][ T4895] loop0: p93 start 335741103 is beyond EOD, truncated [ 297.189549][ T4895] loop0: p94 start 335741103 is beyond EOD, truncated [ 297.196345][ T4895] loop0: p95 start 335741103 is beyond EOD, truncated [ 297.208636][ T4895] loop0: p96 start 335741103 is beyond EOD, truncated [ 297.215535][ T4895] loop0: p97 start 335741103 is beyond EOD, truncated [ 297.222379][ T4895] loop0: p98 start 335741103 is beyond EOD, truncated [ 297.229201][ T4895] loop0: p99 start 335741103 is beyond EOD, truncated [ 297.236143][ T4895] loop0: p100 start 335741103 is beyond EOD, truncated [ 297.237632][ T9913] usb 4-1: config index 2 descriptor too short (expected 2746, got 72) [ 297.243133][ T4895] loop0: p101 start 335741103 is beyond EOD, truncated [ 297.258287][ T4895] loop0: p102 start 335741103 is beyond EOD, truncated [ 297.265135][ T4895] loop0: p103 start 335741103 is beyond EOD, truncated [ 297.275710][ T4895] loop0: p104 start 335741103 is beyond EOD, truncated [ 297.285497][ T4895] loop0: p105 start 335741103 is beyond EOD, truncated [ 297.293465][ T4895] loop0: p106 start 335741103 is beyond EOD, truncated [ 297.300827][ T4895] loop0: p107 start 335741103 is beyond EOD, truncated [ 297.308218][ T4895] loop0: p108 start 335741103 is beyond EOD, truncated [ 297.316401][ T4895] loop0: p109 start 335741103 is beyond EOD, truncated [ 297.324151][ T4895] loop0: p110 start 335741103 is beyond EOD, truncated [ 297.331070][ T4895] loop0: p111 start 335741103 is beyond EOD, truncated [ 297.339055][ T4895] loop0: p112 start 335741103 is beyond EOD, truncated [ 297.346059][ T4895] loop0: p113 start 335741103 is beyond EOD, truncated [ 297.347680][ T9913] usb 4-1: config index 3 descriptor too short (expected 2746, got 72) [ 297.352938][ T4895] loop0: p114 start 335741103 is beyond EOD, truncated [ 297.370234][ T4895] loop0: p115 start 335741103 is beyond EOD, truncated [ 297.377133][ T4895] loop0: p116 start 335741103 is beyond EOD, truncated [ 297.384699][ T4895] loop0: p117 start 335741103 is beyond EOD, truncated [ 297.392012][ T4895] loop0: p118 start 335741103 is beyond EOD, truncated [ 297.399160][ T4895] loop0: p119 start 335741103 is beyond EOD, truncated [ 297.406085][ T4895] loop0: p120 start 335741103 is beyond EOD, truncated [ 297.413851][ T4895] loop0: p121 start 335741103 is beyond EOD, truncated [ 297.421159][ T4895] loop0: p122 start 335741103 is beyond EOD, truncated [ 297.428136][ T4895] loop0: p123 start 335741103 is beyond EOD, truncated [ 297.434993][ T4895] loop0: p124 start 335741103 is beyond EOD, truncated [ 297.442199][ T9913] usb 4-1: config index 4 descriptor too short (expected 2746, got 72) [ 297.443360][ T4895] loop0: p125 start 335741103 is beyond EOD, truncated [ 297.457765][ T4895] loop0: p126 start 335741103 is beyond EOD, truncated [ 297.464605][ T4895] loop0: p127 start 335741103 is beyond EOD, truncated [ 297.472276][ T4895] loop0: p128 start 335741103 is beyond EOD, truncated [ 297.479373][ T4895] loop0: p129 start 335741103 is beyond EOD, truncated [ 297.486222][ T4895] loop0: p130 start 335741103 is beyond EOD, truncated [ 297.493147][ T4895] loop0: p131 start 335741103 is beyond EOD, truncated [ 297.500038][ T4895] loop0: p132 start 335741103 is beyond EOD, truncated [ 297.506993][ T4895] loop0: p133 start 335741103 is beyond EOD, truncated [ 297.514917][ T4895] loop0: p134 start 335741103 is beyond EOD, truncated [ 297.522438][ T4895] loop0: p135 start 335741103 is beyond EOD, truncated [ 297.529859][ T4895] loop0: p136 start 335741103 is beyond EOD, truncated [ 297.532107][ T9913] usb 4-1: config index 5 descriptor too short (expected 2746, got 72) [ 297.536828][ T4895] loop0: p137 start 335741103 is beyond EOD, truncated [ 297.552491][ T4895] loop0: p138 start 335741103 is beyond EOD, truncated [ 297.560000][ T4895] loop0: p139 start 335741103 is beyond EOD, truncated [ 297.567158][ T4895] loop0: p140 start 335741103 is beyond EOD, truncated [ 297.574276][ T4895] loop0: p141 start 335741103 is beyond EOD, truncated [ 297.581651][ T4895] loop0: p142 start 335741103 is beyond EOD, truncated [ 297.589570][ T4895] loop0: p143 start 335741103 is beyond EOD, truncated [ 297.596449][ T4895] loop0: p144 start 335741103 is beyond EOD, truncated [ 297.604404][ T4895] loop0: p145 start 335741103 is beyond EOD, truncated [ 297.611907][ T4895] loop0: p146 start 335741103 is beyond EOD, truncated [ 297.619163][ T4895] loop0: p147 start 335741103 is beyond EOD, truncated [ 297.626006][ T4895] loop0: p148 start 335741103 is beyond EOD, truncated [ 297.627630][ T9913] usb 4-1: config index 6 descriptor too short (expected 2746, got 72) [ 297.635717][ T4895] loop0: p149 start 335741103 is beyond EOD, truncated [ 297.648039][ T4895] loop0: p150 start 335741103 is beyond EOD, truncated [ 297.654962][ T4895] loop0: p151 start 335741103 is beyond EOD, truncated [ 297.661851][ T4895] loop0: p152 start 335741103 is beyond EOD, truncated [ 297.668759][ T4895] loop0: p153 start 335741103 is beyond EOD, truncated [ 297.675596][ T4895] loop0: p154 start 335741103 is beyond EOD, truncated [ 297.682763][ T4895] loop0: p155 start 335741103 is beyond EOD, truncated [ 297.689696][ T4895] loop0: p156 start 335741103 is beyond EOD, truncated [ 297.696531][ T4895] loop0: p157 start 335741103 is beyond EOD, truncated [ 297.703639][ T4895] loop0: p158 start 335741103 is beyond EOD, truncated [ 297.711823][ T4895] loop0: p159 start 335741103 is beyond EOD, truncated [ 297.719542][ T4895] loop0: p160 start 335741103 is beyond EOD, truncated [ 297.726415][ T4895] loop0: p161 start 335741103 is beyond EOD, truncated [ 297.727585][ T9913] usb 4-1: config index 7 descriptor too short (expected 2746, got 72) [ 297.735111][ T4895] loop0: p162 start 335741103 is beyond EOD, truncated [ 297.748550][ T4895] loop0: p163 start 335741103 is beyond EOD, truncated [ 297.755417][ T4895] loop0: p164 start 335741103 is beyond EOD, truncated [ 297.762818][ T4895] loop0: p165 start 335741103 is beyond EOD, truncated [ 297.769952][ T4895] loop0: p166 start 335741103 is beyond EOD, truncated [ 297.777061][ T4895] loop0: p167 start 335741103 is beyond EOD, truncated [ 297.785152][ T4895] loop0: p168 start 335741103 is beyond EOD, truncated [ 297.792223][ T4895] loop0: p169 start 335741103 is beyond EOD, truncated [ 297.799425][ T4895] loop0: p170 start 335741103 is beyond EOD, truncated [ 297.806503][ T4895] loop0: p171 start 335741103 is beyond EOD, truncated [ 297.813667][ T4895] loop0: p172 start 335741103 is beyond EOD, truncated [ 297.820941][ T4895] loop0: p173 start 335741103 is beyond EOD, truncated [ 297.828814][ T4895] loop0: p174 start 335741103 is beyond EOD, truncated [ 297.835689][ T4895] loop0: p175 start 335741103 is beyond EOD, truncated [ 297.846111][ T4895] loop0: p176 start 335741103 is beyond EOD, truncated [ 297.853803][ T4895] loop0: p177 start 335741103 is beyond EOD, truncated [ 297.861210][ T4895] loop0: p178 start 335741103 is beyond EOD, truncated [ 297.870689][ T4895] loop0: p179 start 335741103 is beyond EOD, truncated [ 297.878587][ T4895] loop0: p180 start 335741103 is beyond EOD, truncated [ 297.885490][ T4895] loop0: p181 start 335741103 is beyond EOD, truncated [ 297.892675][ T4895] loop0: p182 start 335741103 is beyond EOD, truncated [ 297.899932][ T4895] loop0: p183 start 335741103 is beyond EOD, truncated [ 297.906897][ T4895] loop0: p184 start 335741103 is beyond EOD, truncated [ 297.907799][ T9913] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 297.914855][ T4895] loop0: p185 start 335741103 is beyond EOD, truncated [ 297.930792][ T4895] loop0: p186 start 335741103 is beyond EOD, truncated [ 297.930940][ T9913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.938516][ T4895] loop0: p187 start 335741103 is beyond EOD, truncated [ 297.950536][ T9913] usb 4-1: Product: syz [ 297.953318][ T4895] loop0: p188 start 335741103 is beyond EOD, truncated [ 297.956647][ T9913] usb 4-1: Manufacturer: syz [ 297.956660][ T9913] usb 4-1: SerialNumber: syz [ 297.964741][ T4895] loop0: p189 start 335741103 is beyond EOD, truncated [ 297.980393][ T4895] loop0: p190 start 335741103 is beyond EOD, truncated [ 297.987349][ T4895] loop0: p191 start 335741103 is beyond EOD, truncated [ 297.994475][ T4895] loop0: p192 start 335741103 is beyond EOD, truncated [ 298.002580][ T4895] loop0: p193 start 335741103 is beyond EOD, truncated [ 298.008266][ T9913] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 298.009921][ T4895] loop0: p194 start 335741103 is beyond EOD, truncated [ 298.025124][ T4895] loop0: p195 start 335741103 is beyond EOD, truncated [ 298.032261][ T4895] loop0: p196 start 335741103 is beyond EOD, truncated [ 298.039301][ T4895] loop0: p197 start 335741103 is beyond EOD, truncated [ 298.046141][ T4895] loop0: p198 start 335741103 is beyond EOD, truncated [ 298.053046][ T4895] loop0: p199 start 335741103 is beyond EOD, truncated [ 298.059953][ T4895] loop0: p200 start 335741103 is beyond EOD, truncated [ 298.066791][ T4895] loop0: p201 start 335741103 is beyond EOD, truncated [ 298.073694][ T4895] loop0: p202 start 335741103 is beyond EOD, truncated [ 298.080724][ T4895] loop0: p203 start 335741103 is beyond EOD, truncated [ 298.089133][ T4895] loop0: p204 start 335741103 is beyond EOD, truncated [ 298.096008][ T4895] loop0: p205 start 335741103 is beyond EOD, truncated [ 298.103465][ T4895] loop0: p206 start 335741103 is beyond EOD, truncated [ 298.110448][ T4895] loop0: p207 start 335741103 is beyond EOD, truncated [ 298.117315][ T4895] loop0: p208 start 335741103 is beyond EOD, truncated [ 298.124429][ T4895] loop0: p209 start 335741103 is beyond EOD, truncated [ 298.131632][ T4895] loop0: p210 start 335741103 is beyond EOD, truncated [ 298.139055][ T4895] loop0: p211 start 335741103 is beyond EOD, truncated [ 298.145898][ T4895] loop0: p212 start 335741103 is beyond EOD, truncated [ 298.153842][ T4895] loop0: p213 start 335741103 is beyond EOD, truncated [ 298.161404][ T4895] loop0: p214 start 335741103 is beyond EOD, truncated [ 298.168841][ T4895] loop0: p215 start 335741103 is beyond EOD, truncated [ 298.175684][ T4895] loop0: p216 start 335741103 is beyond EOD, truncated [ 298.182771][ T4895] loop0: p217 start 335741103 is beyond EOD, truncated [ 298.190165][ T4895] loop0: p218 start 335741103 is beyond EOD, truncated [ 298.197037][ T4895] loop0: p219 start 335741103 is beyond EOD, truncated [ 298.204565][ T4895] loop0: p220 start 335741103 is beyond EOD, truncated [ 298.211957][ T4895] loop0: p221 start 335741103 is beyond EOD, truncated [ 298.219517][ T4895] loop0: p222 start 335741103 is beyond EOD, truncated [ 298.226429][ T4895] loop0: p223 start 335741103 is beyond EOD, truncated [ 298.233691][ T4895] loop0: p224 start 335741103 is beyond EOD, truncated [ 298.240609][ T4895] loop0: p225 start 335741103 is beyond EOD, truncated [ 298.247510][ T4895] loop0: p226 start 335741103 is beyond EOD, truncated [ 298.254393][ T4895] loop0: p227 start 335741103 is beyond EOD, truncated [ 298.261878][ T4895] loop0: p228 start 335741103 is beyond EOD, truncated [ 298.269284][ T4895] loop0: p229 start 335741103 is beyond EOD, truncated [ 298.276182][ T4895] loop0: p230 start 335741103 is beyond EOD, truncated [ 298.283348][ T4895] loop0: p231 start 335741103 is beyond EOD, truncated [ 298.290888][ T4895] loop0: p232 start 335741103 is beyond EOD, truncated [ 298.298360][ T4895] loop0: p233 start 335741103 is beyond EOD, truncated [ 298.305233][ T4895] loop0: p234 start 335741103 is beyond EOD, truncated [ 298.312377][ T4895] loop0: p235 start 335741103 is beyond EOD, truncated [ 298.322438][ T4895] loop0: p236 start 335741103 is beyond EOD, truncated [ 298.329495][ T4895] loop0: p237 start 335741103 is beyond EOD, truncated [ 298.336636][ T4895] loop0: p238 start 335741103 is beyond EOD, truncated [ 298.343582][ T4895] loop0: p239 start 335741103 is beyond EOD, truncated [ 298.350523][ T4895] loop0: p240 start 335741103 is beyond EOD, truncated [ 298.357384][ T4895] loop0: p241 start 335741103 is beyond EOD, truncated [ 298.364300][ T4895] loop0: p242 start 335741103 is beyond EOD, truncated [ 298.371244][ T4895] loop0: p243 start 335741103 is beyond EOD, truncated [ 298.378151][ T4895] loop0: p244 start 335741103 