xc0045006, &(0x7f00000000c0)=0x4a000) 01:39:18 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x40101, 0x0) 01:39:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000780), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 01:39:18 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/dlm_plock\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) 01:39:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x74, 0x0, &(0x7f0000009e40)) 01:39:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000009a80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009b40)=0x9c) 01:39:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000ac0)=@phonet, 0x80) 01:39:18 executing program 0: mount$9p_fd(0x0, &(0x7f0000007b80)='./file0\x00', 0x0, 0x0, 0x0) 01:39:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x16, 0x0, &(0x7f0000009e40)) 01:39:18 executing program 1: socketpair(0x1, 0x0, 0x6, &(0x7f0000000240)) 01:39:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x14}, 0x14}}, 0x0) 01:39:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6, 0x0, &(0x7f0000009e40)) 01:39:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xc, 0x0, &(0x7f0000009e40)) 01:39:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80400, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040010) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xa}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00', 0xffffffffffffffff) r5 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000880)='ns/mnt\x00') ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000980)) 01:39:19 executing program 3: process_vm_writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, &(0x7f0000000780)=[{0x0}], 0x1, 0x0) 01:39:19 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3ffbaaf2"}, 0x0, 0x0, @planes=0x0}) 01:39:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 01:39:19 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x82040, 0x0) 01:39:19 executing program 4: io_setup(0x8, &(0x7f0000000840)) io_setup(0x7, &(0x7f0000000d40)) 01:39:19 executing program 2: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 01:39:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x2, &(0x7f0000001780)=@raw=[@map], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:39:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 01:39:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000bffa77"], 0x34}}, 0x0) 01:39:19 executing program 1: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="b1", 0x1, 0xbbed}], 0x0, 0x0) 01:39:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 01:39:19 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x189202, 0x0) 01:39:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80400, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x0, 0x70bd25, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}}, 0x4040010) syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00', 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000440)={0x3c, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00', 0xffffffffffffffff) fork() ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000640)) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/mnt\x00') 01:39:19 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000200)={0x0, "ffaf5a559ef76416b30344f9127e3115742eb639095aa34aeb7b77a3adf86265049f89343c68145b350ab6d451681ece4df76451429288935a5a9931148c80b1"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r0}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, 0x0, 0x0) 01:39:19 executing program 0: request_key(&(0x7f0000009640)='rxrpc_s\x00', &(0x7f0000009680)={'syz', 0x3}, 0x0, 0x0) [ 216.229779][T11935] loop1: detected capacity change from 0 to 187 01:39:19 executing program 5: request_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0) 01:39:19 executing program 5: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='-', 0x1, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, r0) [ 216.359203][T11935] loop1: detected capacity change from 0 to 187 01:39:19 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000200)="ac", 0x1) 01:39:19 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) 01:39:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='id_legacy\x00', 0x0) 01:39:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xf, 0x0, &(0x7f0000009e40)) 01:39:19 executing program 1: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/13) 01:39:19 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 01:39:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7a, 0x0, &(0x7f0000009e40)) 01:39:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, 0x0) 01:39:19 executing program 4: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0xbbed}], 0x0, 0x0) 01:39:20 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x4000, 0x0) 01:39:20 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00', 0xffffffffffffffff) 01:39:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00', r0) 01:39:20 executing program 1: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0xfffffffffffffdbd) 01:39:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, &(0x7f0000009e40)=0x300) [ 216.851427][T11981] loop4: detected capacity change from 0 to 187 01:39:20 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4800, 0x0) r1 = fork() clone3(&(0x7f0000002380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), {0x28}, &(0x7f0000000180)=""/99, 0x63, &(0x7f0000000200)=""/201, &(0x7f0000002340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0], 0x7, {r0}}, 0x58) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004780)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020}, 0x2020) 01:39:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000080)) 01:39:20 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x104000, 0x0) 01:39:20 executing program 5: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000200)={0x0, "ffaf5a559ef76416b30344f9127e3115742eb639095aa34aeb7b77a3adf86265049f89343c68145b350ab6d451681ece4df76451429288935a5a9931148c80b1"}, 0x48, 0xfffffffffffffffd) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) 01:39:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x73, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) 01:39:20 executing program 0: ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) 01:39:20 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:39:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040010) syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x40004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00', 0xffffffffffffffff) fork() ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000640)) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/mnt\x00') ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000980)) 01:39:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f00000000c0)=0x5b) 01:39:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0xd0) 01:39:20 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001e40), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001ec0), &(0x7f0000001f00)) 01:39:20 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000002440)='fou\x00', 0xffffffffffffffff) 01:39:20 executing program 2: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 01:39:20 executing program 1: ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0='bpq0\x00', 0x2, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340)='nl802154\x00', 0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x1, 0x1f9c3c4b, 0x0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0xfff}) 01:39:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) 01:39:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6f, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) 01:39:20 executing program 3: syz_mount_image$omfs(0x0, 0x0, 0xffffffffffff147b, 0x0, &(0x7f00000002c0), 0x0, 0x0) 01:39:20 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 01:39:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x75, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) [ 217.757182][T12043] binder: 12038:12043 ioctl c0145401 20000b00 returned -22 [ 217.773894][T12044] loop3: detected capacity change from 0 to 264192 [ 217.851918][T12052] binder: 12038:12052 ioctl c0145401 20000b00 returned -22 01:39:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xb, 0x0, &(0x7f0000009e40)) 01:39:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:39:21 executing program 3: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 217.901030][T12044] loop3: detected capacity change from 0 to 264192 01:39:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0) 01:39:21 executing program 2: process_vm_writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2, 0x0) 01:39:21 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000000)) 01:39:21 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, 0x1}) 01:39:21 executing program 0: bpf$BPF_PROG_QUERY(0x17, 0x0, 0x0) 01:39:21 executing program 3: io_uring_setup(0x324b, &(0x7f00000000c0)={0x0, 0x0, 0x4}) 01:39:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x9c) 01:39:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x2, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={r1}, &(0x7f0000000300)=0x14) 01:39:21 executing program 3: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_io_uring_setup(0x3c69, &(0x7f0000000580)={0x0, 0xb18f}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 01:39:21 executing program 0: syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) 01:39:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r0) 01:39:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) 01:39:21 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x1ff) 01:39:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000009b40)) 01:39:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1a, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) 01:39:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:39:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, &(0x7f0000009d80)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000009e40)=0x90) 01:39:21 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x82000000) 01:39:21 executing program 5: syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) 01:39:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x0, @private=0xa010100, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 01:39:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000380)=""/155, 0x26, 0x9b, 0x1}, 0x20) 01:39:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8) 01:39:22 executing program 1: syz_open_dev$vcsu(&(0x7f0000005000)='/dev/vcsu#\x00', 0x3, 0x141302) 01:39:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700)='l2tp\x00', 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x0, 0x0, 0x0) mq_notify(r0, &(0x7f00000042c0)) [ 218.818089][T12107] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:0 01:39:22 executing program 4: sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 01:39:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001700)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 01:39:22 executing program 3: syz_open_dev$vcsu(&(0x7f0000005000)='/dev/vcsu#\x00', 0x0, 0x1424c2) 01:39:22 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) 01:39:22 executing program 1: add_key$fscrypt_v1(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000002c0)={0x0, "7422b842bd3c25b980e8920003dfac681bf59be1a7fc83d3e86d2d252ad5ed4178dec611e6a302689692a72b7faf1aeb332b81867572a4d5f7a7469812ad44e9"}, 0x48, 0xffffffffffffffff) 01:39:22 executing program 5: syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x7602d72e, 0x600182) 01:39:22 executing program 4: add_key$keyring(&(0x7f00000095c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000009700)='cifs.idmap\x00', &(0x7f0000009740)={'syz', 0x1}, &(0x7f0000009780)="d756743dcf37accd0860758c44e77d0d7f8858a19e4aaeb093fc8ba6d719ffbc10", 0x21, 0xfffffffffffffffd) 01:39:22 executing program 2: syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x62814, &(0x7f0000000440)) 01:39:22 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x109000, 0x0) 01:39:22 executing program 3: io_setup(0x1, &(0x7f0000000200)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, 0x0) 01:39:22 executing program 5: clock_gettime(0x0, &(0x7f0000000100)={0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={r0}) 01:39:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1, "f2"}, &(0x7f0000000100)=0x9) 01:39:22 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000002780)) 01:39:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) 01:39:22 executing program 0: process_vm_writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)=""/222, 0xde}], 0x1, 0x0, 0x0, 0x0) 01:39:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$unlink(0x9, r2, r0) 01:39:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:39:22 executing program 4: syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000080)="b1", 0x1, 0xbbed}], 0x0, &(0x7f0000000300)) [ 219.605939][T12152] sctp: [Deprecated]: syz-executor.2 (pid 12152) Use of int in max_burst socket option deprecated. [ 219.605939][T12152] Use struct sctp_assoc_value instead 01:39:22 executing program 0: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000080)="25b1900b964d", 0x6}], 0x0, 0x0) 01:39:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 219.708914][T12159] loop4: detected capacity change from 0 to 187 01:39:23 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x0, 0x0) 01:39:23 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000700)) [ 219.776581][T12159] loop4: detected capacity change from 0 to 187 01:39:23 executing program 5: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f0000000100)="05", 0x1}, {&(0x7f00000000c0)="8c27", 0x2, 0x13ffffffffffff}, {&(0x7f0000000240)='x', 0x1}], 0x0, 0x0) 01:39:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000003140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1}, 0x90) 01:39:23 executing program 1: setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) 01:39:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10) 01:39:23 executing program 2: add_key$keyring(&(0x7f00000095c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000009640)='rxrpc_s\x00', &(0x7f0000009680)={'syz', 0x3}, &(0x7f00000096c0)='.\\\x00', 0x0) 01:39:23 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000006d40)='/dev/mISDNtimer\x00', 0x200080, 0x0) 01:39:23 executing program 1: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 01:39:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:39:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x18, 0x0, &(0x7f0000009e40)) [ 220.470113][T12200] loop5: detected capacity change from 0 to 81919 01:39:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x20401, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) 01:39:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6, 0x0, &(0x7f0000009e40)=0x300) 01:39:23 executing program 2: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) [ 220.639360][T12200] loop5: detected capacity change from 0 to 81919 01:39:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80400, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r2, 0x2, 0x70bd26, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000440)={0x3c, 0x2}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0)='devlink\x00', 0xffffffffffffffff) r5 = fork() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000800)) syz_open_procfs$namespace(r5, &(0x7f0000000880)='ns/mnt\x00') ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000980)) 01:39:24 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', 0x0) 01:39:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) 01:39:24 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:39:24 executing program 3: write$snapshot(0xffffffffffffffff, 0x0, 0x0) 01:39:24 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000680)='l2tp\x00', 0xffffffffffffffff) 01:39:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14}, 0x14}}, 0x0) 01:39:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x9c) 01:39:24 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000026c0)) 01:39:24 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0}, 0x20) 01:39:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x73, 0x0, &(0x7f0000009e40)) 01:39:24 executing program 2: io_uring_setup(0x14e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0xd8}) 01:39:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0), 0x14) 01:39:24 executing program 4: request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='(\x00', 0xfffffffffffffffd) 01:39:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x90) 01:39:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 01:39:24 executing program 1: add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 01:39:24 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 01:39:24 executing program 2: clone3(&(0x7f0000000440)={0x4044000, 0x0, 0x0, &(0x7f0000000240), {}, &(0x7f0000000280)=""/48, 0x30, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) 01:39:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1d, 0x0, &(0x7f0000009e40)) 01:39:24 executing program 0: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000001100)="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", 0x802, 0x7ff}], 0x0, 0x0) 01:39:24 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) 01:39:24 executing program 5: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000000100)="05", 0x1}, {&(0x7f00000000c0)="8c27", 0x2, 0x13ffffffffffff}], 0x0, 0x0) 01:39:24 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 01:39:25 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x62041, 0x0) [ 221.765204][T12277] loop0: detected capacity change from 0 to 8 01:39:25 executing program 2: connect$netlink(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 221.845311][T12283] loop5: detected capacity change from 0 to 81919 01:39:25 executing program 3: add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', 0x0, &(0x7f0000000200)={0x0, "ffaf5a559ef76416b30344f9127e3115742eb639095aa34aeb7b77a3adf86265049f89343c68145b350ab6d451681ece4df76451429288935a5a9931148c80b1"}, 0x48, 0xfffffffffffffffd) [ 221.889603][T12277] loop0: detected capacity change from 0 to 8 01:39:25 executing program 1: socketpair(0x1e, 0x0, 0x81, &(0x7f0000000000)) 01:39:25 executing program 0: select(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)) [ 222.004887][T12283] loop5: detected capacity change from 0 to 81919 01:39:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000), 0x9c) 01:39:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) 01:39:25 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc2, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdd, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x85, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x88, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf1, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 0: syz_mount_image$omfs(&(0x7f0000000000)='omfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[], [{@obj_type={'obj_type', 0x3d, '*^(*'}}]}) 01:39:25 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb2, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xcb, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)={[{@block={'block', 0x3d, 0x400}}]}) 01:39:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000500200000000025025", 0x59, 0x8800}], 0x0, &(0x7f0000000440)) 01:39:25 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf3, 0x0, &(0x7f00000000c0)) 01:39:25 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe0, 0x0, &(0x7f00000000c0)) 01:39:26 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008880)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}, {{&(0x7f0000003640)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003b40)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0x30}}], 0x2, 0x0) [ 222.720084][T12348] loop1: detected capacity change from 0 to 136 [ 222.736161][T12336] ISOFS: Unable to identify CD-ROM format. 01:39:26 executing program 2: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) fcntl$setstatus(r0, 0x4, 0x6800) pipe2(&(0x7f0000000380), 0x84800) syz_mount_image$gfs2(&(0x7f0000000400)='gfs2\x00', &(0x7f0000000440)='./file0\x00', 0x4, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000480)="2621e7ea28352dd7895bd41e9d1ea35815bd35fadda4bfc4d90acbdcd40ff6", 0x1f, 0xfffffffffffff800}], 0x60042, &(0x7f0000000500)={[{@spectator='spectator'}, {@noquota='noquota'}, {@data_writeback='data=writeback'}], [{@appraise='appraise'}]}) ftruncate(r0, 0xefb3) write$binfmt_script(r0, 0x0, 0xb) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x400, 0x100, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, r3}, 0xc) 01:39:26 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x94, 0x0, &(0x7f00000000c0)) [ 222.830197][T12348] isofs_fill_super: bread failed, dev=loop1, iso_blknum=34, block=68 [ 222.859594][T12336] ISOFS: Unable to identify CD-ROM format. [ 222.935134][T12348] loop1: detected capacity change from 0 to 136 [ 223.003865][T12348] isofs_fill_super: bread failed, dev=loop1, iso_blknum=34, block=68 01:39:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @generic={0x8a, 0xd, "892afa02265d7b6e35dff8"}]}}}], 0x20}}], 0x2, 0x0) [ 223.059504][T12371] loop2: detected capacity change from 0 to 16376 01:39:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000940400690094"], 0x18}}], 0x1, 0x0) 01:39:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008082) [ 223.314134][ T2934] block nbd4: Attempted send on invalid socket [ 223.321457][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}], 0x1, 0x0) [ 223.357459][ T2934] block nbd4: Attempted send on invalid socket [ 223.363819][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.387566][T12363] NILFS (nbd4): unable to read superblock 01:39:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x0, @private}, 0x10, 0x0, 0x400000000000000, &(0x7f00000033c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x18}}], 0x2, 0x0) 01:39:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}], 0x1, 0x200c8c4) [ 223.669821][ T2031] block nbd4: Attempted send on invalid socket [ 223.676248][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.703992][ T2934] block nbd4: Attempted send on invalid socket 01:39:26 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001006868660014000200080005"], 0x40}}, 0x0) 01:39:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xf, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}]}}}], 0x28}}], 0x1, 0x0) [ 223.710327][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.723183][T12391] NILFS (nbd4): unable to read superblock 01:39:27 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}], 0x1, 0x40854) [ 223.832104][T12399] loop2: detected capacity change from 0 to 16376 [ 223.911797][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 223.991883][ T2934] block nbd4: Attempted send on invalid socket [ 223.998154][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.029393][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 224.104042][ T2031] block nbd4: Attempted send on invalid socket [ 224.110905][ T2031] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.126561][T12408] NILFS (nbd4): unable to read superblock 01:39:27 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x1, 0x0, &(0x7f00000000c0)) 01:39:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x0, 0x2f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x44, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:39:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000033c0)=[@ip_retopts={{0x10, 0x0, 0x3}}], 0x10}}], 0x2, 0x0) 01:39:27 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdf, 0x0, &(0x7f00000000c0)) 01:39:27 executing program 3: io_setup(0xcf8, &(0x7f0000002b40)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 01:39:27 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:27 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 01:39:27 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:27 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9b, 0x0, &(0x7f00000000c0)) 01:39:27 executing program 3: set_mempolicy(0x1, &(0x7f0000000040)=0x9, 0x258b) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x6) [ 224.706294][ T2934] block nbd4: Attempted send on invalid socket [ 224.712690][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.735998][T12436] loop1: detected capacity change from 0 to 1 [ 224.739005][ T2031] block nbd4: Attempted send on invalid socket [ 224.748777][T12436] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 224.749041][ T2031] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.760098][T12436] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 224.781871][T12436] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 224.792615][T12436] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 224.798831][T12434] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 224.802507][T12436] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 224.802526][T12436] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector. [ 224.802543][T12436] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 224.832337][T12420] NILFS (nbd4): unable to read superblock [ 224.890105][T12436] loop1: detected capacity change from 0 to 1 01:39:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000070000009404400000101ff7"], 0x18}}], 0x1, 0x0) 01:39:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}}], 0x2, 0x0) [ 224.946131][T12436] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. 01:39:28 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 224.987408][T12436] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 225.011153][T12436] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. 01:39:28 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="428d056d4552d11d4884d0f21c8045ed949b3811286ef50a993ee29ef80961cde930624c83a3a28e53f46c8060c1571c2daefe56478b206d2566a852c5e1fd74e4aa7825af223e444c22d70a1ba7bf2d974c0d8945e830b8a4e623c93b1797854ed3c4736a41fd9f9d00f0bc7e90fd5033adc504fd99cdc585aea271b0a5dc8783bde9c3ca3408d93a67ad487f3d71670b0ac48fa8532945c46e0e58d08115a32f1ec351daf475d2c91c87d79a224c66542345d8c78308edd49cf4311cb6a5ea4e9269eb1a4df5cfebc5a5944b9611048bd5bca4034e7c54c0f1b3797e27efa885dbeaf419e2045573b59394620ff20c271b5bcdaf1569252d50d7f462ba3d046863bec08a3df7c2b22337d703ad95dc0e4f87558a75aadad917309ab01378b966b918fffb8bff7181ba9b633db17cf25614dedb848e2cb6aadf6cc5f5bb016610ec22baa3ae7de2a8112fd01e699f7e4c9b5cb07ca2ae89eb54e60508fee9dbdc3ff8382afef7f083781cec999e719a10ff776118f9e31ed56d6dd10dc14ce5a9e953040fd670da05ddbe0190540ec24b335710ed5b2f74b3a778a4dbef875c0ad3f33f8936b3a1771ce2226b8d8f47a5de29f1c33acf926dbb1cd9d0ee8eea797917140af020c72cb54a9550e3872e0a6f177c4c56ba3e26d0fe364115a0ef756ca0b8182f55134bb85a8353acd6f4cc0a51441df1c1cc", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @generic={0x8a, 0xd, "892afa02265d7b6e35dff8"}]}}}], 0x20}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x2, 0x0) 01:39:28 executing program 3: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@quota='quota'}]}) 01:39:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007000)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000023c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@loopback}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 01:39:28 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xeb, 0x0, &(0x7f00000000c0)) [ 225.290802][T12477] loop1: detected capacity change from 0 to 1 01:39:28 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:28 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, 0x0, &(0x7f00000000c0)) 01:39:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000033c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x5}]}}}], 0x18}}], 0x2, 0x0) 01:39:28 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 225.585412][ T2934] block nbd4: Attempted send on invalid socket [ 225.591747][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.618320][ T2934] block nbd4: Attempted send on invalid socket [ 225.625650][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 01:39:28 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) [ 225.665125][T12504] hpfs: hpfs_map_sector(): read error [ 225.689810][T12476] NILFS (nbd4): unable to read superblock 01:39:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(r0, 0x40047438, 0x0) [ 225.725362][T12506] loop1: detected capacity change from 0 to 1 [ 225.728036][T12488] XFS (loop3): Invalid superblock magic number 01:39:29 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:29 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="428d056d4552d11d4884d0f21c8045ed949b3811286ef50a993ee29ef80961cde930624c83a3a28e53f46c8060c1571c2daefe56478b206d2566a852c5e1fd74e4aa7825af223e444c22d70a1ba7bf2d974c0d8945e830b8a4e623c93b1797854ed3c4736a41fd9f9d00f0bc7e90fd5033adc504fd99cdc585aea271b0a5dc8783bde9c3ca3408d93a67ad487f3d71670b0ac48fa8532945c46e0e58d08115a32f1ec351daf475d2c91c87d79a224c66542345d8c78308edd49cf4311cb6a5ea4e9269eb1a4df5cfebc5a5944b9611048bd5bca4034e7c54c0f1b3797e27efa885dbeaf419e2045573b59394620ff20c271b5bcdaf1569252d50d7f462ba3d046863bec08a3df7c2b22337d703ad95dc0e4f87558a75aadad917309ab01378b966b918fffb8bff7181ba9b633db17cf25614dedb848e2cb6aadf6cc5f5bb016610ec22baa3ae7de2a8112fd01e699f7e4c9b5cb07ca2ae89eb54e60508fee9dbdc3ff8382afef7f083781cec999e719a10ff776118f9e31ed56d6dd10dc14ce5a9e953040fd670da05ddbe0190540ec24b335710ed5b2f74b3a778a4dbef875c0ad3f33f8936b3a1771ce2226b8d8f47a5de29f1c33acf926dbb1cd9d0ee8eea797917140af020c72cb54a9550e3872e0a6f177c4c56ba3e26d0fe364115a0ef756ca0b8182f55134bb85a8353acd6f4cc0a51441df1c1cc", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:29 