is beyond EOD, truncated 14:55:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000940)=0x80) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 14:55:32 executing program 5: syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="9f1934157d1976fd617910dc10175446e226", 0x12, 0x1ff}], 0x0, &(0x7f0000000380)={[], [{@fowner_lt={'fowner<'}}]}) 14:55:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000040)="200761d4816d961f86fd97c0fd85582d304ca1dbb90242a1b5095c53df6cfee1177c208105cac6c596f838fcb20d7d2ace458f727507fd6eee0455b283c57de1bd290df9c2a0fe8ac0bf171e47adbd86af0eef6a3987c32c339ca31602e96396ee8091651bc8cca9845230f54cd5c1e7b222ad7f4736303cb73a2f257befed66c64e434cc7af7300fd489bafb1ff64e157be3e2c0e7b0c80c9771fc05c2b26a89ae3f1744eed1454657b3302dfc616766e82223d97c7ff336cd1a1dc4e928e7bd51a55b1480fd67c79f807371ae0679f88ec8427f61d4bd8065bc205d92b3533f6a7ecba646ed271466854386cd4bdf1", 0xf0, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 14:55:32 executing program 1: socketpair(0x24, 0x0, 0x0, &(0x7f00000000c0)) 14:55:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) [ 298.385006][ T4895] loop0: p245 start 335741103 is beyond EOD, truncated [ 298.392755][ T4895] loop0: p246 start 335741103 is beyond EOD, truncated [ 298.399719][ T4895] loop0: p247 start 335741103 is beyond EOD, truncated [ 298.406565][ T4895] loop0: p248 start 335741103 is beyond EOD, truncated [ 298.413492][ T4895] loop0: p249 start 335741103 is beyond EOD, truncated [ 298.420558][ T4895] loop0: p250 start 335741103 is beyond EOD, truncated 14:55:32 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') 14:55:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 298.431220][ T4895] loop0: p251 start 335741103 is beyond EOD, truncated [ 298.438634][ T4895] loop0: p252 start 335741103 is beyond EOD, truncated [ 298.445948][ T4895] loop0: p253 start 335741103 is beyond EOD, truncated [ 298.452872][ T4895] loop0: p254 start 335741103 is beyond EOD, truncated [ 298.459791][ T4895] loop0: p255 start 335741103 is beyond EOD, truncated [ 298.587790][ T9913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 298.791554][T11043] udc-core: couldn't find an available UDC or it's busy [ 298.799555][T11043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 298.813530][ T9785] usb 4-1: USB disconnect, device number 6 [ 299.677729][ T9913] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 299.684723][ T9913] ath9k_htc: Failed to initialize the device [ 299.692395][ T9785] usb 4-1: ath9k_htc: USB layer deinitialized 14:55:34 executing program 3: init_module(&(0x7f0000000300)='\x9b{b\x86L\xef\a\xde\n\xa6\xdc\xeai\x04\a*\x91\xb65\x8c\xfbb\xbc\xb7\x11\x99=\xdc\x81\x81\xd7x\r,\xe2\x9c\xe1\xd5\x87\xa8\x0f]n\xf7g3E\x0391}JQ\xce\xe0\xfe\xcc\x16\xc8\xcb\xbc\xf4\x02\xb9$\xa6t/\x80^\xb5t\xed\xfc\x1a\r\v\xc5\x8f\x17\xff\xfcI\xcd3?](\xfcN\xe2?\xf1s_JGaI\xfd\x9c\xf4\x16\x8a', 0x68, 0x0) 14:55:34 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}, 0x48, 0xffffffffffffffff) 14:55:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0xf0}, 0x0) 14:55:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:34 executing program 5: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') 14:55:34 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/216, 0xd8) 14:55:34 executing program 4: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, 0x0) 14:55:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x40}, 0x40) 14:55:34 executing program 2: syz_emit_ethernet(0x76, &(0x7f0000000580)={@broadcast, @random="ba6bff18e869", @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x0, [{0x0, 0xd, "ad354bab3d2a9fe890bdcd"}, {0x0, 0xa, "4b251c62b413a65f"}, {0x0, 0x6, "3eff9dd0"}]}, @lsrr={0x83, 0xf, 0x0, [@local, @multicast2, @multicast1]}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:55:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, &(0x7f0000000280)) [ 300.105359][T11142] Module has invalid ELF header 14:55:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6f, 0x0, &(0x7f0000000280)) [ 300.128900][T11142] Module has invalid ELF header 14:55:34 executing program 4: select(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:55:34 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 14:55:34 executing program 3: syz_mount_image$ufs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'&]'}, {'/dev/mixer\x00'}, {'[{()(--]^(^){'}]}) 14:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x60000845) 14:55:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x141) 14:55:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x2, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0xc) 14:55:34 executing program 0: syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x204002, 0x0) 14:55:34 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x1) 14:55:34 executing program 2: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:55:34 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 14:55:34 executing program 3: shmget$private(0x0, 0x3000, 0xa186a6226826cd65, &(0x7f0000ffc000/0x3000)=nil) 14:55:34 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x1, 0x0, @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}, 0x48, 0xffffffffffffffff) 14:55:35 executing program 4: io_uring_setup(0x3d93, &(0x7f00000004c0)) 14:55:35 executing program 1: syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{0x0}], 0x0, &(0x7f0000000380)) 14:55:35 executing program 2: write$dsp(0xffffffffffffffff, 0x0, 0x0) 14:55:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xf0ff7f}}, 0x0) 14:55:35 executing program 0: clone3(&(0x7f0000000180)={0x10040a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 14:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 14:55:35 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) 14:55:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x21, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) 14:55:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) 14:55:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) 14:55:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x66, 0x0, &(0x7f0000000280)) 14:55:35 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) 14:55:35 executing program 3: socket(0x10, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1cf5, &(0x7f00000005c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm-monitor\x00', 0x594102, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm-monitor\x00', 0x600000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/dlm-monitor\x00', 0x40000, 0x0) 14:55:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x82, 0x0, &(0x7f0000000280)) 14:55:35 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 14:55:35 executing program 5: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xaf) 14:55:35 executing program 1: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="9f", 0x1}], 0x0, 0x0) 14:55:35 executing program 3: open$dir(&(0x7f0000000c40)='./file0\x00', 0x0, 0x0) 14:55:35 executing program 4: io_uring_setup(0x3d93, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x1}) 14:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000700)={&(0x7f0000000500), 0xc, &(0x7f00000006c0)={0x0}}, 0x44005) 14:55:35 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x101040) 14:55:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={0x0}}, 0x0) 14:55:35 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f000000f600)={""/29175}, 0x7200) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000016a40)='nl80211\x00') 14:55:35 executing program 5: r0 = epoll_create(0x100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x8000000c}) 14:55:35 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x86201, 0x0) 14:55:35 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, 0x0) 14:55:35 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940)='nl80211\x00') socket(0x2b, 0x0, 0x0) 14:55:36 executing program 3: clock_gettime(0x7, &(0x7f0000000240)) 14:55:36 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) 14:55:36 executing program 1: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x1f}, 0x0) 14:55:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:55:36 executing program 0: io_uring_setup(0x3d93, &(0x7f00000004c0)={0x0, 0x0, 0x20}) 14:55:36 executing program 2: sched_rr_get_interval(0x0, 0x0) getegid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x0, 0x6}]}) 14:55:36 executing program 4: io_setup(0x5, &(0x7f00000007c0)=0x0) r1 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 14:55:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x24}, 0x40) 14:55:36 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) 14:55:36 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000080)={0x1, 0x0, @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'}, 0x48, 0xffffffffffffffff) 14:55:36 executing program 5: recvfrom$phonet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 14:55:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x75, 0x0, &(0x7f0000000280)) 14:55:36 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000140), &(0x7f00000000c0), 0x0) 14:55:36 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x0) 14:55:36 executing program 1: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2}) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x124130) 14:55:36 executing program 0: socket(0x2c, 0x3, 0x40) 14:55:36 executing program 5: r0 = eventfd(0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 14:55:36 executing program 2: clone3(&(0x7f0000000180)={0x10040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:55:36 executing program 3: ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f0000000000)=0x7) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f00000000c0)) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000140)) socketpair(0x26, 0x1, 0x1, &(0x7f0000000180)) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000001c0)) syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', &(0x7f0000000240)='./file0\x00', 0x247a, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="9f1934157d1976fd617910dc10175446e226be6d4a6bad1dcfd8c44cbe78f7816f069ba402afdc1ef4740f287a0dd8eea11f7006d13616a5b9b82ceaf0549af52315fc5595b6", 0x46, 0x1ff}, {&(0x7f0000000300)="abaec5a6046bd3f3a0fe7d913f3df14f05960e77327c18e334d328b5", 0x1c, 0xffffffff}], 0x204002, &(0x7f0000000380)={[{'&]'}, {'/dev/mixer\x00'}, {'[{()(--]^(^){'}], [{@fowner_lt={'fowner<'}}]}) socket(0x1f, 0x1, 0x10001) open$dir(&(0x7f0000000c40)='./file0\x00', 0x511000, 0x40) 14:55:36 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') 14:55:36 executing program 4: syz_emit_ethernet(0xb6, &(0x7f0000000580)={@broadcast, @random="ba6bff18e869", @void, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0x10, "a56a878495db61d86b6845f74f42"}, @cipso={0x86, 0x67, 0x0, [{0x0, 0x9, "a547fd612a495d"}, {0x0, 0xb, "62fc32306b7402d1b3"}, {0x0, 0x10, "a409d945f64a38abab2c9ab04751"}, {0x0, 0x2}, {0x0, 0x10, "2e4faaafdd88e532ad3c851db6ee"}, {0x0, 0xc, "fec951ca7656a37f1f37"}, {0x0, 0xf, "5fedd55b9978719a720f7f2953"}, {0x0, 0x5, "0aa940"}, {0x0, 0xb, "997ac7f4b726b2dd34"}]}, @lsrr={0x83, 0x3}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:55:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1e, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x9c) 14:55:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:55:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000002c0), 0x4) 14:55:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x13, 0x0, &(0x7f0000000280)) 14:55:36 executing program 0: renameat2(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 14:55:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:55:36 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 302.587587][T11322] ufs: ufs was compiled with read-only support, can't be mounted as read-write 14:55:36 executing program 1: io_uring_setup(0x4007149, &(0x7f0000000340)) 14:55:36 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') 14:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0}, 0x0) [ 302.668027][T11335] snd_dummy snd_dummy.0: control 2:0:0:syz1:0 is already present [ 302.669503][T11337] ufs: ufs was compiled with read-only support, can't be mounted as read-write 