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xae, 0x0, &(0x7f00000000c0)) [ 225.978052][T12522] hpfs: hpfs_map_sector(): read error [ 226.057166][T12533] loop1: detected capacity change from 0 to 1 [ 226.089610][T12549] NILFS (nbd4): unable to read superblock [ 226.101686][T12488] XFS (loop3): Invalid superblock magic number 01:39:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000033c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x2, 0x0) 01:39:29 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:29 executing program 1: syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="428d056d4552d11d4884d0f21c8045ed949b3811286ef50a993ee29ef80961cde930624c83a3a28e53f46c8060c1571c2daefe56478b206d2566a852c5e1fd74e4aa7825af223e444c22d70a1ba7bf2d974c0d8945e830b8a4e623c93b1797854ed3c4736a41fd9f9d00f0bc7e90fd5033adc504fd99cdc585aea271b0a5dc8783bde9c3ca3408d93a67ad487f3d71670b0ac48fa8532945c46e0e58d08115a32f1ec351daf475d2c91c87d79a224c66542345d8c78308edd49cf4311cb6a5ea4e9269eb1a4df5cfebc5a5944b9611048bd5bca4034e7c54c0f1b3797e27efa885dbeaf419e2045573b59394620ff20c271b5bcdaf1569252d50d7f462ba3d046863bec08a3df7c2b22337d703ad95dc0e4f87558a75aadad917309ab01378b966b918fffb8bff7181ba9b633db17cf25614dedb848e2cb6aadf6cc5f5bb016610ec22baa3ae7de2a8112fd01e699f7e4c9b5cb07ca2ae89eb54e60508fee9dbdc3ff8382afef7f083781cec999e719a10ff776118f9e31ed56d6dd10dc14ce5a9e953040fd670da05ddbe0190540ec24b335710ed5b2f74b3a778a4dbef875c0ad3f33f8936b3a1771ce2226b8d8f47a5de29f1c33acf926dbb1cd9d0ee8eea797917140af020c72cb54a9550e3872e0a6f177c4c56ba3e26d0fe364115a0ef756ca0b8182f55134bb85a8353acd6f4cc0a51441df1c1cc", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:39:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000010a00)="034344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000440)) 01:39:29 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 226.480988][T12570] loop5: detected capacity change from 0 to 136 [ 226.488811][T12574] loop1: detected capacity change from 0 to 1 [ 226.496756][T12571] NILFS (nbd4): unable to read superblock [ 226.504369][T12575] hpfs: hpfs_map_sector(): read error 01:39:29 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:29 executing program 0: unshare(0x40000000) socketpair(0x11, 0x0, 0xfff, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x2, 0xffffffffffffff49, [0x0, 0x20000700, 0x20000846, 0x20000876], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES32]}, 0x7c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x871, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'bond_slave_0\x00', {0xfffffffe}, 0x3}) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002240)="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", 0x617, 0x48010, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x100) [ 226.589540][T12570] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 01:39:29 executing program 1: syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:29 executing program 2: mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:29 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 226.658596][T12584] hpfs: hpfs_map_sector(): read error [ 226.665135][T12570] loop5: detected capacity change from 0 to 136 [ 226.696696][T12570] isofs_fill_super: bread failed, dev=loop5, iso_blknum=34, block=68 01:39:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 226.773919][T12591] NILFS (nbd3): unable to read superblock 01:39:30 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc5, 0x0, &(0x7f00000000c0)) [ 226.845309][T12596] IPVS: ftp: loaded support on port[0] = 21 [ 226.877270][T12599] loop1: detected capacity change from 0 to 1 01:39:30 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0x87, 0x0, &(0x7f00000000c0)) 01:39:30 executing program 2: mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:30 executing program 1: syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="428d056d4552d11d4884d0f21c8045ed949b3811286ef50a993ee29ef80961cde930624c83a3a28e53f46c8060c1571c2daefe56478b206d2566a852c5e1fd74e4aa7825af223e444c22d70a1ba7bf2d974c0d8945e830b8a4e623c93b1797854ed3c4736a41fd9f9d00f0bc7e90fd5033adc504fd99cdc585aea271b0a5dc8783bde9c3ca3408d93a67ad487f3d71670b0ac48fa8532945c46e0e58d08115a32f1ec351daf475d2c91c87d79a224c66542345d8c78308edd49cf4311cb6a5ea4e9269eb1a4df5cfebc5a5944b9611048bd5bca4034e7c54c0f1b3797e27efa885dbeaf419e2045573b59394620ff20c271b5bcdaf1569252d50d7f462ba3d046863bec08a3df7c2b22337d703ad95dc0e4f87558a75aadad917309ab01378b966b918fffb8bff7181ba9b633db17cf25614dedb848e2cb6aadf6cc5f5bb016610ec22baa3ae7de2a8112fd01e699f7e4c9b5cb07ca2ae89eb54e60508fee9dbdc3ff8382afef7f083781cec999e719a10ff776118f9e31ed56d6dd10dc14ce5a9e953040fd670da05ddbe0190540ec24b335710ed5b2f74b3a778a4dbef875c0ad3f33f8936b3a1771ce2226b8d8f47a5de29f1c33acf926dbb1cd9d0ee8eea797917140af020c72cb54a9550e3872e0a6f177c4c56ba3e26d0fe364115a0ef756ca0b8182f55134bb85a8353acd6f4cc0a51441df1c1cc", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 226.924081][T12607] NILFS (nbd4): unable to read superblock 01:39:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4840) 01:39:30 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 227.176144][T12634] loop1: detected capacity change from 0 to 1 01:39:30 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', 0x0, 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 227.372720][T12596] IPVS: ftp: loaded support on port[0] = 21 [ 227.454470][T12657] loop1: detected capacity change from 0 to 1 01:39:30 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000022c0)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff000}]}) 01:39:30 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000047c0)='802.15.4 MAC\x00', 0xffffffffffffffff) 01:39:30 executing program 3: futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) 01:39:30 executing program 2: mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:30 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:30 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', 0x0, 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:30 executing program 2: mkdir(0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 01:39:30 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ieee802154(&(0x7f00000047c0)='802.15.4 MAC\x00', 0xffffffffffffffff) 01:39:30 executing program 4: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 227.726994][T12682] loop1: detected capacity change from 0 to 1 01:39:31 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) getitimer(0x1, 0x0) 01:39:31 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', 0x0, 0x0, 0x1, &(0x7f0000002680)=[{&(0x7f0000000580)="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", 0x1f8, 0x8}], 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:31 executing program 2: mkdir(0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:31 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x11, r1, 0x8ecf000) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r2 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x20000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f88ec59acbc0413a1f84810000000f4bd6efb440e09000e000a000200000002800000161f", 0x2e}], 0x1}, 0x48800) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x4fcd0200, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 01:39:31 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x40) 01:39:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000005f00)={0x0, 0x3, &(0x7f0000005780)=@framed, &(0x7f0000005800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 228.099556][T12700] loop1: detected capacity change from 0 to 1 01:39:31 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:31 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 228.268068][T12718] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.303074][T12718] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.357289][T12718] bridge0: port 3(team0) entered blocking state [ 228.383849][T12718] bridge0: port 3(team0) entered disabled state [ 228.450833][T12718] device team0 entered promiscuous mode [ 228.471228][T12718] device team_slave_0 entered promiscuous mode [ 228.505268][T12718] device team_slave_1 entered promiscuous mode [ 228.547455][T12718] bridge0: port 3(team0) entered blocking state [ 228.554812][T12718] bridge0: port 3(team0) entered forwarding state [ 228.623751][T12718] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.640057][T12718] device team0 left promiscuous mode [ 228.659907][T12718] device team_slave_0 left promiscuous mode [ 228.674172][T12718] device team_slave_1 left promiscuous mode [ 228.697658][T12718] bridge0: port 3(team0) entered disabled state 01:39:32 executing program 2: mkdir(0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:32 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) [ 228.738856][T12727] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.739092][T12718] syz-executor.3 (12718) used greatest stack depth: 22704 bytes left [ 228.758026][T12727] bridge0: port 3(team0) entered blocking state [ 228.787819][T12727] bridge0: port 3(team0) entered disabled state [ 228.811370][T12727] device team0 entered promiscuous mode [ 228.828010][T12727] device team_slave_0 entered promiscuous mode [ 228.852146][T12727] device team_slave_1 entered promiscuous mode [ 228.876262][T12727] bridge0: port 3(team0) entered blocking state [ 228.882699][T12727] bridge0: port 3(team0) entered forwarding state 01:39:32 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:32 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 01:39:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:32 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x90000, 0x0) 01:39:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x4}, 0x24}}, 0x0) 01:39:32 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000059c0)='/dev/mISDNtimer\x00', 0x0, 0x0) 01:39:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:32 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:32 executing program 5: r0 = getpgid(0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000100)) 01:39:32 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00', 0xffffffffffffffff) 01:39:32 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:32 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:32 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, 0x0) 01:39:32 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio1\x00', 0x0, 0x0) 01:39:32 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:32 executing program 5: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240)='802.15.4 MAC\x00', 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:39:32 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/capi/capi20ncci\x00', 0x4400, 0x0) 01:39:32 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 229.714132][ T2934] nbd_handle_cmd: 12 callbacks suppressed [ 229.714156][ T2934] block nbd4: Attempted send on invalid socket [ 229.726393][ T2934] print_req_error: 12 callbacks suppressed [ 229.726409][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.748099][ T2031] block nbd4: Attempted send on invalid socket [ 229.754494][ T2031] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.767496][T12777] NILFS (nbd4): unable to read superblock 01:39:33 executing program 5: syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0x0, 0x0) 01:39:33 executing program 3: open_tree(0xffffffffffffffff, 0x0, 0x0) 01:39:33 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 01:39:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:33 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, 0x0) 01:39:33 executing program 0: syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x0) 01:39:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 01:39:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio1\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f0000000700)='/dev/dri/card#\x00', 0x7, 0x2201) [ 230.173934][ T2031] block nbd4: Attempted send on invalid socket [ 230.180296][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.194144][ T2031] block nbd4: Attempted send on invalid socket [ 230.200465][ T2031] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.213283][T12792] NILFS (nbd4): unable to read superblock 01:39:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:33 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x1e, &(0x7f0000000440)=@string={0x1e, 0x3, "742c61adb347bcb115a2282feb46509545670894310804e1b83473d9"}}]}) 01:39:33 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:33 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, 0x0) 01:39:33 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='hpfs\x00', 0x0, 0x0) 01:39:33 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x40}}}}}}}]}}, 0x0) 01:39:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) [ 230.596590][ T2031] block nbd4: Attempted send on invalid socket [ 230.603156][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.636431][ T2934] block nbd4: Attempted send on invalid socket [ 230.642837][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.658140][T12813] NILFS (nbd4): unable to read superblock 01:39:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 230.790400][ T9678] usb 6-1: new high-speed USB device number 4 using dummy_hcd 01:39:34 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) [ 230.887842][ T2031] block nbd4: Attempted send on invalid socket [ 230.894298][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.926176][ T2934] block nbd4: Attempted send on invalid socket 01:39:34 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}]}) [ 230.932626][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.972010][T12827] NILFS (nbd4): unable to read superblock [ 231.030381][ T9678] usb 6-1: Using ep0 maxpacket: 16 01:39:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000001cc0)={0x24, @short}, 0x14) 01:39:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 231.147484][T12832] __ntfs_error: 27 callbacks suppressed [ 231.147502][T12832] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 231.160226][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 231.163285][ T9678] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 231.178975][ T9678] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 231.189249][ T9678] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.231728][ T2031] block nbd4: Attempted send on invalid socket [ 231.237995][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.249902][ T2031] block nbd4: Attempted send on invalid socket [ 231.256281][ T2031] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.271833][T12838] NILFS (nbd4): unable to read superblock [ 231.350299][ T9678] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.379034][ T9678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:39:34 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}]}) [ 231.408240][ T9678] usb 6-1: Product: syz [ 231.412954][ T9678] usb 6-1: Manufacturer: ⱴ굡䞳놼ꈕ⼨䛫镐杅鐈࠱㒸 [ 231.430268][ T9678] usb 6-1: SerialNumber: syz [ 231.430956][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 231.568993][T12847] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 231.611160][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 231.624484][ T7] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 231.702898][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.770450][ T9678] usb 6-1: 0:2 : does not exist [ 231.807281][ T9678] usb 6-1: USB disconnect, device number 4 [ 231.951098][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.990337][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.036061][ T7] usb 4-1: Product: syz [ 232.061620][ T7] usb 4-1: Manufacturer: syz [ 232.080352][ T7] usb 4-1: SerialNumber: syz [ 232.450347][ T7] usb 4-1: 0:2 : does not exist [ 232.479827][ T7] usb 4-1: USB disconnect, device number 2 [ 232.487064][ T9666] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 232.750193][ T9666] usb 6-1: Using ep0 maxpacket: 16 [ 232.882384][ T9666] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 232.920441][ T9666] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 232.970109][ T9666] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.180570][ T9666] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.189663][ T9666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.198194][ T9732] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 233.248812][ T9666] usb 6-1: Product: syz [ 233.254089][ T9666] usb 6-1: Manufacturer: ⱴ굡䞳놼ꈕ⼨䛫镐杅鐈࠱㒸 [ 233.310148][ T9666] usb 6-1: SerialNumber: syz [ 233.490393][ T9732] usb 4-1: Using ep0 maxpacket: 16 01:39:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) 01:39:36 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:36 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:39:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, 0x0, 0x0, 0x0) [ 233.631191][ T9666] usb 6-1: 0:2 : does not exist [ 233.651365][ T9732] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 233.679763][ T9732] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 233.698880][ T9666] usb 6-1: USB disconnect, device number 5 [ 233.708477][T12895] NILFS (nbd4): unable to read superblock [ 233.756575][ T9732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 01:39:37 executing program 3: r0 = gettid() sched_setparam(r0, &(0x7f0000000100)) 01:39:37 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x36) 01:39:37 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}]}) 01:39:37 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:39:37 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000140)=@generic={0x5, 0x2, 0x39, "ca1cafe9", "09c471934081a24c380831bcd7e6bf73f0fa0980f0eaa7b9847d86335819d2bf1c68c44d5739086ee7470448b2c70a637532aaebb0c7877429"}) 01:39:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 234.140495][ T9732] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.143656][T12923] NILFS (nbd4): unable to read superblock [ 234.155455][T12925] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:37 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x34) [ 234.184938][ T9732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:39:37 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}]}) 01:39:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:37 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000380)='fscrypt-provisioning\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 01:39:37 executing program 2: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) [ 234.312384][ T9732] usb 4-1: can't set config #1, error -71 [ 234.352590][ T9732] usb 4-1: USB disconnect, device number 3 [ 234.380200][ T9678] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.521396][T12937] NILFS (nbd4): unable to read superblock 01:39:37 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0xe) 01:39:37 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}]}) [ 234.570786][T12946] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:37 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:38 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 01:39:38 executing program 2: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', r0) [ 234.785250][T12953] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 234.858310][ T2031] nbd_handle_cmd: 6 callbacks suppressed [ 234.858332][ T2031] block nbd4: Attempted send on invalid socket [ 234.871197][ T2031] print_req_error: 6 callbacks suppressed [ 234.871212][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.891111][ T2934] block nbd4: Attempted send on invalid socket [ 234.897596][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 234.910346][T12961] NILFS (nbd4): unable to read superblock [ 234.920481][ T9678] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.952182][ T9678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.007179][ T9678] usb 6-1: Product: syz [ 235.020729][ T9678] usb 6-1: Manufacturer: syz [ 235.035888][ T9678] usb 6-1: SerialNumber: syz [ 235.131697][ T9678] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.210113][ T9587] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.460292][ T9587] usb 4-1: Using ep0 maxpacket: 16 [ 235.601236][ T9587] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 235.640460][ T9587] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 235.686049][ T9587] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.821014][ T9678] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.971257][ T9587] usb 4-1: string descriptor 0 read error: -22 [ 235.977547][ T9587] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.004167][ T9587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.073438][ T9587] usb 4-1: 0:2 : does not exist [ 236.234343][ T9587] usb 6-1: USB disconnect, device number 6 [ 236.278691][ T20] usb 4-1: USB disconnect, device number 4 [ 236.880194][ T9678] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 236.888931][ T9678] ath9k_htc: Failed to initialize the device [ 236.920073][ T9587] usb 6-1: ath9k_htc: USB layer deinitialized [ 237.080210][ T4867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 237.290234][ T9587] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 237.320097][ T4867] usb 4-1: Using ep0 maxpacket: 16 01:39:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 01:39:40 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}]}) 01:39:40 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x1e) 01:39:40 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:40 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000140)=@generic={0x0, 0x0, 0x39, "ca1cafe9", "09c471934081a24c380831bcd7e6bf73f0fa0980f0eaa7b9847d86335819d2bf1c68c44d5739086ee7470448b2c70a637532aaebb0c7877429"}) [ 237.441037][ T4867] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 237.449794][ T4867] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 237.498737][T13000] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 237.524167][ T4867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 01:39:40 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x1d) [ 237.713925][ T2934] block nbd4: Attempted send on invalid socket [ 237.720661][ T2934] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.750087][ T2934] block nbd4: Attempted send on invalid socket 01:39:41 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 237.756327][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.771157][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.780232][ T4867] usb 4-1: string descriptor 0 read error: -22 [ 237.787452][ T4867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 01:39:41 executing program 0: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 237.812713][T13002] NILFS (nbd4): unable to read superblock [ 237.897447][ T4867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:39:41 executing program 3: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 01:39:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000340)=0xc) 01:39:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 238.001167][ T4867] usb 4-1: can't set config #1, error -71 [ 238.016031][ T4867] usb 4-1: USB disconnect, device number 5 [ 238.081391][T13024] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:41 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 238.180354][ T9666] usb 1-1: new high-speed USB device number 2 using dummy_hcd 01:39:41 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0) 01:39:41 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=@generic={0x5, 0x0, 0x0, "ca1cafe9"}) [ 238.302506][ T2031] block nbd4: Attempted send on invalid socket [ 238.308768][ T2031] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.348968][ T2934] block nbd4: Attempted send on invalid socket [ 238.355274][ T2934] blk_update_request: I/O error, dev nbd4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.368777][T13034] NILFS (nbd4): unable to read superblock [ 238.390174][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 01:39:41 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42d}}]}) [ 238.399257][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.416444][ T7] usb 3-1: Product: syz [ 238.425625][ T7] usb 3-1: Manufacturer: syz [ 238.437674][ T7] usb 3-1: SerialNumber: syz 01:39:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 238.463915][T13039] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 238.472624][ T9666] usb 1-1: Using ep0 maxpacket: 16 [ 238.492132][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.611107][ T9666] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.628455][ T9666] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.647275][ T9666] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.800342][ T9587] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 238.851397][ T9341] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 238.961146][ T9666] usb 1-1: string descriptor 0 read error: -22 [ 238.967471][ T9666] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.990297][ T9666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.050092][ T9587] usb 6-1: Using ep0 maxpacket: 16 [ 239.065642][ T9666] usb 1-1: 0:2 : does not exist [ 239.170427][ T9587] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 239.182715][ T9587] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 239.217716][ T9587] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.240964][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.271179][ T9666] usb 1-1: USB disconnect, device number 2 [ 239.461079][ T9341] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 239.474291][ T9341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.491701][ T9341] usb 4-1: Product: syz [ 239.501716][ T9341] usb 4-1: Manufacturer: syz [ 239.512392][ T9341] usb 4-1: SerialNumber: syz [ 239.571948][ T9341] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 239.600563][ T9587] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.609659][ T9587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.646832][ T9587] usb 6-1: Product: Э [ 239.660282][ T9587] usb 6-1: SerialNumber: syz [ 239.661721][ T9732] usb 3-1: USB disconnect, device number 4 [ 240.010162][ T9587] usb 6-1: 0:2 : does not exist [ 240.067424][ T9587] usb 6-1: USB disconnect, device number 8 [ 240.070095][ T3800] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.210091][ T9341] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 240.320190][ T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 240.327354][ T7] ath9k_htc: Failed to initialize the device [ 240.365042][ T9732] usb 3-1: ath9k_htc: USB layer deinitialized [ 240.410302][ T3800] usb 1-1: Using ep0 maxpacket: 16 [ 240.580867][ T3800] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 240.594007][ T3800] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 240.611974][ T3800] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.633107][ T9666] usb 4-1: USB disconnect, device number 6 [ 240.700004][ T9606] usb 6-1: new high-speed USB device number 9 using dummy_hcd 01:39:44 executing program 2: syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5}, @as_header={0x7, 0x24, 0x1, 0x80}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x3f}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x80, 0x7b, {0x7, 0x25, 0x1, 0x41, 0x7f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x0, 0x0, 0x4, "", "9c"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfff, 0x512, 0x7, "411151"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x73, 0x1, {0x7, 0x25, 0x1, 0x100, 0x40, 0x9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x0, 0x0, 0x1, 0x9, 0x0, 0x7}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42d}}]}) 01:39:44 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 240.789982][ T9732] usb 3-1: new high-speed USB device number 5 using dummy_hcd 01:39:44 executing program 0: pipe(&(0x7f0000000940)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 01:39:44 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0xf) [ 240.918852][T13110] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 240.927394][ T3800] usb 1-1: string descriptor 0 read error: -71 [ 240.939916][ T9606] usb 6-1: Using ep0 maxpacket: 16 [ 240.943733][ T3800] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 01:39:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 241.014505][ T3800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:39:44 executing program 0: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) 01:39:44 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 241.059977][ T9606] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 241.073613][ T9606] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 241.090333][ T3800] usb 1-1: can't set config #1, error -71 [ 241.106270][ T9606] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.121724][ T3800] usb 1-1: USB disconnect, device number 3 01:39:44 executing program 0: prctl$PR_GET_CHILD_SUBREAPER(0x16) [ 241.245304][T13134] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 241.290108][ T9341] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 241.297723][ T9341] ath9k_htc: Failed to initialize the device [ 241.336172][ T9666] usb 4-1: ath9k_htc: USB layer deinitialized [ 241.510321][ T9606] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.520177][ T9732] usb 3-1: device descriptor read/64, error -71 [ 241.520424][ T9606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.553057][ T9606] usb 6-1: Product: Э [ 241.564086][ T9606] usb 6-1: SerialNumber: syz [ 241.600018][ T9606] usb 6-1: can't set config #1, error -71 [ 241.607317][ T9606] usb 6-1: USB disconnect, device number 9 01:39:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xe04, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "bdac2f536796cd04381a633916a88060862e528680eb27c50a38d6a0c68b9bce009aad702750c9491c27ebaf5a837702c7a250069aa72a986ba1b2f16bf9cd939a7dc1b8dcb240413e6c7e01a092955461126f529d74f9549cc1bb849c3a4fc1493c44d0aa2ca2b882983e5a10534aa62952f7db7d7ad87a8de2294e1e4b25b6e59ca3a0574512fdbf43d37f8b776074e5516038de6560cc194509b8403d6976c973978a44cc6977e41bd4e86601188ee5c36fc74c1744a8d46703addc9d73b093e28d8bdc"}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "feed4a1eac1cfcc170fdbadf4dcead620ba0b0ec0712b27a453f6efd6b5fd70ac25de458b10eb15daaed1558867404aec7954f6337cde7f907209c66efda3a46df2662ca685fdd273530f502b558b68ee15b3ab06c857a0ed1fd163540b52c7072066712bb46860fbb353700a5d20369b26e031707606211cfd60a73fb2aabe6324e13106beb4fe763"}, @ETHTOOL_A_BITSET_VALUE={0xc9d, 0x4, "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"}]}]}, 0xec4}}, 0x0) 01:39:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:45 executing program 0: timer_create(0x73e7570cca223702, 0x0, &(0x7f0000000080)) [ 241.779946][ T9666] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 241.820260][ T9732] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.090542][ T9732] usb 3-1: Using ep0 maxpacket: 16 [ 242.330252][ T9732] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 242.339011][ T9732] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 242.368801][ T9732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.590214][ T9732] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.599538][ T9732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.617306][ T9732] usb 3-1: Product: Э [ 242.622484][ T9732] usb 3-1: Manufacturer: ఇ [ 242.627179][ T9732] usb 3-1: SerialNumber: syz [ 242.967649][ T9732] usb 3-1: 0:2 : does not exist [ 243.022692][ T9732] usb 3-1: USB disconnect, device number 6 [ 243.659794][ T9606] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.901331][ T9606] usb 3-1: Using ep0 maxpacket: 16 [ 244.099872][ T9606] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 244.108595][ T9606] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 244.120890][ T9606] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 01:39:47 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) sendfile(r2, r0, 0x0, 0x7) 01:39:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:39:47 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:47 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) 01:39:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) 01:39:47 executing program 3: io_setup(0x1, &(0x7f0000000100)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 244.289800][ T9606] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.298891][ T9606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.340205][ T9606] usb 3-1: Product: Э [ 244.354059][ T9606] usb 3-1: Manufacturer: ఇ [ 244.376436][ T9606] usb 3-1: SerialNumber: syz [ 244.420006][ T9606] usb 3-1: can't set config #1, error -71 [ 244.424462][T13196] ntfs: (device loop1): parse_options(): Unrecognized mount option . [ 244.446573][ T9606] usb 3-1: USB disconnect, device number 7 01:39:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 01:39:47 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) [ 244.515672][T13207] new mount options do not match the existing superblock, will be ignored 01:39:47 executing program 0: syz_mount_image$ocfs2(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x0) 01:39:47 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:47 executing program 3: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nodiscard='nodiscard'}, {@umask={'umask'}}]}) [ 244.624283][T13207] new mount options do not match the existing superblock, will be ignored 01:39:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x890, &(0x7f00000002c0)={[{@norecovery='norecovery'}, {@grpquota='grpquota'}, {@nobarrier='nobarrier'}]}) 01:39:48 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x400) 01:39:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000002080)) [ 244.764220][T13221] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:48 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) 01:39:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:39:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007980)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e000700000000000000000000810000", @ANYRES32=r2, @ANYRES32], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:39:48 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x1}}, 0x10) 01:39:48 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 244.972792][T13238] xfs: Unknown parameter 'nobarrier' [ 245.028190][T13238] xfs: Unknown parameter 'nobarrier' 01:39:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000004100)={0x10, 0x0, r2}, 0x10) [ 245.076929][T13248] tipc: Can't bind to reserved service type 1 [ 245.138016][T13256] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:48 executing program 2: open(&(0x7f0000000180)='./file0\x00', 0x40a42, 0x0) open(&(0x7f00000033c0)='./file0\x00', 0x0, 0x0) 01:39:48 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self\x00', 0x80240, 0x0) 01:39:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:39:48 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:48 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0xc6e83) [ 245.442578][ T37] audit: type=1804 audit(1617154788.684:3): pid=13271 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir757648436/syzkaller.Aq9lTf/161/file0" dev="sda1" ino=14410 res=1 errno=0 01:39:48 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT2(r0, 0x0, 0xfffffffffffffe3d) [ 245.502280][T13274] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:39:48 executing program 3: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xc00c0, 0x0) 01:39:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007980)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e000700000000000000000000810000", @ANYRES32=r2, @ANYRES32], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:39:49 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x90040, 0x0) lchown(&(0x7f0000005d40)='./file0\x00', 0x0, 0xffffffffffffffff) 01:39:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 01:39:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1}, 0xa0) 01:39:49 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 245.861630][T13295] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:49 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x108) 01:39:49 executing program 0: socket$tipc(0x1e, 0xefea528fdf383fef, 0x0) 01:39:49 executing program 4: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 01:39:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) 01:39:49 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10182, 0x0) 01:39:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007980)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e000700000000000000000000810000", @ANYRES32=r2, @ANYRES32], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:39:49 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001540)='overlay\x00', 0x0, &(0x7f0000001580)={[{@default_permissions='default_permissions'}, {@nfs_export_off='nfs_export=off'}]}) 01:39:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00', r0) [ 246.253366][T13315] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:49 executing program 2: syz_mount_image$qnx4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='rootfs\x00', 0x0, 0x0) 01:39:49 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:49 executing program 0: r0 = getpid() wait4(r0, 0x0, 0x0, 0x0) [ 246.434918][T13328] overlayfs: missing 'lowerdir' 01:39:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007980)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e000700000000000000000000810000", @ANYRES32=r2, @ANYRES32], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:39:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@norecovery='norecovery'}]}) 01:39:49 executing program 0: syz_mount_image$vxfs(&(0x7f0000000000)='vxfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000013c0)=[{0x0, 0x0, 0x985}], 0x0, &(0x7f0000001540)=ANY=[]) 01:39:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "d213356264f43af83532a50895f6e12e"}) [ 246.607011][T13334] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2276, 0x0) [ 246.753052][T13342] XFS (loop3): no-recovery mounts must be read-only. [ 246.810736][T13346] loop0: detected capacity change from 0 to 9 [ 246.845953][T13342] XFS (loop3): no-recovery mounts must be read-only. [ 246.853942][T13346] vxfs: WRONG superblock magic 00000000 at 1 [ 246.866166][T13346] vxfs: unable to read disk superblock at 8 [ 246.874027][T13346] vxfs: can't find superblock. [ 246.931598][T13346] loop0: detected capacity change from 0 to 9 [ 246.943270][T13346] vxfs: WRONG superblock magic 00000000 at 1 [ 246.949374][T13346] vxfs: unable to read disk superblock at 8 [ 246.984427][T13346] vxfs: can't find superblock. 01:39:50 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x218, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'bond0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "36c6b5ef8e3ac4dd6f80d2f7990633eb4f75026dc47fe9af068adeebf92c6fc2409cf5514f0fed54a16c474216d99dd887aa6a86a0e39558cad5367a279dee5b"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 01:39:50 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:50 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001540)='overlay\x00', 0x0, &(0x7f0000001580)={[{@default_permissions='default_permissions'}]}) 01:39:50 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x5e) 01:39:50 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xee00) 01:39:50 executing program 0: syz_mount_image$qnx4(&(0x7f0000000000)='qnx4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x18000, &(0x7f0000000340)) [ 247.320942][T13374] overlayfs: missing 'lowerdir' 01:39:50 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}]}}) [ 247.397313][T13376] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:50 executing program 5: io_setup(0x567e, &(0x7f0000000040)) [ 247.465727][T13384] x_tables: duplicate underflow at hook 2 01:39:50 executing program 3: clock_gettime(0x4, &(0x7f0000001980)) 01:39:50 executing program 4: io_setup(0xcf8, &(0x7f0000002b40)) io_setup(0x7, &(0x7f0000000380)=0x0) io_destroy(r0) [ 247.553763][T13388] 9pnet: Insufficient options for proto=fd 01:39:50 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:50 executing program 0: r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, 0x0) 01:39:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000002040)=0xffffffff) 01:39:50 executing program 3: r0 = open(&(0x7f00000033c0)='./file1\x00', 0x80042, 0x0) read$alg(r0, 0x0, 0x0) [ 247.757565][T13401] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:51 executing program 2: io_setup(0xcf8, &(0x7f0000002b40)=0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 01:39:51 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:51 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) 01:39:51 executing program 0: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000025c0)={[{@allocsize={'allocsize'}}]}) 01:39:51 executing program 4: modify_ldt$write(0x1, &(0x7f0000000080), 0x10) 01:39:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000025c0)={[{@ikeep='ikeep'}, {@logdev={'logdev', 0x3d, './file1'}}, {@allocsize={'allocsize'}}]}) 01:39:51 executing program 5: io_setup(0xcf8, &(0x7f0000002b40)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:39:51 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:51 executing program 2: io_setup(0xcf8, &(0x7f0000002b40)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x0, 0x3938700}) 01:39:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x46, 0x8, [0x0, 0x0]}) [ 248.128015][T13427] xfs: Bad value for 'allocsize' [ 248.178384][T13433] XFS: ikeep mount option is deprecated. [ 248.207757][T13433] xfs: Bad value for 'allocsize' [ 248.221146][T13427] xfs: Bad value for 'allocsize' 01:39:51 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:51 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001100)={&(0x7f0000000000)=@id, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000040)="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", 0x401}], 0x1}, 0xc0) 01:39:51 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004b00)={0x2020}, 0x2020) [ 248.297467][T13433] XFS: ikeep mount option is deprecated. [ 248.304943][T13433] xfs: Bad value for 'allocsize' 01:39:51 executing program 5: syz_mount_image$reiserfs(&(0x7f0000004680)='reiserfs\x00', &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000005d40)='./file0\x00', 0x0, 0xffffffffffffffff) 01:39:51 executing program 3: syz_mount_image$xfs(0x0, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:39:51 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='t']) 01:39:51 executing program 2: io_setup(0x6, &(0x7f0000000440)) io_setup(0xff, &(0x7f0000000680)) 01:39:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x4) 01:39:51 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:51 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x43) 01:39:51 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1}, 0xa0) write$FUSE_OPEN(r0, &(0x7f0000004340)={0x20, 0x0, r1}, 0x20) 01:39:51 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000080), 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 248.692857][T13476] 9pnet_virtio: no channels available for device ./file0 01:39:52 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180), 0x10) 01:39:52 executing program 3: open(&(0x7f00000005c0)='./file0\x00', 0x10d7c0, 0x0) 01:39:52 executing program 4: socket(0x2, 0x0, 0xe28) 01:39:52 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@show_sys_files_no='show_sys_files=no'}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='noquota,usrquota,errors=continue']) 01:39:52 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001540)='overlay\x00', 0x0, &(0x7f0000001580)={[{@default_permissions='default_permissions'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 01:39:52 executing program 2: syz_mount_image$qnx6(&(0x7f0000000000)='qnx6\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)={[], [{@fowner_lt={'fowner<', 0xee00}}]}) 01:39:52 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000004280)='./file0\x00', 0x0, 0x0) [ 249.038347][T13497] Mount JFS Failure: -22 [ 249.104717][T13497] jfs_mount failed w/return code = -22 01:39:52 executing program 4: syz_mount_image$ocfs2(&(0x7f0000000100)='ocfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x83ae33d33e8b0851, &(0x7f0000001800)) [ 249.171924][T13508] overlayfs: unrecognized mount option "fscontext=unconfined_u" or missing value [ 249.205960][T13497] Mount JFS Failure: -22 [ 249.216067][T13497] jfs_mount failed w/return code = -22 01:39:52 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 249.268323][T13514] qnx6: invalid mount options. 