14:55:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:55:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x74, 0x0, &(0x7f0000000280)) 14:55:36 executing program 5: get_mempolicy(0x0, &(0x7f0000000040), 0xffff, &(0x7f0000ffb000/0x3000)=nil, 0x3) 14:55:36 executing program 1: r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 14:55:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 302.766437][T11347] snd_dummy snd_dummy.0: control 2:0:0:syz1:0 is already present 14:55:37 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000080)) 14:55:37 executing program 5: syz_mount_image$ufs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{0x0}], 0x0, 0x0) 14:55:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 14:55:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x76, 0x0, &(0x7f0000000280)) 14:55:37 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x10c000, 0x0) 14:55:37 executing program 1: syz_mount_image$ufs(&(0x7f0000000200)='ufs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x204002, &(0x7f0000000380)={[{'&]'}]}) [ 302.950733][T11365] snd_dummy snd_dummy.0: control 2:0:0:syz1:0 is already present 14:55:37 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 14:55:37 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x113242, 0x0) 14:55:37 executing program 3: syz_emit_ethernet(0xb6, &(0x7f0000000580)={@broadcast, @random="ba6bff18e869", @void, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0x10, "a56a878495db61d86b6845f74f42"}, @cipso={0x86, 0x6d, 0x0, [{0x0, 0x9, "a547fd612a495d"}, {0x0, 0xb, "62fc32306b7402d1b3"}, {0x0, 0x10, "a409d945f64a38abab2c9ab04751"}, {0x0, 0x2}, {0x0, 0x10, "2e4faaafdd88e532ad3c851db6ee"}, {0x0, 0xc, "fec951ca7656a37f1f37"}, {0x0, 0xf, "5fedd55b9978719a720f7f2953"}, {0x0, 0x5, "0aa940"}, {0x0, 0xe, "997ac7f4b726b2dd3473405b"}, {0x0, 0x3, "06"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:55:37 executing program 0: syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x24ac00) 14:55:37 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm-monitor\x00', 0x600000, 0x0) 14:55:37 executing program 5: syz_emit_ethernet(0xe2, &(0x7f0000000580)={@broadcast, @random="ba6bff18e869", @void, {@ipv4={0x800, @tcp={{0x30, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1, {[@generic={0x0, 0x9, "a56a878495db61"}, @ra={0x94, 0x4}, @cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "ad354bab3d2a9fe890bdcd"}, {0x0, 0xa, "4b251c62b413a65f"}, {0x0, 0x9, "3eff9dd0913044"}]}, @lsrr={0x83, 0x1f, 0x0, [@local, @multicast2, @multicast1, @local, @remote, @multicast1, @private]}, @generic={0x0, 0x5, "5d3abf"}, @ssrr={0x89, 0x1f, 0x0, [@broadcast, @local, @private, @multicast1, @private, @private, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@local}, {@private}, {@remote}, {@private}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 303.152630][T11382] snd_dummy snd_dummy.0: control 2:0:0:syz1:0 is already present 14:55:37 executing program 4: io_uring_setup(0x0, &(0x7f00000004c0)) 14:55:37 executing program 5: move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000140), 0x0, 0x0) 14:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 14:55:37 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vfio/vfio\x00', 0x40000, 0x0) [ 303.245557][T11383] ufs: ufs was compiled with read-only support, can't be mounted as read-write 14:55:37 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) 14:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 14:55:37 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100), 0xfffffffffffffe44) 14:55:37 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0)='nl80211\x00') 14:55:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) [ 303.362907][T11383] ufs: ufs was compiled with read-only support, can't be mounted as read-write 14:55:37 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ocfs2_control\x00', 0x82802, 0x0) 14:55:37 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r0, 0x1264, 0x0) 14:55:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x57}}, 0x0) 14:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:55:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) 14:55:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1708}, 0x40) 14:55:37 executing program 1: socket(0x0, 0x80017, 0x0) 14:55:37 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xedd2640862509fda) 14:55:37 executing program 3: syz_io_uring_setup(0x49b8, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x6359, &(0x7f0000000140), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 14:55:37 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) 14:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x15, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}}, 0x0) 14:55:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x80002022, 0x0, 0x0) 14:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) 14:55:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:37 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:55:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xb2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00de0e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 14:55:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local}}}}) 14:55:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}}, 0x28}}, 0x0) 14:55:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@remote, 0x4003b}) [ 303.854865][T11459] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. [ 303.894436][T11467] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:38 executing program 5: mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x130, 0xffffffffffffffff, 0x0) 14:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x201, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 14:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 14:55:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf255300000008000300", @ANYRES32=r3], 0x28}}, 0x0) 14:55:38 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ece1f34004232202ff9f010203010902120001000004000904"], 0x0) 14:55:38 executing program 0: r0 = socket(0xa, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xf0ff7f) [ 304.221378][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.237942][ T3199] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.262534][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.569643][ T9814] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 304.648035][ T3199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.707996][ T3199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.725604][ T3199] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 304.745770][ T3199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.755858][ T3199] usb 4-1: config 0 descriptor?? [ 305.097888][ T9814] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=9f.ff [ 305.107510][ T9814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.115589][ T9814] usb 2-1: Product: syz [ 305.119869][ T9814] usb 2-1: Manufacturer: syz [ 305.124444][ T9814] usb 2-1: SerialNumber: syz [ 305.133200][ T9814] usb 2-1: config 0 descriptor?? [ 305.191333][ T9814] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 305.208650][ T9814] dvb-usb: bulk message failed: -22 (4/0) [ 305.214659][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 305.228514][ T9814] dvb-usb: bulk message failed: -22 (5/0) [ 305.234232][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 305.251105][ T3199] wacom 0003:056A:00B2.0001: unknown main item tag 0x0 [ 305.268989][ T9814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.285461][ T3199] wacom 0003:056A:00B2.0001: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 305.305848][ T3199] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B2.0001/input/input5 [ 305.324577][ T9814] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 305.333582][ T9814] usb 2-1: media controller created [ 305.352127][ T9814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.370770][ T3199] wacom 0003:056A:00B2.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.3-1/input0 [ 305.403974][ T9814] usb 2-1: selecting invalid altsetting 3 [ 305.424073][ T9814] ttusb2: set interface to alts=3 failed [ 305.454253][ T9814] DVB: Unable to find symbol tda10086_attach() [ 305.466144][ T9814] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 305.509157][ T9814] dvb-usb: bulk message failed: -22 (4/0) [ 305.515033][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 305.519618][ T9913] usb 4-1: USB disconnect, device number 8 [ 305.561185][ T9814] dvb-usb: bulk message failed: -22 (5/0) [ 305.569695][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 305.590404][ T9814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 305.606080][ T9814] usb 2-1: USB disconnect, device number 4 [ 305.646196][ T9814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 306.167926][ T9814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 306.327978][ T9913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 306.687924][ T9913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.699049][ T9913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.710385][ T9913] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.40 [ 306.720098][ T9913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.732738][ T9913] usb 4-1: config 0 descriptor?? [ 306.738338][ T9814] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=9f.ff [ 306.747410][ T9814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.760251][ T9814] usb 2-1: Product: syz [ 306.764416][ T9814] usb 2-1: Manufacturer: syz [ 306.771723][ T9814] usb 2-1: SerialNumber: syz [ 306.780648][ T9814] usb 2-1: config 0 descriptor?? 14:55:40 executing program 3: r0 = socket(0xa, 0x3, 0xa) accept4$alg(r0, 0x0, 0x0, 0x0) 14:55:40 executing program 5: r0 = socket(0xa, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:55:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xe01, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 306.829717][ T9814] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 306.838179][ T9814] dvb-usb: bulk message failed: -22 (4/0) [ 306.843907][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.854404][ T9814] dvb-usb: bulk message failed: -22 (5/0) [ 306.860450][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 306.873886][ T9814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.908152][ T9814] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 306.916398][ T9814] usb 2-1: media controller created [ 306.930392][ T9814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.945294][ T9814] usb 2-1: selecting invalid altsetting 3 14:55:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3, 0x7, 0x401}, 0x14}}, 0x0) 14:55:41 executing program 1: r0 = socket(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 306.974902][ T9814] ttusb2: set interface to alts=3 failed 14:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, 0xfffffffffffffffe, &(0x7f0000000000)) 14:55:41 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10012, r0, 0x0) 14:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0x28}, 0x1, 0x0, 0x5c6d}, 0x0) [ 307.038417][ T9913] usbhid 4-1:0.0: can't add hid device: -71 [ 307.044816][ T9913] usbhid: probe of 4-1:0.0 failed with error -71 [ 307.077530][ T9814] DVB: Unable to find symbol tda10086_attach() 14:55:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001"], 0x28}}, 0x0) [ 307.107888][ T9814] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 307.125871][ T9913] usb 4-1: USB disconnect, device number 9 14:55:41 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 14:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) 14:55:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xa, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 14:55:41 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x0) [ 307.158037][ T9814] dvb-usb: bulk message failed: -22 (4/0) [ 307.163962][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:41 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000005ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0xe8}], 0x1, 0x0) [ 307.240215][ T9814] dvb-usb: bulk message failed: -22 (5/0) 14:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf255300000008000300", @ANYRES32, @ANYBLOB="0c001900"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x10008004) 14:55:41 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "25e5b46f"}, 0x0, 0x0, @fd}) 14:55:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 14:55:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000002"], 0x28}}, 0x0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 307.300862][ T9814] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 307.332345][ T9814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. 14:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) [ 307.410858][ T9814] usb 2-1: USB disconnect, device number 5 14:55:41 executing program 5: io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f0000002700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:55:41 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={0x0}}, 0x0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) [ 307.492859][ T9814] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 307.505816][T11631] netlink: 'syz-executor.0': attribute type 25 has an invalid length. 14:55:41 executing program 1: socketpair(0x2, 0x1, 0x0, &(0x7f0000000280)) 14:55:41 executing program 3: r0 = socket(0xf, 0x3, 0x2) accept$alg(r0, 0x0, 0x0) [ 307.557381][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.593545][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 14:55:41 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 14:55:41 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x10e, 0x2, 0x0, 0x0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:41 executing program 5: r0 = socket(0xa, 0x3, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) 14:55:41 executing program 3: r0 = socket(0x1, 0x5, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 14:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x117}]]}, 0x1c}}, 0x0) 14:55:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000140)={'netpci0\x00', @ifru_hwaddr=@broadcast}) 14:55:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @void}}}, 0x14}}, 0x0) 14:55:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000001400018008000100", @ANYBLOB="0800030097"], 0x28}}, 0x0) 14:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:55:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES16=r0, @ANYBLOB="01"], 0x1c}}, 0x0) 14:55:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 14:55:42 executing program 5: r0 = socket(0xa, 0x3, 0xa) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 14:55:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 307.956459][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r0, 0x0, 0x0) 14:55:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b6700e74f00295457411f"], 0x28}}, 0x0) [ 308.022148][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:42 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 14:55:42 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getpeername(r0, 0xfffffffffffffffd, 0x0) 14:55:42 executing program 0: r0 = socket(0xa, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:55:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x37}}, 0x0) 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0x28}, 0x1, 0x0, 0x9effffff}, 0x0) 14:55:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01"], 0x1c}}, 0x0) 14:55:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x3}]]}, 0x1c}}, 0x0) 14:55:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01"], 0x1c}}, 0x0) 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[], 0x28}, 0x300}, 0x0) 14:55:42 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x13, r0, 0x0) 14:55:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a1040, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 14:55:42 executing program 1: r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 308.454102][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 14:55:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x28}}, 0x0) [ 308.524252][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010028bd70000000000027"], 0x1c}}, 0x0) 14:55:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14"], 0x28}}, 0x0) 14:55:42 executing program 0: syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000d40)={0xec4, 0x0, 0x0, 0x0, 0x7e1e, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac, {0x9}}, 0x3f, @void}}, @NL80211_ATTR_FRAME={0x2e1, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{}, {}, @broadcast}, @ver_80211n={0x0, 0x8, 0x1}}, 0x4240, 0x4f, @random=0x401, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x0, 0x0, {0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x6}}, [{0xdd, 0xe9, "1f117e760d6e7c5096b9776c425a39f40cc671a623faa4391e2f8d1b8a456b100b0a095b39544de8df29f1e97700fe8e81db84da44954ffc0d1de086b424dfa3a288c26577c66d0047d95247006f768d0cbd1e481e90fc5a7aa7c7da0087e6e4268ddfd3e78104625e1fb1bb87b0a5b8968353b3b51a62299f7ad8cb7c3f73f371a16ccb3cc973a1eb0927e80827f1060559de50bd9a61358475ddd90f4eb6fd9e2055d26d2f7c2f85a710239bbb5168cea3196fd77bb9601803985e7ac06773e92038f68156358507e748045fbbcf6fc9745788c010458ad72ee6c0dc338cc41a33ff4c5b20a1044f"}, {0xdd, 0x79, "529191275ba98a5804d430af84084c409b034ffff54a17f28ffa0af0aa2a7320a7d8bda5a359d801be99667d856fa53a60b54e89e9d48009249907db50ed6ccaf1861952dbacb255fbfcf860d783c04c1a434f9edab948d993005c52fd10da6c3ba7fc71b9a7695e4d35caa368dcd8e82dfb3f1f8f8fd40284"}, {0xdd, 0x79, "4b77177e21cad27c250357a89ca9d128cbd5d4acfae2a97e4f31715faa4b961d16fe68eedd665a4968b807adc827822a3e647b618e2732aa926aa21add0c742862d4b16c868cb5fe9fcc01e6ea1786c1e3abfa72218778e2dee3c4e3e16c9de7a6f0f2cdd208aaafc115979fecb6e6ed504fa83ca0097e1922"}, {0xdd, 0xbc, "ec318c2b89185be5c73e08404b2d5bc04137521e20ab50a36e47d545db6b91b2ff0504c82081260a41f7aaf902aecb82f8b46b97cd36cc52e7805134709486d6ac8a6c9b49425fbaca35978c5b13e23e57b9d649c78b14e9ee0107d1b0c3973bec055f862e1069e122cc6d20ecadf5e68622612b1842f4eb60f3a11c82381d76ccc986615ddf491b4366ef4be50036f8fc29dc479ed992a1c38ddbdd872f5e91fce991b152bcbf4cacf8702a59d40bb6f5f948a43bf6841c13bd0afc"}]}}, @NL80211_ATTR_FRAME={0xb98, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="fe44953d617e", {0xd, 0xb84}}, {0xe, 0x0, 0x0, 0x0, 0x20}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7fc1}, @broadcast, @random="2d3a737e163a", @from_mac=@broadcast, {0x7, 0x1}}, {0xb}}}, @a_msdu=[{@device_a, @device_b, 0xf, "1cb5e48f7b5105e571cb626a03a085"}, {@broadcast, @broadcast, 0x8b, "629cc41d9844755a39db1033460cd0021aa9d091f0d91f650a5a9104052d350aa38428dddfb6893984598df54a69341208da8ffc974be4a1ae9fb6514b46b41562c0c4102ec4a33b886ab43ed990a7dc79d9770f2443ce3cb33764d348b266e7a8d07cc6e996dfe3263c91391746bab5416165cc458f3fd79241c59562ac3bc96d9ad6669063d558dbaafa"}, {@device_b, @device_a, 0xa83, "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"}, {@broadcast, @device_b}]}}]}, 0xec4}}, 0x0) 14:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000040)={'bridge0\x00', @ifru_mtu}) 14:55:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:42 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "c879447afbeb8967d599aa8ff9871f74e9bb13558d641d8e6be3d16ce8a76aa63f8671528b593c8533775259e71a67cf0da589f48319ed90ab0569b779c0cfce"}, 0x48, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) 14:55:42 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local, @random="6d77ab7b6ef9", @val, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @mcast2, @multicast, @local}}}}, 0x0) 14:55:42 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:55:42 executing program 1: capset(&(0x7f0000000040)={0x20071026}, 0x0) 14:55:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@private2}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xfffffffffffffe3b) 14:55:42 executing program 5: waitid(0x2, 0x0, 0x0, 0x2, &(0x7f0000000000)) 14:55:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') 14:55:43 executing program 3: r0 = socket(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:55:43 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 14:55:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000016c0)=""/92, 0x5c}], 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00012963232a06d32a9acf461149c5da49cd85bbf6"], 0x1c}}, 0x0) 14:55:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 308.964508][T11783] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 14:55:43 executing program 3: io_setup(0x10000, &(0x7f0000000000)) io_setup(0x8000, &(0x7f0000000040)) 14:55:43 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f00000006c0)={&(0x7f0000000680), 0x8}) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e88812a36981413f10a086cd82e6000000000000009ce801de3493a418e88321cd6d5c852b909fd8e9ae76dec02ee76bd0055fb59b8d0afe6a0720f8bcce496a2a"}}}}}}}, 0x0) 14:55:43 executing program 5: openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90001, 0x0) pipe2(&(0x7f0000000040), 0x0) 14:55:43 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 309.158526][T11797] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:55:43 executing program 5: timer_create(0x3, 0x0, &(0x7f0000001140)) timer_gettime(0x0, &(0x7f0000001180)) 14:55:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 14:55:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x801}, 0x14}}, 0x0) 14:55:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e88812a36981413f10a086cd82e6000000000000009ce801de3493a418e88321cd6d5c852b909fd8e9ae76dec02ee76bd0055fb59b8d0afe6a0720f8bcce496a2a"}}}}}}}, 0x0) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000780)={'filter\x00'}, &(0x7f0000000580)=0x24) 14:55:43 executing program 2: timer_create(0x3, &(0x7f0000001100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001140)) 14:55:43 executing program 5: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000080)) 14:55:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e88812a36981413f10a086cd82e6000000000000009ce801de3493a418e88321cd6d5c852b909fd8e9ae76dec02ee76bd0055fb59b8d0afe6a0720f8bcce496a2a"}}}}}}}, 0x0) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000008700)={0x0, 0x0, &(0x7f00000086c0)={&(0x7f0000008640)={0x14, 0x2, 0x1, 0x5}, 0x14}}, 0x0) 14:55:43 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="c2", 0x1) 14:55:43 executing program 5: clock_gettime(0x1, &(0x7f0000000200)) 14:55:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x3b4, 0xffffffff, 0x0, 0x2d4, 0x124, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'gre0\x00', 'wlan0\x00'}, 0x0, 0xf4, 0x124, 0x0, {}, [@common=@icmp6={{0x24, 'icmp6\x00'}, {0x0, "e956"}}, @common=@inet=@l2tp={{0x2c, 'l2tp\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [], [], 'macvlan1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@private0}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x410) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e88812a36981413f10a086cd82e6000000000000009ce801de3493a418e88321cd6d5c852b909fd8e9ae76dec02ee76bd0055fb59b8d0afe6a0720f8bcce496a2a"}}}}}}}, 0x0) 14:55:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) 14:55:43 executing program 2: openat$zero(0xffffff9c, 0x0, 0x400040, 0x0) 14:55:43 executing program 5: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000740)=0x5a) set_mempolicy(0x0, &(0x7f0000000200), 0x56c4) 14:55:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="15000000120001fb"], 0x1c}}, 0x0) 14:55:43 executing program 1: r0 = add_key$keyring(&(0x7f0000001980)='keyring\x00', &(0x7f00000019c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "9bd42840324e7481f6d27753505c560ae0c3dc200ac2d1c74fb27e2e258c9fe925682351beccfe541963c6d69a30b59effae3aaf682d87c0d78cbeea69572faa"}, 0x48, r0) 14:55:44 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') 14:55:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 14:55:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 14:55:44 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e000003, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000002c0)) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) keyctl$chown(0x4, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}], 0x30, 0x800}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1040400, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfff, 0x10b382) r3 = dup(r0) sendmmsg$unix(r3, &(0x7f0000000140), 0x0, 0x20000004) r4 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) sendfile(r2, r2, 