01:39:52 executing program 3: io_setup(0xcf8, &(0x7f0000002b40)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) [ 249.317960][T13514] qnx6: invalid mount options. 01:39:52 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x4000040) 01:39:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @private2, [], [], 'veth0_virt_wifi\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @mcast2, [], [], 'syz_tun\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 01:39:52 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:52 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x100000001}}]}}) 01:39:52 executing program 0: syz_mount_image$qnx4(0x0, &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000001e00)='./file0\x00', 0x14000, 0x0) 01:39:52 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee01) 01:39:52 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x64942) 01:39:52 executing program 4: io_setup(0xcf8, &(0x7f0000002b40)=0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002580)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10140, 0x0) [ 249.744934][T13544] __ntfs_error: 7 callbacks suppressed [ 249.744952][T13544] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x48) 01:39:53 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002740)) 01:39:53 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xc86, 0x32be40) 01:39:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)) 01:39:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) [ 250.032924][T13562] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:53 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)=""/98, 0x62) 01:39:53 executing program 5: socket(0x23, 0x0, 0x9) 01:39:53 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000']) 01:39:53 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="7d05640b6e1b8672129ac4bebff00424", 0x10, 0x0, 0x0, 0x0) 01:39:53 executing program 4: syz_mount_image$vxfs(&(0x7f0000000000)='vxfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)) 01:39:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000002040)) 01:39:53 executing program 5: timer_create(0x0, &(0x7f0000001180)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) [ 250.357796][T13580] fuseblk: Bad value for 'fd' [ 250.366940][T13583] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:53 executing program 5: select(0x40, &(0x7f00000020c0), 0x0, &(0x7f0000004380)={0xff}, &(0x7f00000043c0)={0x77359400}) 01:39:53 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000440)={[{@resize_auto='resize=auto'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 01:39:53 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:39:53 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) [ 250.482294][T13591] vxfs: WRONG superblock magic 00000000 at 1 [ 250.499177][T13591] vxfs: WRONG superblock magic 00000000 at 8 [ 250.514461][T13591] vxfs: can't find superblock. 01:39:53 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 250.587228][T13591] vxfs: WRONG superblock magic 00000000 at 1 [ 250.609369][T13591] vxfs: WRONG superblock magic 00000000 at 8 [ 250.615496][T13591] vxfs: can't find superblock. 01:39:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100)=ANY=[], 0x48) [ 250.661006][T13604] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:53 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40) [ 250.708379][T13612] 9pnet: Insufficient options for proto=fd [ 250.715575][T13608] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 01:39:54 executing program 4: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x0, 0x2011, r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/199, 0xc7}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x14}], 0x1, 0x0) 01:39:54 executing program 1: syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, &(0x7f0000002680), 0x0, &(0x7f0000002940)={[{@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}, {@fmask={'fmask'}}, {@gid={'gid'}}, {@errors_recover='errors=recover'}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@dmask={'dmask'}}]}) 01:39:54 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvme-fabrics\x00', 0x101101, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000500)={0x10}, 0x10) 01:39:54 executing program 0: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@qnoenforce='qnoenforce'}]}) 01:39:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@noquota='noquota'}]}) [ 250.950441][T13608] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 250.975675][T13624] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 251.017888][T13630] ntfs: (device loop1): parse_options(): Unrecognized mount option . 01:39:54 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 01:39:54 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001440)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 01:39:54 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000006b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x12e0000000}]) [ 251.164363][T13636] XFS (loop0): Invalid superblock magic number 01:39:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(r0, 0x0, 0x0, 0x0) 01:39:54 executing program 4: socket(0x1d, 0x0, 0x1ff) [ 251.277375][T13658] Mount JFS Failure: -22 01:39:54 executing program 2: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='noquota,usrquota,errors=c']) [ 251.356500][T13658] jfs_mount failed w/return code = -22 01:39:54 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000600)={[{@data_writeback='data=writeback'}]}) [ 251.440951][T13658] Mount JFS Failure: -22 [ 251.445762][T13658] jfs_mount failed w/return code = -22 01:39:54 executing program 1: io_setup(0xcf8, &(0x7f0000002b40)=0x0) io_submit(r0, 0x1, &(0x7f0000003e80)=[&(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:39:54 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='7\x00', 0x2) 01:39:54 executing program 3: syz_mount_image$reiserfs(&(0x7f0000004680)='reiserfs\x00', &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)) listxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)=""/98, 0x62) 01:39:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 251.613967][T13693] JFS: c is an invalid error handler [ 251.615058][T13691] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 251.721984][T13691] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 251.740715][T13693] JFS: c is an invalid error handler 01:39:55 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000006b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 01:39:55 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x14000062) 01:39:55 executing program 0: syz_mount_image$xfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}]}) 01:39:55 executing program 3: syz_mount_image$jfs(&(0x7f00000004c0)='jfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000008200)=ANY=[@ANYBLOB='integrity,resize=']) 01:39:55 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:39:55 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000006b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 252.045809][T13726] jfs: Unrecognized mount option "resize=" or missing value [ 252.053336][T13725] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 01:39:55 executing program 2: timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f00000000c0)) 01:39:55 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3}, 0x10) [ 252.122174][T13726] jfs: Unrecognized mount option "resize=" or missing value [ 252.131104][T13725] overlayfs: missing 'lowerdir' 01:39:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004b00)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$reiserfs(&(0x7f0000004680)='reiserfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1}, 0xa0) 01:39:55 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={[{@norecovery='norecovery'}, {@grpquota='grpquota'}, {@nobarrier='nobarrier'}]}) 01:39:55 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockname(r0, 0x0, 0x0) [ 252.393451][T13748] xfs: Unknown parameter 'nobarrier' [ 252.471831][T13748] xfs: Unknown parameter 'nobarrier' 01:39:55 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=virtio,', {[{@noextend='noextend'}]}}) 01:39:55 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x40642) 01:39:55 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000006b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 01:39:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004ac0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000002040)={0x60}, 0xffffff2e) 01:39:55 executing program 3: syz_mount_image$efs(&(0x7f0000000000)='efs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001140), 0x107000, &(0x7f0000001180)) 01:39:55 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000300)='./file0\x00', 0x0) 01:39:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000012900)="20000000000000000000000000000000d4f4655f00"/32, 0x20, 0x4880}, {&(0x7f0000012a00)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040", 0x3d, 0x4c00}, {0x0}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x40000}], 0x0, &(0x7f0000014a00)) 01:39:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:39:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}], 0x2, 0x0) syncfs(0xffffffffffffffff) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) unlink(0x0) write(0xffffffffffffffff, 0x0, 0x0) 01:39:56 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000006b40)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 01:39:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = dup(r0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @dev}, 0x10) 01:39:56 executing program 5: io_setup(0xcf8, &(0x7f0000002b40)=0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 252.959429][T13781] loop4: detected capacity change from 0 to 4096 [ 253.128103][T13781] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 01:39:56 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xc) [ 253.187572][T13795] device wlan1 entered promiscuous mode [ 253.244398][T13787] device wlan1 left promiscuous mode 01:39:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 01:39:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$char_raw(r0, &(0x7f0000008a40)=ANY=[], 0x8800) [ 253.321332][T13795] device wlan1 entered promiscuous mode 01:39:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 253.384648][T13795] device wlan1 left promiscuous mode 01:39:56 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') 01:39:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x5609, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:39:56 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x2, [@ptr, @const, @ptr, @const, @func_proto, @restrict, @array, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @var]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) 01:39:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x3fe}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xd45f}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1b}, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xcf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100), 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000340)="b1ed83a955132deee4d6f0db5af3a1405028335457cccd3fbc9b16388642cf0c3fa0d096f89738883dff697e5cb4606f9d4c427fc0573e7df1741f01e4f90168e1c39d0205ee0028d672e690942c2e26e8c8326292232d4db703e1b4bb748c00933598010bcc2bfb4f5f52a95509e7331f5711a6b940ff286d04330f854fbfd5bdc84a80fbac57c504b37b5c3f5e4d", 0x8f, 0x80, 0x0, 0x0) 01:39:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 01:39:57 executing program 5: setresuid(0x0, 0xee00, 0x0) 01:39:57 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/psched\x00') syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fd/4\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 01:39:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="0a9b95d1c4df4524d4118af0bc7ef1319c27698f00ea8c65fd5d5751de7f2557a13f602553847927cfa0672472dc606b054c3e74d35d651ebfda8be3ff11705912b91d9284c72659d3eacf4e82c5d67b868ea57d4ae39294ff95bd668215647f0e696ce7532dddf497f3748a5f57f449fb798504fef6e75c40770297030260a55e462bda334deb06a2e235166a3a38511d679fb289ecb195bf2e68fb12a946366040d5af34f1630ecc33086d082cab930fb26e2c19e9fb8587199346dfc67c15016dedf4c19d68f970bf60badebdd01e3a53efb13de3ef347c29f5e6cf374df021a1e4b709d7486dd0cf06f4a842ead057", 0xf1}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14}}, @mark={{0x14}}], 0x30}}], 0x1, 0x0) 01:39:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@phonet, 0x80) 01:39:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 01:39:57 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0x7) 01:39:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:39:57 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000500)=ANY=[], 0x1c) sendfile(r0, r0, &(0x7f0000000080), 0x1000ffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 01:39:57 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fd/4\x00') 01:39:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000010fc0)=[{{&(0x7f0000008b80)=@pptp, 0x80, &(0x7f000000af40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 01:39:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0xe2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14}}, @mark={{0x14}}], 0x30}}], 0x1, 0x0) 01:39:57 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0xc0, 0x0) 01:39:58 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/psched\x00') syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fd/4\x00') read$FUSE(r0, 0x0, 0x0) 01:39:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') read$FUSE(r0, 0x0, 0x0) 01:39:58 executing program 5: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x802, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 01:39:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xaa) getuid() getuid() socketpair(0x2, 0xa, 0x6, 0x0) 01:39:58 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 01:39:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xffffffffffffff65, &(0x7f0000000280)={&(0x7f0000000200)={0x50}, 0x50}}, 0x0) [ 255.520078][ T3244] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.526711][ T3244] ieee802154 phy1 wpan1: encryption failed: -22 01:39:58 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:39:58 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) 01:39:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)) 01:39:58 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, 0x0) 01:39:58 executing program 3: syz_emit_ethernet(0x1106, &(0x7f0000001480)=ANY=[@ANYBLOB="0180c2000002ffffffffffff08004a"], 0x0) 01:39:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 01:39:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x0, 0x0, "a1"}, {0xc}], 0x1c}}], 0x1, 0x11) 01:39:59 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x44}}, 0x0) 01:39:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:39:59 executing program 4: openat$vcsa(0xffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x6442, 0x0) 01:39:59 executing program 5: bpf$BPF_LINK_UPDATE(0x23, 0x0, 0x0) 01:39:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030322c687567653d616c776179732c687567653d77697468696e5f73697a652c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d3030303030303030303030303030303030303030303011"]) [ 256.202494][T13906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.355806][T13912] tmpfs: Bad value for 'mode' [ 256.368064][T13906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.423656][T13912] tmpfs: Bad value for 'mode' 01:40:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8904, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:00 executing program 0: r0 = getpgid(0x0) r1 = getpgid(0x0) r2 = openat$fuse(0xffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) r3 = epoll_create(0x8) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3}) 01:40:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x143001) 01:40:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 01:40:00 executing program 1: r0 = epoll_create(0xfb1) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xa0f) 01:40:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x10) 01:40:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000080)) 01:40:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0x22, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2c, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 01:40:00 executing program 4: wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)) 01:40:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') 01:40:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:00 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000140)) 01:40:00 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1600bd63, 0x0, &(0x7f0000000040)) 01:40:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:40:00 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000000)) 01:40:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000001540)=[{0x0, 0x0, 0xfffffffffffffffe}]) [ 257.406896][T13950] loop3: detected capacity change from 0 to 16383 [ 257.526847][T13950] loop3: detected capacity change from 0 to 16383 01:40:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 01:40:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:01 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xae, &(0x7f0000000200)=""/174, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:40:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x402c5828, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:01 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) 01:40:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='fdinfo\x00') openat$incfs(r0, &(0x7f0000002c80)='.log\x00', 0x0, 0x0) 01:40:01 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 01:40:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='n']) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 01:40:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/mcfilter\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, 0x0) 01:40:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 01:40:01 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local}, 0x14) 01:40:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) 01:40:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x218000, &(0x7f0000000000)=ANY=[]) 01:40:01 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x40c00, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) [ 258.191337][T13988] tmpfs: Unknown parameter 'n' 01:40:01 executing program 0: bpf$BPF_LINK_UPDATE(0x13, &(0x7f0000000500), 0x10) 01:40:01 executing program 2: syz_io_uring_setup(0xed0, &(0x7f0000000000)={0x0, 0xab47, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0xce1, &(0x7f00000001c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 258.226438][T13988] tmpfs: Unknown parameter 'n' 01:40:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 01:40:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 01:40:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000002280)={'veth1\x00', @ifru_addrs=@xdp}) 01:40:01 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x28, 0x0, &(0x7f0000000040)) 01:40:01 executing program 3: r0 = epoll_create(0x7) r1 = openat$fuse(0xffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000010}) 01:40:01 executing program 2: syz_io_uring_setup(0x2c67, &(0x7f00000012c0)={0x0, 0xc5d5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001340)) 01:40:01 executing program 1: bpf$BPF_LINK_UPDATE(0x13, 0x0, 0x0) 01:40:01 executing program 5: r0 = io_uring_setup(0x481a, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) 01:40:01 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) 01:40:01 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x364, 0xffffffff, 0xf8, 0xf8, 0x334, 0xffffffff, 0xffffffff, 0x424, 0x424, 0x424, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'vcan0\x00', 'syzkaller0\x00'}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c0) 01:40:01 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 01:40:01 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x402, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 01:40:02 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000006c0)=[{0x10, 0x0, 0x0, "a1"}, {0xc}], 0x1c}}], 0x1, 0x11) 01:40:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 01:40:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/mcfilter\x00') sendfile(r0, r1, 0x0, 0x0) 01:40:02 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x7800) 01:40:02 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_advise='huge=advise'}]}) 01:40:02 executing program 1: syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x32b0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 01:40:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2102) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) 01:40:02 executing program 0: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000300100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 01:40:02 executing program 4: openat$cuse(0xffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) 01:40:02 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) 01:40:02 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3, 0x0, &(0x7f0000000040)) 01:40:02 executing program 1: openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x26282, 0x0) [ 259.186385][T14045] loop0: detected capacity change from 0 to 131456 01:40:02 executing program 2: timer_create(0x6, &(0x7f0000000040), 0x0) 01:40:02 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) [ 259.255697][T14045] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.295029][T14045] ext4 filesystem being mounted at /root/syzkaller-testdir864752670/syzkaller.OCZj2W/225/file0 supports timestamps until 2038 (0x7fffffff) 01:40:02 executing program 5: r0 = io_uring_setup(0x6fc9, &(0x7f0000000000)) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) 01:40:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x22}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 01:40:02 executing program 1: sched_getparam(0x0, &(0x7f0000002140)) 01:40:02 executing program 3: bpf$BPF_LINK_UPDATE(0x12, &(0x7f0000000500), 0x10) 01:40:02 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x8502, 0x0) 01:40:02 executing program 4: write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:40:02 executing program 1: syz_io_uring_setup(0x2c67, &(0x7f00000012c0)={0x0, 0xc5d5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0xce1, &(0x7f00000001c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 01:40:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000100)=@raw=[@alu={0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xae, &(0x7f0000000200)=""/174, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:40:02 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x80}}) 01:40:02 executing program 5: bpf$BPF_LINK_UPDATE(0x5, 0x0, 0x0) 01:40:03 executing program 2: socketpair(0x28, 0x0, 0x4, &(0x7f0000000640)) 01:40:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2d, 0x0, &(0x7f0000000040)) 01:40:03 executing program 0: r0 = getpgid(0x0) r1 = getpgid(0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000000c0)) 01:40:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/mcfilter\x00') read$FUSE(r0, 0x0, 0x0) 01:40:03 executing program 5: bpf$BPF_LINK_UPDATE(0x19, 0x0, 0x0) 01:40:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x2, 0x0, 0x2000, 0x34}, 0x20) 01:40:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x19}, 0x40) 01:40:03 executing program 4: syz_io_uring_setup(0xce1, &(0x7f00000001c0)={0x0, 0x0, 0x6}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) 01:40:03 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 01:40:03 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7004, 0x0) 01:40:03 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local, @broadcast, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x0, 0x6, 'p71', 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7fd946", 0x0, "209534"}}}}}}}}, 0x0) 01:40:03 executing program 3: pkey_alloc(0x0, 0x5) 01:40:03 executing program 2: syz_open_dev$vcsu(0x0, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) 01:40:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 01:40:03 executing program 0: r0 = epoll_create(0x7) r1 = openat$fuse(0xffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)={0x10000010}) 01:40:03 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000001040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0x0, r1}, 0x18) 01:40:03 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inodes=4621,size=0']) 01:40:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00', r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 01:40:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFBR(r0, 0x8927, &(0x7f0000000080)=@get={0x1, 0x0}) 01:40:03 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000012c0)) 01:40:03 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:40:03 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) 01:40:03 executing program 3: syz_open_procfs(0x0, &(0x7f0000001240)='timers\x00') 01:40:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000080)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd96485b020a93cf620ad77fa93a555c351d5fdfa6bd0e8c4cecc1d6974d073d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd90, 0x8, 0x0, 0x1, [{0x470, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ae4512b2cd51ea08f010c081876b75b41431de3c3a9aaa400e5591b418f74d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755f8cfb5f1dcfd7bf4f680e797a22d7eb7bffbbf39bea80e9883d97acd19313"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4f9356c039437d478de1bf71c69b4b4e811bfd935cefe0c544d86a34827177b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5d8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3202a770466ed49e05249beedef50d28eb56b99954339d628a2f88226f6b5e1e"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) read(r0, &(0x7f00000000c0)=""/1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) [ 261.049579][T14165] tmpfs: Bad value for 'nr_blocks' 01:40:04 executing program 1: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000080)=0x2c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'macvlan0\x00', {0x1ff}, 0xfff9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x28000001) syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') [ 261.073646][T14165] tmpfs: Bad value for 'nr_blocks' [ 261.087253][T14167] tmpfs: Bad value for 'nr_inodes' [ 261.100361][T14167] tmpfs: Bad value for 'nr_inodes' 01:40:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1600bd61, 0x0, &(0x7f0000000040)) 01:40:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x6, 0x3}, 0x14}}, 0x0) 01:40:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000d94b352a0a2f80c06d5709ffc2c654"}, 0x46) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r3, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 01:40:04 executing program 2: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7005, 0x0) 01:40:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000380)=ANY=[], 0x10) 01:40:04 executing program 2: syz_mount_image$tmpfs(&(0x7f0000001600)='tmpfs\x00', &(0x7f0000001640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x31]}}}}]}) 01:40:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000140)) 01:40:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0xb, 0x0, &(0x7f0000000040)) 01:40:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 01:40:04 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 261.682024][T14203] tmpfs: Bad value for 'mpol' [ 261.707458][T14203] tmpfs: Bad value for 'mpol' 01:40:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0xe6f293389e163eab, &(0x7f0000004a00)) 01:40:05 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0xc1) 01:40:05 executing program 0: r0 = epoll_create(0x33) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80000001) 01:40:05 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/mcfilter\x00') clock_gettime(0x0, &(0x7f0000000300)={0x0}) pselect6(0x40, &(0x7f0000000c00)={0x8}, 0x0, 0x0, &(0x7f0000000340)={r0}, 0x0) 01:40:05 executing program 4: syz_io_uring_setup(0x4439, &(0x7f00000000c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) 01:40:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 01:40:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') write$P9_RLOCK(r0, 0x0, 0x0) 01:40:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x15c, 0xffffffff, 0x15c, 0xb8, 0x2f4, 0x2f4, 0xffffffff, 0x2f4, 0x2f4, 0x5, 0x0, {[{{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@icmp={{0x24, 'icmp\x00'}, {0x0, "1605"}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @dev, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'bridge_slave_1\x00', 'bond0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key, @gre_key}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) 01:40:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5411, 0x0) 01:40:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x334, 0xffffffff, 0xf8, 0xf8, 0x334, 0xffffffff, 0xffffffff, 0x424, 0x424, 0x424, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @empty, [], [], 'vcan0\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390) 01:40:05 executing program 1: bpf$BPF_LINK_UPDATE(0x22, 0x0, 0x0) 01:40:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000045c0)='/dev/vcs#\x00', 0x5, 0x2) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x18) 01:40:05 executing program 4: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'macvlan0\x00', {0x1ff}, 0xfff9}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:40:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:40:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [{@fsuuid={'fsuuid'}}]}) 01:40:06 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) 01:40:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) 01:40:06 