0x0, 0x24002d00) dup3(r4, r2, 0x0) 14:55:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 309.929682][T11868] __nla_validate_parse: 2 callbacks suppressed [ 309.929699][T11868] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.983081][T11868] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:44 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 14:55:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3e}}) 14:55:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 14:55:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:44 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001840)='children\x00') 14:55:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f00000016c0)=""/92, 0x5c}], 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0001"], 0x1c}}, 0x0) 14:55:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x6, 0x6, 0x201}, 0x14}}, 0x0) 14:55:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:44 executing program 5: request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev/loop#\x00', 0xfffffffffffffff9) 14:55:44 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') 14:55:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5}, {0x9}]}) 14:55:44 executing program 0: timerfd_create(0x4, 0x0) 14:55:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) 14:55:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@rand_addr, @local, @remote}, 0xc) 14:55:44 executing program 1: add_key$fscrypt_v1(&(0x7f0000000680)='logon\x00', &(0x7f00000006c0)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000700)={0x0, "81e5dff7cbf74b86c9833449343a1be98584c79d1616bfece1c4c8f1b72a85599e00fa241561c3549814b1728f7bb6c3a8b1ae0c4beb59c371dbdecacb30c888"}, 0x48, 0xfffffffffffffffc) 14:55:44 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000001780)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 14:55:44 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00') 14:55:44 executing program 0: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x80c83) 14:55:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) 14:55:44 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000340)) 14:55:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003980)={'erspan0\x00', 0x0}) 14:55:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) 14:55:44 executing program 2: r0 = openat$zero(0xffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x200000, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 14:55:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40, 0x0) 14:55:44 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000b00)={[0xa96]}, &(0x7f0000000b40), 0x8) 14:55:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 14:55:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000008700)={0x0, 0x0, &(0x7f00000086c0)={&(0x7f0000008640)={0x48, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_NAT_DST={0x4}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}]}]}, 0x48}}, 0x0) 14:55:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 14:55:45 executing program 2: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1492}) 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:55:45 executing program 1: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000180)) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 14:55:45 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') 14:55:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001a000129"], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 14:55:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/41, 0x29}], 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00012963232a06d32a9acf461149c5da49cd85bbf6"], 0x1c}}, 0x0) 14:55:45 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:55:45 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14:55:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="4b12fae6aa2c8df358a8cc0da0471f28ec5fe2bc53256ba252eb3493a8045891bb607436fa5f5aedcc33db8b1140df6562c64d6d7e0531b04a3f", 0x3a}, {&(0x7f0000003e00)}], 0x2, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_int={{0x14}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="8b", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 14:55:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmget(0x1, 0x2000, 0x80, &(0x7f00001a8000/0x2000)=nil) 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:55:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x28, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync\xa2_\x00lf\x044.\xab%'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x280000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3008c281}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ba3b7a10", @ANYRES16, @ANYBLOB="000029bd7000fedbdf25680000000c0099001f0000003a0000001800c700010609051f0504031f060401ee323b1a5cf095912600c7000203450c000001030207090500078602f801013f0e000000000000f88b834f061f5a00001200c700060616060103abe8ebf66199db2600002600c700090003e7d71f191dca1e60039f76510201040e36e1b61c22083a990dba070605ff800106"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8092) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001400)={0x0, 0x2, 0x0, 0x4, 0x8001, 0x7}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) 14:55:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='e', 0x1}], 0x1, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @empty}}}], 0x20}}], 0x1, 0x0) 14:55:45 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xa, r0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x81) preadv(r1, 0x0, 0x0, 0x5, 0x5b) 14:55:45 executing program 5: pipe(0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000140)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f", 0xf, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000000000)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410481, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f", 0x2}], 0x1, 0x0, 0x0) 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 311.501743][T11987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:55:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1, 0x0, 0x0, 0xa6ff8034}}], 0x1, 0x604d800) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 311.540082][T11994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 311.542369][T11989] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 14:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/26, 0x1a}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/146, 0x92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e00521) shutdown(r2, 0x0) shutdown(r3, 0x0) 14:55:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x3, 0xc, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @private=0xa010101}, 0x0, 0x8000, 0x3}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv2(r2, 0x0, 0x0, 0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003840)}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005100)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x39}}, 0x1c, &(0x7f0000006380)=[{0x0}, {0x0}, {&(0x7f0000006240)="87b43e9367f5fc9a267ec1a633cca78457fdce445e9bb813e1c9594fed93858dd49db1d6e684f28dccbc63517f1dbe96c4963195cdbce6ad8ecd75a264272600a6d75cb29161cf8d3e8fc11db035347f3c84348a082b6a7a3280a084cd5089b956", 0x61}, {&(0x7f00000062c0)="d612eb6499e9ba810b838fd63ed0e254155e59aa6108e66b75d8551820e2f01111dc511a54f3b8f6d5c4e7e0d0045809872801ebf51d13d4124f0d93a298d84a8546edc66d77f62cad5c832a14d3a0ab39c2d4bec45ed601b2670c6ea374c9375c008f71faef4b4294e206cfe2a1cdc91099f2f46607174febcc0677dfa3d5ed786e4596fb04766c17321d13e7b30c1ec4", 0x91}], 0x4}}, {{&(0x7f00000063c0)={0xa, 0x4e23, 0x8000, @mcast2, 0x4}, 0x1c, &(0x7f00000079c0)=[{0x0}, {0x0}, {&(0x7f0000007440)="ec3ef64136a2467763ecddc4678c001a5dfd9f7a32c2da63e4d42b42992e3232a5072d86ebe89bb92f3a72834b53dcc80aeef354471b00492c48c6635c3264549a6323f69f6747b5b45b880a173284738f97b711c9925f9b9e9576e1760c2da9e252a1d654a8a7bc140700fe0976a8a565da59b2ee9769cb1f118d25f807cef319e6e30aa9af354c6867ed0069cc217a744d619b4e1b48eda8c17390f5cd294ea89ecb2228b9e35d14366bea5f582e3725da4eb2c010954c96dbecc15f707de9f0320e74588ef83e32a5abd5c2ff7ac29fcc216fa272ecb003c21c6dc4c2751536a9d14f302d", 0xe6}, {&(0x7f0000007540)="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", 0xfe}, {&(0x7f0000007640)}, {&(0x7f00000076c0)="468f", 0x2}, {&(0x7f0000007880)="691ed396cf0a411c9f20e45964c90f554897c29580dcdaffff2b1e786b02040de324ce4258969c3ebb47c2e4c07e5adff5c8aeab3c2d4a4d63bbe654ef4ba2b2147f52b4d2f336707570f1eec6dab8249ba8863ff54269ede521bf6fee87768f1fc4da8d0a282ebd01b5b94c47a24bce3cf5443ee5ae5f178e2014da", 0x7c}], 0x7, &(0x7f0000008380)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x2e, 0x9, [], [@generic, @generic={0x0, 0x4b, "9052ea89188c9dc72840b2bcae2e8b6cf97d1216b4184cdb5033844855f6050ed3c94002a1e3460599071b01a7129e7cf7b3b78df8a1d9d77feab6c326079a8ae0c1d85925ca15f4317f27"}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x32, 0x1, [], [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x200}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x1, 0x0, 0x0, [@ipv4={[], [], @remote}, @mcast1]}}}], 0xc8}}, {{&(0x7f0000007d80)={0xa, 0x4e21, 0x80000000, @ipv4={[], [], @private=0xa010100}, 0x2}, 0x1c, &(0x7f0000007f80)=[{0x0}, {0x0}, {&(0x7f0000007f40)="70e8329e03865b", 0x7}], 0x3}}], 0x5, 0x400c001) r5 = socket(0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x20}}, 0x0) 14:55:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x28, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync\xa2_\x00lf\x044.\xab%'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x280000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3008c281}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ba3b7a10", @ANYRES16, @ANYBLOB="000029bd7000fedbdf25680000000c0099001f0000003a0000001800c700010609051f0504031f060401ee323b1a5cf095912600c7000203450c000001030207090500078602f801013f0e000000000000f88b834f061f5a00001200c700060616060103abe8ebf66199db2600002600c700090003e7d71f191dca1e60039f76510201040e36e1b61c22083a990dba070605ff800106"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8092) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001400)={0x0, 0x2, 0x0, 0x4, 0x8001, 0x7}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) 14:55:45 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) [ 311.729897][T11989] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 14:55:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:55:45 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400", 0x6, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000", 0x1a}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)={[{@dioread_lock='dioread_lock'}]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x40) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:55:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x28, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync\xa2_\x00lf\x044.\xab%'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x280000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3008c281}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ba3b7a10", @ANYRES16, @ANYBLOB="000029bd7000fedbdf25680000000c0099001f0000003a0000001800c700010609051f0504031f060401ee323b1a5cf095912600c7000203450c000001030207090500078602f801013f0e000000000000f88b834f061f5a00001200c700060616060103abe8ebf66199db2600002600c700090003e7d71f191dca1e60039f76510201040e36e1b61c22083a990dba070605ff800106"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8092) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001400)={0x0, 0x2, 0x0, 0x4, 0x8001, 0x7}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) [ 311.863456][T12008] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 311.893060][T12024] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 14:55:46 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) [ 311.951499][T12029] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:55:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 311.995138][T12026] gretap0: refused to change device tx_queue_len [ 312.011698][T12036] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 312.021412][T12026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 14:55:46 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) 14:55:46 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000800)={@empty, @remote}, 0xc) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000002c0)) pipe(0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x8cc0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000140)="0000000000000000000000000ac78aee630b40d9ae2efa3163fd2529010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f", 0xf, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012500)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000000000)="504d4d00504d4dff", 0x8, 0x40000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410481, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x911a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x7311, 0x20) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) 14:55:46 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = gettid() getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x28, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=0x1000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync\xa2_\x00lf\x044.\xab%'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x280000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3008c281}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ba3b7a10", @ANYRES16, @ANYBLOB="000029bd7000fedbdf25680000000c0099001f0000003a0000001800c700010609051f0504031f060401ee323b1a5cf095912600c7000203450c000001030207090500078602f801013f0e000000000000f88b834f061f5a00001200c700060616060103abe8ebf66199db2600002600c700090003e7d71f191dca1e60039f76510201040e36e1b61c22083a990dba070605ff800106"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8092) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001400)={0x0, 0x2, 0x0, 0x4, 0x8001, 0x7}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) [ 312.163135][T12043] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 312.171718][T12032] gretap0: refused to change device tx_queue_len [ 312.183902][T12032] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.210785][T12048] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 312.305701][T12049] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) [ 312.387767][T12054] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) [ 312.403206][T12060] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 312.415738][T12059] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 312.563096][T12061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 14:55:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(0x0, r4, 0xa, r0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x81) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x4) keyctl$negate(0xd, 0x0, 0x3, r1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x5b) 14:55:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:46 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) 14:55:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='projid_map\x00') write$FUSE_LSEEK(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f}}}}, [@NL80211_ATTR_VLAN_ID={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x410d}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6f6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x4004) 14:55:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400", 0x6, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000", 0x1a}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)={[{@dioread_lock='dioread_lock'}]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x40) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:55:46 executing program 3: clone(0x80008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@private2, @remote, @mcast2}) r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x2c0, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socket(0x0, 0x8000000000000003, 0x0) 14:55:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x400b, &(0x7f0000000040)) 14:55:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 312.819664][T12085] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 312.932571][T12087] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) 14:55:47 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400", 0x6, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000", 0x1a}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)={[{@dioread_lock='dioread_lock'}]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x40) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 313.081089][T12105] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 14:55:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000003c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000240)}, {&(0x7f00000004c0)="739a758f814e7775a562f64836b7cf5ee7d3d3c211cba461bf828cea636599a824fabc905c7df8b6390bfd5c0bb9ff9923ed0e92aacfc3208a9949aec11d9c0afe11e1a8d6c4277e40b16f775329de0f179b93dc120a3d333b91ef404720ffb04251ae7b196b5b8d341f2c462e7baedf4567f83719294ffb75c9d92a04dd71cef22fdfd6323604f4f3e11117041ad465867c5dbd6379ae5bd6d7e983856d55c7b5947d4affb8b84775436eb1a1beae01c50c175ac417fe397391426f09e2e37ef204ba26d4a664e62397b4f22fe85abf56", 0xd1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)}, {&(0x7f0000003e00)="9c03972b344507440700d649bb68c7e2f5a04d7a608a1978142426c7ab902ad354305c2956df670775663511dce44b1f3ef048ac148e158a525bc615f6d605b7e08e336e3017229a15eb8b4406fb046537a52b21c0d7ca3d3cacad1bea52a62b91d44e7487a0e62d1dd3d062682c29ceb6fcebb53b6e1ef8f5733c37854210d956123cfd5a8a9990e99d271c328b31c8144fe550e1eed8c38a8be683987e08bd10ef6079bbfd3aeb6287110aa8c8e1e6c61c774d6300d7f4adcf019465000000914139fcae8c9912d42cafae06a68784680d46838fbac0fe33134062bba44308014eb9abaf9c65349c2c11f2464efe59567597ce3de9c2240024fd4f56837c216ba339eb4c59c12ba3", 0x109}], 0x2, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @private=0xa010102}}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="8b", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 14:55:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(0x0, r4, 0xa, r0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x81) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x4) keyctl$negate(0xd, 0x0, 0x3, r1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x5b) 14:55:47 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)={[{@dioread_lock='dioread_lock'}]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x40) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) 14:55:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x400b, &(0x7f0000000040)) 14:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) [ 313.291343][T12116] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) 14:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:47 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400", 0x6, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000", 0x1a}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)={[{@dioread_lock='dioread_lock'}]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x40) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x400b, &(0x7f0000000040)) 14:55:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(0x0, r4, 0xa, r0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x81) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x4) keyctl$negate(0xd, 0x0, 0x3, r1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x5b) 14:55:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r2, &(0x7f0000001ac0), 0x1, 0x20008040) [ 313.493463][T12128] EXT4-fs error (device loop3): ext4_fill_super:4954: inode #2: comm syz-executor.3: iget: root inode unallocated [ 313.532190][T12128] EXT4-fs (loop3): get root inode failed [ 313.537885][T12128] EXT4-fs (loop3): mount failed 14:55:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(0x0, r4, 0xa, r0, 0x3) creat(&(0x7f0000000240)='./bus\x00', 0x81) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x4) keyctl$negate(0xd, 0x0, 0x3, r1) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x5b) [ 313.693539][T12130] EXT4-fs error (device loop3): ext4_fill_super:4954: inode #2: comm syz-executor.3: iget: root inode unallocated [ 313.743570][T12130] EXT4-fs (loop3): get root inode failed 14:55:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x400b, &(0x7f0000000040)) [ 313.811978][T12130] EXT4-fs (loop3): mount failed 14:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 14:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x24}}, 0x0) 14:55:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000001440)) [ 313.854422][T12156] EXT4-fs (loop5): fragment/cluster size (16384) != block size (1024) 14:55:48 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 14:55:48 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0) ioctl$int_out(r0, 0xc0481273, 0x0) 14:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:55:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x8, &(0x7f0000000b40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0x1}, @exit, @call, @alu], &(0x7f0000000b80)='syzkaller\x00', 0xad, 0x73, &(0x7f0000000bc0)=""/115, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x4, 0x2, 0x9}, 0x10}, 0x78) 14:55:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', 0x0}) 14:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:55:48 executing program 0: pipe2(&(0x7f0000001340), 0x0) 14:55:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) 14:55:48 executing program 2: syz_open_procfs(0x0, &(0x7f00000014c0)='attr/fscreate\x00') 14:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 14:55:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 14:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:55:48 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0) ioctl$int_out(r0, 0x127f, 0x0) 14:55:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x7, 0x3) 14:55:48 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f00000003c0)) [ 314.394928][T12187] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz-executor.3: bad orphan inode 17 [ 314.430892][T12187] ext4_test_bit(bit=16, block=4) = 0 [ 314.436571][T12187] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 314.446432][T12187] ext4 filesystem being mounted at /root/syzkaller-testdir697009916/syzkaller.obTnqC/105/file0 supports timestamps until 2038 (0x7fffffff) 14:55:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f00000003c0), 0x0) 14:55:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:55:48 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 14:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) 14:55:48 executing program 2: process_vm_readv(0x0, &(0x7f0000003440)=[{&(0x7f0000000000)=""/247, 0xf7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004540)=[{0x0}, {0x0}], 0x2, 0x0) 14:55:48 executing program 5: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x0, 0x0) 14:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 14:55:49 executing program 1: sysfs$2(0x2, 0x0, &(0x7f0000001780)=""/213) 14:55:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1, &(0x7f0000000b40)=@raw=[@call], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:49 executing program 4: socket$inet6(0xa, 0x80d, 0x0) 14:55:49 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) 14:55:49 executing program 5: sysfs$2(0x2, 0xab3, 0x0) [ 314.937000][T12238] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz-executor.3: bad orphan inode 17 [ 314.955278][T12238] ext4_test_bit(bit=16, block=4) = 0 [ 314.979043][T12238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 314.989651][T12238] ext4 filesystem being mounted at /root/syzkaller-testdir697009916/syzkaller.obTnqC/106/file0 supports timestamps until 2038 (0x7fffffff) 14:55:49 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x0, 0x0) ioctl$int_out(r0, 0x1275, 0x0) 14:55:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "b8a66429"}, &(0x7f0000000080)=0x28) 14:55:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7803f990"}, 0x0, 0x0, @userptr}) 14:55:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000000008010200000000000000000500000506000240890600000900010073797a310000000044000480080001400000007f080001400000000808000140000000040800014000000008080001400000003f080001400000000300000140000007960800014000000006050003"], 0x7c}}, 0x0) 14:55:49 executing program 4: add_key$fscrypt_v1(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'fscrypt:', @auto=[0x0, 0x31]}, &(0x7f0000000280)={0x0, "a01b9e0f6eb3c45a5c89d5710f0356e068ca1d8024a213b8020621d8a67a46f349acec566f80ca59e49b231352b6e93282c93710b7c44876c1846c79c2a25236"}, 0x48, 0xfffffffffffffffb) 14:55:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003540)="1cbfa063c67f55457284a1f3d21d6ec1", 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8904, &(0x7f0000000000)) [ 315.269615][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.406594][T12269] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz-executor.3: bad orphan inode 17 [ 315.447879][T12269] ext4_test_bit(bit=16, block=4) = 0 [ 315.455112][T12269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 14:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000c, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000e3310000000011000000b138543112eb43ac9dbc7e1411f64d55010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000000240)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000200)) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) 14:55:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x3c9, 0x0) 14:55:49 executing program 4: keyctl$KEYCTL_RESTRICT_KEYRING(0xc, 0x0, 0x0, 0x0) 14:55:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000100)) 14:55:49 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000002dc0)='romfs\x00', &(0x7f0000002e00)='./file0\x00', 0x0, 0x1, &(0x7f0000004240)=[{0x0}], 0x0, &(0x7f0000004400)={[], [{@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, 'sit0\x00'}}, {@fowner_lt={'fowner<', 0xee00}}]}) 14:55:49 executing program 2: setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 315.515299][T12269] ext4 filesystem being mounted at /root/syzkaller-testdir697009916/syzkaller.obTnqC/107/file0 supports timestamps until 2038 (0x7fffffff) 14:55:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 14:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x3c}]}, 0x1c}}, 0x0) 14:55:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x15, r0, 0x0, 0x0) 14:55:49 executing program 2: bpf$OBJ_GET_PROG(0x1a, 0x0, 0x0) 14:55:49 executing program 4: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 315.725725][T12293] romfs: Unknown parameter 'dont_measure' 14:55:49 executing program 0: r0 = openat$urandom(0xffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0xc0189436, &(0x7f0000000240)) [ 316.023690][T12302] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz-executor.3: bad orphan inode 17 [ 316.044909][T12321] netlink: 'syz-executor.1': attribute type 60 has an invalid length. [ 316.062635][T12302] ext4_test_bit(bit=16, block=4) = 0 14:55:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x894a, &(0x7f0000000000)) 14:55:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 14:55:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000100)) 14:55:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000700)=@tcp, 0x6}, 0x1c) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) 14:55:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 14:55:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0xc0045878, 0x0) [ 316.068887][T12327] netlink: 'syz-executor.1': attribute type 60 has an invalid length. [ 316.069383][T12302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 316.095383][T12302] ext4 filesystem being mounted at /root/syzkaller-testdir697009916/syzkaller.obTnqC/108/file0 supports timestamps until 2038 (0x7fffffff) 14:55:50 executing program 1: r0 = openat$urandom(0xffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0xfdfdffff}) 14:55:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "900c2e7a3b08be2ac48ce2f5aaea61679a11a5ee82435f5bc799664b71fdb3cd788a6d441cb53cfb51c98eb4ed6ac8d6ca65ab507490a857bc2ab0cb87b648ce"}, 0x48, r0) keyctl$setperm(0x5, r1, 0x0) 14:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 14:55:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7}}], 0x10}}], 0x1, 0x0) 14:55:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab002ebbc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) socket$inet_udp(0x2, 0x2, 0x0) 14:55:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee9}}, {0x3}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x5c}}, 0x0) 14:55:50 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, r0/1000+60000}}, 0x0) getitimer(0x1, &(0x7f0000000040)) 14:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000100)) 14:55:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000080)={0x0, "900c2e7a3b08be2ac48ce2f5aaea61679a11a5ee82435f5bc799664b71fdb3cd788a6d441cb53cfb51c98eb4ed6ac8d6ca65ab507490a857bc2ab0cb87b648ce"}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r1, 0x0, 0x0) 14:55:50 executing program 0: r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fcntl$getown(r0, 0x9) 14:55:50 executing program 3: pselect6(0x40, &(0x7f0000000100)={0x3}, 0x0, &(0x7f0000000180)={0x4}, &(0x7f00000001c0)={0x77359400}, 0x0) 14:55:50 executing program 1: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x2fa4, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x0, 0x196}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x50a, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x16d101) write$khugepaged_scan(r0, &(0x7f0000000240)='1000000\x00', 0x8) 14:55:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003540)="1cbfa063c67f55457284a1f3d21d6ec1", 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 14:55:50 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x501, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) 14:55:50 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x7, r0, 0x0, 0x0) 14:55:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000003540)="1cbfa063c67f55457284a1f3d21d6ec1", 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8903, &(0x7f0000000000)) 14:55:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 14:55:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000100)) 14:55:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:55:50 executing program 0: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 14:55:50 executing program 3: syz_mount_image$romfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000004240)=[{&(0x7f00000030c0)="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", 0xffd, 0x4}], 0x0, 0x0) 14:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@getlink={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) 14:55:50 executing program 4: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4) 14:55:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8943, &(0x7f0000000000)) 14:55:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x10, r0, 0x0, 0x0) 14:55:50 executing program 1: r0 = io_uring_setup(0x934, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 14:55:50 executing program 4: openat$vga_arbiter(0xffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x5aa9361635b838d, 0x0) 14:55:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) 14:55:51 executing program 2: socketpair(0x25, 0x3, 0x8, &(0x7f0000000000)) 14:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 14:55:51 executing program 3: r0 = openat$random(0xffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000100)) 14:55:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6c, 0x1}, 0x40) 14:55:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8910, &(0x7f0000000000)) 14:55:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000001c0)) 14:55:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x7, 0x1, [], "db"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "d946ad"}]}}, &(0x7f0000000840)=""/206, 0x36, 0xce, 0x1}, 0x20) 14:55:51 executing program 5: keyctl$KEYCTL_RESTRICT_KEYRING(0x6, 0x0, 0x0, 0x0) 14:55:51 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 14:55:51 executing program 0: r0 = openat$urandom(0xffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004101ed"]) 14:55:51 executing program 4: r0 = openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) 14:55:51 executing program 3: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 14:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000340)) 14:55:51 executing program 5: keyctl$KEYCTL_RESTRICT_KEYRING(0xe, 0x0, 0x0, 0x0) 14:55:51 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) connect$netlink(r0, &(0x7f0000000080), 0xfffffffffffffe83) 14:55:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x1000, 0x4) 14:55:51 executing program 3: add_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="93", 0x1, 0xfffffffffffffffe) 14:55:51 executing program 1: socket(0x28, 0x0, 0x36) 14:55:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x80, 0x4) 14:55:51 executing program 2: perf_event_open(&(0x7f0000001580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:55:51 executing program 1: modify_ldt$write(0x1, &(0x7f00000004c0), 0x10) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 14:56:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x6, r0, &(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:'}) 14:56:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 14:56:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x6, 0x4, 0x7, 0x104, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 14:56:00 executing program 5: r0 = openat$urandom(0xffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5460, 0x0) 14:56:00 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x0) ioctl$CHAR_RAW_SECTGET(0xffffffffffffffff, 0x1267, 0x0) accept4(r0, &(0x7f0000000080)=@in={0x2, 0x0, @private}, &(0x7f00000001c0)=0x80, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 14:56:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8983, &(0x7f0000000000)) 14:56:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000000c0)=@builtin='builtin_trusted\x00') 14:56:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c1", 0x1, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "6baa109b3a9a12ce25da50d3cfbea1bc9d1291b7f46f8b551be3b49c9950088cb065559caef8b08cdb52f1d13fb82531d5695fd8b76e6b929816a2fab3495dbd"}, 0x48, r0) keyctl$unlink(0x9, r1, r2) 14:56:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x14, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x40) 14:56:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x7a, 0x0) 14:56:00 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 14:56:00 executing program 3: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50081}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:56:00 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) 14:56:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0) 14:56:01 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) 14:56:01 executing program 3: getuid() clone(0xc009400, &(0x7f0000000080)="5e47557c33a4d6ab4a613e86eb585d7ec89ea8b8bda074c5c13ae900e5aab9b77b48e4252ccb14f0eb57fd4233956b0049399815fa10a103aa3bc7f61718bdb254cc6fd4d9a5ce9f271d7721b0ae03e98d3e537ec5ebe744ab91aac2efdb801cea0b68ad55813fa65b5ec7606064782170f9a4bf5b8be95151", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="62e42acebd080578726ba5d89edd2e80221b0793ed51d98ce78ce2cac480b01289da0162f7182b98f243c570f48c1e8fccd2e14e2ee5ca970754b81fdc9b5d7791f36e92a01cf79cd17dcd029bf382bea39eed7ed0bcf57f8318f1a951e46ab44eec1b5b5a9f7173c60b20ace4b227a0a85eb2aa2c03d79d80bada68dda677169b0dbf53cc0e550c132cea946ac60a6d2414ea35ce1616985e8954e7df6117757aee3e3238907e279ba811624ed18bc121266dc736a1661d5672ab56afbbe20efa087308a9") [ 327.092713][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.180815][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:56:01 executing program 2: syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x1f, 0x4201) 14:56:01 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) accept4(r0, &(0x7f0000000280)=@nfc, 0x0, 0x0) 14:56:01 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x1600bd5b, 0x0, &(0x7f0000000580)) 14:56:01 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x1}, &(0x7f0000000100), 0x0) 14:56:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x720d9a23c4147e1a) 14:56:01 executing program 1: add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x11a0000, 0xfffff, 0x0) 14:56:01 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xc0) 14:56:01 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x6503, 0x0) 14:56:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 14:56:01 executing program 0: clone(0xc009400, 0x0, 0x0, 0x0, &(0x7f0000000180)="62e42acebd080578726ba5d89edd2e80221b0793ed51d98ce78ce2cac480b01289da0162f7182b98f243c570f48c1e8fccd2e14e2ee5ca970754b81fdc9b5d7791f36e92a01cf79cd17dcd029bf382bea39eed7ed0bcf57f8318f1a951e46ab44eec1b5b5a9f7173c60b20ace4b227a0a85eb2aa2c03d79d80bada68dda677169b0dbf53cc0e550c132cea946ac60a6d2414ea35ce1616985e8954e7df6117757aee3e3238907e279ba811624ed18bc121266dc736a1661d5672ab56afbbe20efa087308a9") 14:56:01 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)) 14:56:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100), 0x4) 14:56:01 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 14:56:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x98000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="6fb8f56f7f56f770539a0c000000000000", 0x11, 0xf000}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10) gettid() bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 14:56:01 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 14:56:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) waitid$P_PIDFD(0x3, r2, &(0x7f0000000380), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 14:56:02 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x37, 0x0, &(0x7f0000000580)) 14:56:02 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000000c0)={0x10fc, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1002, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "eaa9fded1b30f167040b4fe7fd3fd5526ba580730fa50289d7edd002c07d665577f31d725e71a09504dd4f876ed8a49914d0d6aff6a24102f9fa5086e9b4f1e6758f56fece541202dbb3a8083ba9a2677616d51c2b39ccb0cbc62203000ef6c700774715507959f392afac410072a907e820377239204ddca9206a807a725a2e8e64f36dc86e6101e2c9a62955da02a5301563fdbcf9c7098ffbd3a16439d7963f422b2b0e18caaf5796a5de26d518ad17e5bffa99ee6bcd8892d2d269cf29868742f047142c2e4bcd4a3b837dfb0760dc612fd660f2d57aa6"}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x841}, 0x0) 14:56:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) 14:56:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 328.075012][T12590] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 14:56:02 executing program 1: mq_unlink(&(0x7f0000000200)='/dev/hwrng\x00') 14:56:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x200, 0x82) write$FUSE_ENTRY(r0, &(0x7f0000002280)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) 14:56:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x1, 0x0, 0x0) r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB]) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000002100)={{r0}, "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"}) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/974], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="00022dbd7000fc15a623ea12fddbdf250c0000000c00018008000171009ea0dff01ddc260258abd2740700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x4000800) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 14:56:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000100), 0x4) 14:56:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pause() add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, r0) 14:56:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x98000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="6fb8f56f7f56f770539a0c000000000000", 0x11, 0xf000}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10) gettid() bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 14:56:02 executing program 2: perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 329.614861][T12638] blk-mq: failed to allocate request map 14:56:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 14:56:04 executing program 0: syz_io_uring_setup(0x3b7f, &(0x7f00000003c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 14:56:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000000000000000f000", @ANYRES32=0x0, @ANYBLOB="060000000008000008001000", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) 14:56:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 14:56:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x98000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="6fb8f56f7f56f770539a0c000000000000", 0x11, 0xf000}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="9e2b53baf3af5a87386fe302bbf1206a30e38d160a42f56940f48bb09163fe7213eb13105687a29f3d2891159a44e1c391e27db10328e50692c736fa1bfd7a9c77bb5eb9fc519f900eb73dd1142e9fa5d6886ef26d27ade8114310289312e73053d6b36dfb48d6874f17eb5ab16d4068b710ba529cb9732e6dd1947cd980c596e15b6767a8005e87422d14d5f810468c08fe6f63027f79e225096778112b336bc54f0b20783a9fb24121f0d925648f08a0ac3ecdc0c96af72d36f13d981355a6bae02ecfdb39c9ccf52fd41276797d8a0453f87bf18f2c162debb661b257a20f446c0c4283df49017c2f76fa82e9a9787d84db94699404a2012fc839e644ba9f9e4eeca2"]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10) gettid() bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 14:56:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000002780)={&(0x7f0000000080)=@generic, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000380)=""/166, 0xa6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 347.624681][T12656] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 347.638040][T12656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 347.652521][T12656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.664861][T12656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:56:21 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0x8, 0x0, 0x0) [ 407.920568][T10347] Bluetooth: hci0: command 0x0406 tx timeout [ 407.926795][T10347] Bluetooth: hci1: command 0x0406 tx timeout [ 407.968995][T10347] Bluetooth: hci2: command 0x0406 tx timeout [ 407.985920][T10347] Bluetooth: hci3: command 0x0406 tx timeout [ 408.005868][T10347] Bluetooth: hci4: command 0x0406 tx timeout [ 408.028349][T10347] Bluetooth: hci5: command 0x0406 tx timeout [ 455.761134][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 455.768474][ C1] rcu: 1-....: (9644 ticks this GP) idle=18a/1/0x4000000000000000 softirq=18157/18158 fqs=4833 [ 455.779391][ C1] (t=10500 jiffies g=20989 q=708) [ 455.784476][ C1] NMI backtrace for cpu 1 [ 455.788805][ C1] CPU: 1 PID: 12626 Comm: syz-executor.3 Not tainted 5.10.0-rc7-syzkaller #0 [ 455.797546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.807574][ C1] Call Trace: [ 455.810830][ C1] [ 455.813682][ C1] dump_stack+0x107/0x163 [ 455.818008][ C1] nmi_cpu_backtrace.cold+0x44/0xd7 [ 455.823372][ C1] ? lapic_can_unplug_cpu+0x80/0x80 [ 455.828823][ C1] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 455.834790][ C1] rcu_dump_cpu_stacks+0x1e3/0x21e [ 455.839880][ C1] rcu_sched_clock_irq.cold+0x472/0xee8 [ 455.845423][ C1] ? rcutree_dead_cpu+0x40/0x40 [ 455.850246][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 455.855077][ C1] ? __raise_softirq_irqoff+0x93/0x1d0 [ 455.860512][ C1] update_process_times+0x77/0xd0 [ 455.865511][ C1] tick_sched_handle+0x9b/0x180 [ 455.870336][ C1] tick_sched_timer+0x1d1/0x2a0 [ 455.875162][ C1] ? can_stop_idle_tick+0x290/0x290 [ 455.880333][ C1] __hrtimer_run_queues+0x1ce/0xea0 [ 455.885514][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 455.891469][ C1] ? ktime_get_update_offsets_now+0x249/0x320 [ 455.897513][ C1] hrtimer_interrupt+0x334/0x940 [ 455.902436][ C1] __sysvec_apic_timer_interrupt+0x146/0x540 [ 455.908403][ C1] sysvec_apic_timer_interrupt+0x48/0x100 [ 455.914109][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 455.920062][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 [ 455.926449][ C1] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ca 3a 6e f8 48 89 ef e8 52 ef 6e f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 61 5b 63 f8 65 8b 05 8a 05 1a 77 85 c0 74 0a 5b [ 455.946032][ C1] RSP: 0018:ffffc90000d90e10 EFLAGS: 00000286 [ 455.952074][ C1] RAX: 000000000144f75e RBX: 0000000000000286 RCX: ffffffff8155a917 [ 455.960110][ C1] RDX: 0000000000000000 RSI: 0000000000000103 RDI: 0000000000000000 [ 455.968071][ C1] RBP: ffff8880b9f26900 R08: 0000000000000001 R09: ffffffff8ebaf677 [ 455.976019][ C1] R10: fffffbfff1d75ece R11: 0000000000000001 R12: ffff8880b9f26900 [ 455.984226][ C1] R13: ffff8880b9f26b80 R14: ffffffff850f3130 R15: dffffc0000000000 [ 455.992273][ C1] ? mac80211_hwsim_addr_match+0x180/0x180 [ 455.998062][ C1] ? mark_lock+0xf7/0x1730 [ 456.002459][ C1] __hrtimer_run_queues+0x5c0/0xea0 [ 456.007741][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 456.013708][ C1] ? ktime_get_update_offsets_now+0x249/0x320 [ 456.019750][ C1] hrtimer_run_softirq+0x17b/0x360 [ 456.024841][ C1] __do_softirq+0x2a0/0x9f6 [ 456.029338][ C1] asm_call_irq_on_stack+0xf/0x20 [ 456.034332][ C1] [ 456.037249][ C1] do_softirq_own_stack+0xaa/0xd0 [ 456.042249][ C1] irq_exit_rcu+0x132/0x200 [ 456.046743][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 456.052441][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 456.058653][ C1] RIP: 0010:lock_is_held_type+0xca/0x100 [ 456.064260][ C1] Code: 48 c7 c7 40 5f 4b 89 e8 d4 0b 00 00 b8 ff ff ff ff 65 0f c1 05 67 78 1c 77 83 f8 01 75 23 ff 34 24 9d 48 83 c4 08 44 89 e0 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 45 31 e4 eb c7 41 bc 01 00 00 00 eb [ 456.083924][ C1] RSP: 0018:ffffc9000184f690 EFLAGS: 00000286 [ 456.089964][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffffffff19d9c03 [ 456.097908][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 456.105853][ C1] RBP: ffffffff8b337820 R08: 0000000000000000 R09: ffffffff8cecae4f [ 456.113799][ C1] R10: fffffbfff19d95c9 R11: 0000000000000000 R12: 0000000000000000 [ 456.121759][ C1] R13: ffff8880216c2358 R14: 00000000ffffffff R15: ffff8880216c2380 [ 456.129741][ C1] rcu_read_lock_sched_held+0x3a/0x70 [ 456.135086][ C1] lock_release+0x5b7/0x710 [ 456.139587][ C1] ? unlock_page_memcg+0x9f/0x160 [ 456.144661][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 456.149487][ C1] ? __rcu_read_unlock+0x1d0/0x470 [ 456.154576][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 456.159755][ C1] unmap_page_range+0xe30/0x2640 [ 456.164679][ C1] ? vm_normal_page_pmd+0x510/0x510 [ 456.169849][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 456.174671][ C1] ? uprobe_munmap+0x1c/0x560 [ 456.179343][ C1] unmap_single_vma+0x198/0x300 [ 456.184184][ C1] unmap_vmas+0x168/0x2e0 [ 456.188488][ C1] ? zap_vma_ptes+0x100/0x100 [ 456.193141][ C1] ? preempt_schedule_common+0x59/0xc0 [ 456.198773][ C1] ? lru_add_drain+0x212/0x430 [ 456.203529][ C1] exit_mmap+0x2b1/0x530 [ 456.207765][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 456.213723][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 456.219364][ C1] ? kmem_cache_free+0x315/0x350 [ 456.224283][ C1] ? __khugepaged_exit+0x2d9/0x3f0 [ 456.229368][ C1] __mmput+0x122/0x470 [ 456.233414][ C1] mmput+0x53/0x60 [ 456.237109][ C1] do_exit+0xa72/0x29b0 [ 456.241244][ C1] ? irqtime_account_irq+0x17e/0x2d0 [ 456.246505][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 456.252039][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 456.257312][ C1] ? asm_sysvec_irq_work+0x12/0x20 [ 456.262405][ C1] do_group_exit+0x125/0x310 [ 456.266969][ C1] get_signal+0x42a/0x1f10 [ 456.271364][ C1] ? __do_sys_bpf+0x14bc/0x5180 [ 456.276188][ C1] ? __do_sys_bpf+0x45d/0x5180 [ 456.281015][ C1] arch_do_signal+0x82/0x2390 [ 456.285763][ C1] ? _copy_to_user+0xdc/0x150 [ 456.290414][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 456.295761][ C1] ? put_timespec64+0xcb/0x120 [ 456.300498][ C1] ? ns_to_timespec64+0xc0/0xc0 [ 456.305347][ C1] exit_to_user_mode_prepare+0x100/0x1a0 [ 456.311053][ C1] syscall_exit_to_user_mode+0x38/0x260 [ 456.316573][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 456.322438][ C1] RIP: 0033:0x45e0f9 [ 456.326301][ C1] Code: Unable to access opcode bytes at RIP 0x45e0cf. [ 456.333120][ C1] RSP: 002b:00007f6581781c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.341611][ C1] RAX: ffffffffffffffea RBX: 0000000000000003 RCX: 000000000045e0f9 [ 456.349570][ C1] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 456.357530][ C1] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 456.365476][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 456.373435][ C1] R13: 00007ffc35e1152f R14: 00007f65817829c0 R15: 000000000119bf8c