executing program 4: r0 = epoll_create(0x7) r1 = openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = openat$fuse(0xffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 01:40:06 executing program 2: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) [ 263.212228][T14262] tmpfs: Bad value for 'mpol' [ 263.221435][T14263] tmpfs: Unknown parameter 'fsuuid' 01:40:06 executing program 5: socket$inet6(0xa, 0x80803, 0x0) [ 263.264745][T14263] tmpfs: Unknown parameter 'fsuuid' [ 263.273775][T14262] tmpfs: Bad value for 'mpol' 01:40:06 executing program 2: socketpair(0x11, 0x0, 0x9, &(0x7f0000000540)) 01:40:06 executing program 4: syz_emit_ethernet(0x19, &(0x7f0000000000)={@empty, @empty, @val, {@llc={0x4, {@llc={0x0, 0x0, "fc"}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000180)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x16, 0x0, @broadcast, @multicast2}}}}}, 0x0) 01:40:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x24, 0x0, &(0x7f0000000040)) 01:40:06 executing program 0: renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 01:40:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 01:40:06 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000001700)='./file0\x00', 0x0, 0x0, 0x0) 01:40:07 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@random="b010a2ef135f", @local, @void, {@ipv4={0x800, @tipc={{0xe, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{}, {@empty}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@multicast2}]}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 01:40:07 executing program 0: syz_emit_ethernet(0x1106, 0x0, 0x0) 01:40:07 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@empty, @empty, @val, {@llc={0x4, {@llc={0x0, 0x0, "fc"}}}}}, 0x0) 01:40:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x10e0040, &(0x7f0000000400)) 01:40:07 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "52d1b1", 0xc, 0x11, 0x0, @loopback, @mcast1, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 01:40:07 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0xfd000000, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 01:40:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000080)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd96485b020a93cf620ad77fa93a555c351d5fdfa6bd0e8c4cecc1d6974d073d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd90, 0x8, 0x0, 0x1, [{0x470, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ae4512b2cd51ea08f010c081876b75b41431de3c3a9aaa400e5591b418f74d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755f8cfb5f1dcfd7bf4f680e797a22d7eb7bffbbf39bea80e9883d97acd19313"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4f9356c039437d478de1bf71c69b4b4e811bfd935cefe0c544d86a34827177b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5d8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3202a770466ed49e05249beedef50d28eb56b99954339d628a2f88226f6b5e1e"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 01:40:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000080)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd96485b020a93cf620ad77fa93a555c351d5fdfa6bd0e8c4cecc1d6974d073d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xd90, 0x8, 0x0, 0x1, [{0x470, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1ae4512b2cd51ea08f010c081876b75b41431de3c3a9aaa400e5591b418f74d"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755f8cfb5f1dcfd7bf4f680e797a22d7eb7bffbbf39bea80e9883d97acd19313"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4f9356c039437d478de1bf71c69b4b4e811bfd935cefe0c544d86a34827177b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5d8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3202a770466ed49e05249beedef50d28eb56b99954339d628a2f88226f6b5e1e"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xdc, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb4, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xa4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0xdc}}, 0x0) [ 265.411962][ T37] audit: type=1800 audit(1617154808.656:5): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".pending_reads" dev="sda1" ino=14562 res=0 errno=0 01:40:08 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) 01:40:08 executing program 5: r0 = epoll_create(0x71d) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x2, r1, 0x0) 01:40:08 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)={[{@mode={'mode'}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) 01:40:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 01:40:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, &(0x7f0000000040)) [ 265.747590][T14372] tmpfs: Bad value for 'nr_blocks' [ 265.803215][T14372] tmpfs: Bad value for 'nr_blocks' 01:40:09 executing program 3: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x7, 0x0, 0x5}) 01:40:09 executing program 5: r0 = epoll_create(0x9) r1 = openat$fuse(0xffffff9c, &(0x7f00000024c0)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 01:40:09 executing program 2: bpf$BPF_LINK_UPDATE(0x1b, 0x0, 0x0) 01:40:09 executing program 1: openat$vcsa(0xffffff9c, &(0x7f0000000c40)='/dev/vcsa\x00', 0xc4680, 0x0) 01:40:09 executing program 4: openat$pidfd(0xffffff9c, &(0x7f00000020c0)='/proc/self\x00', 0x204200, 0x0) 01:40:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFBR(r0, 0x2, &(0x7f0000000080)=@get={0x1, 0x0}) 01:40:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x0, 0x2}, 0x20) 01:40:09 executing program 1: syz_emit_ethernet(0x19, &(0x7f0000000000)={@empty, @empty, @val={@val={0x4305}}, {@llc={0x4, {@llc={0x0, 0x0, "fc"}}}}}, 0x0) 01:40:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) 01:40:09 executing program 5: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x747401) 01:40:09 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') 01:40:09 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000000)={@empty, @empty, @val, {@llc={0x4, {@llc={0x0, 0x0, "fc"}}}}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000180)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}}, 0x0) 01:40:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0x22, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 01:40:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:40:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:09 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) 01:40:09 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000001040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="230000000300000000000000000000000300000000000000ce47"], 0x23) 01:40:09 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/vlan/config\x00') 01:40:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000340)) 01:40:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x19, 0x0, 0x0, 0x8, 0x90b}, 0x40) 01:40:10 executing program 2: syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) 01:40:10 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@huge_always='huge=always'}]}) 01:40:10 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b0, 0x0) 01:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89a0, 0x0) 01:40:10 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f00000000c0)) 01:40:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8980, 0x0) 01:40:10 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080)='l', 0x1}, {&(0x7f0000000340)="8a", 0x1, 0x7fffffff}], 0x0, 0x0) 01:40:10 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) 01:40:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 01:40:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) 01:40:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0321"], 0x28}}, 0x0) [ 267.504122][T14445] 9pnet: Insufficient options for proto=fd [ 267.553430][T14451] 9pnet: Insufficient options for proto=fd [ 267.561854][T14447] loop5: detected capacity change from 0 to 264192 01:40:10 executing program 3: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 01:40:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x20000041) 01:40:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 01:40:10 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x31, 0x0, &(0x7f0000000040)) 01:40:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@fat=@errors_continue='errors=continue'}]}) 01:40:11 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = io_uring_setup(0x6fc9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) 01:40:11 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) [ 267.844965][T14463] FAT-fs (loop2): bogus number of reserved sectors [ 267.878351][T14463] FAT-fs (loop2): Can't find a valid FAT filesystem 01:40:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x48, &(0x7f0000000400)) 01:40:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)={[{@uid={'uid'}}, {@huge_never='huge=never'}, {@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) 01:40:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:11 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10}, 0x10) 01:40:11 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:40:11 executing program 4: syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x802000, &(0x7f0000003880)) 01:40:11 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') 01:40:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4(r0, 0x0, 0x0, 0x0) 01:40:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x0) 01:40:11 executing program 2: io_uring_setup(0x27af, &(0x7f00000001c0)={0x0, 0x0, 0x33}) 01:40:11 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000400)) 01:40:11 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1a, 0x0, &(0x7f0000000040)) 01:40:11 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x8, 0x0, &(0x7f0000000040)) 01:40:11 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x462) 01:40:11 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) io_setup(0x7f, &(0x7f0000000280)=0x0) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000002c0)="d8", 0x1, 0x100000001, 0x0, 0x1, r6}]) 01:40:12 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)) 01:40:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x22}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 01:40:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)) 01:40:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 01:40:12 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) [ 268.901407][ T37] audit: type=1804 audit(1617154812.146:6): pid=14514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir163101722/syzkaller.SonvIz/228/bus" dev="sda1" ino=14145 res=1 errno=0 01:40:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89a1, 0x0) 01:40:12 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000001200)='./file0\x00', &(0x7f0000001780)='system.posix_acl_default\x00', &(0x7f0000003800), 0x24, 0x0) 01:40:12 executing program 2: openat$kvm(0xffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x400, 0x0) [ 269.012853][ T37] audit: type=1804 audit(1617154812.196:7): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir163101722/syzkaller.SonvIz/228/bus" dev="sda1" ino=14145 res=1 errno=0 01:40:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x3e, 0x0, &(0x7f0000000040)) 01:40:12 executing program 0: bpf$BPF_LINK_UPDATE(0x8, &(0x7f0000000500), 0x10) 01:40:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8906, 0x0) 01:40:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000001300)='tmpfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f00000017c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) 01:40:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000006060104000000000000000001000004050001"], 0x34}}, 0x0) 01:40:12 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000040)) 01:40:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300), 0x10}, 0x74) [ 269.319290][T14540] tmpfs: Bad value for 'nr_blocks' 01:40:12 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000001040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x23) [ 269.361429][T14540] tmpfs: Bad value for 'nr_blocks' 01:40:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001240)='net/mcfilter\x00') sendfile(r0, r1, &(0x7f0000000080), 0x0) [ 269.384445][T14542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 01:40:12 executing program 4: r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 01:40:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_advise='huge=advise'}, {@nr_inodes={'nr_inodes'}}]}) 01:40:12 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r0, 0x0, 0x0) 01:40:12 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x74) 01:40:12 executing program 3: rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x4, 0x0, 0x6}) 01:40:12 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x5450) 01:40:13 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x7fed}, 0x0, 0x0, 0x0, 0x0) [ 269.764749][T14558] tmpfs: Bad value for 'nr_inodes' [ 269.805699][T14558] tmpfs: Bad value for 'nr_inodes' 01:40:13 executing program 2: pipe2(0x0, 0xc4000) 01:40:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) 01:40:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140a, 0x1}, 0x10}}, 0x0) 01:40:13 executing program 1: r0 = openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) 01:40:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0xc, 0x0, &(0x7f0000000040)) 01:40:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) [ 270.011504][T14572] device veth0_macvtap left promiscuous mode 01:40:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x39, 0x0, &(0x7f0000000040)) 01:40:13 executing program 2: bpf$BPF_LINK_UPDATE(0x12, 0x0, 0x0) 01:40:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c40)={0x0, @ipx={0x4, 0x0, 0x0, "642b89f85cce"}, @l2={0x1f, 0x0, @fixed}, @rc, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}) 01:40:13 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 01:40:13 executing program 2: syz_io_uring_setup(0xf3e, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xce1, &(0x7f00000001c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) 01:40:13 executing program 4: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 01:40:13 executing program 2: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000140)) 01:40:13 executing program 3: r0 = openat$hwrng(0xffffff9c, &(0x7f00000021c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0xc01047d0) 01:40:13 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, &(0x7f0000000400)) 01:40:13 executing program 0: openat$kvm(0xffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) 01:40:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0xa]}}}}]}) 01:40:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 01:40:14 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 270.815586][T14601] tmpfs: Bad value for 'mpol' 01:40:14 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@huge_within_size='huge=within_size'}], [{@fowner_lt={'fowner<', 0xee00}}]}) 01:40:14 executing program 1: syz_emit_ethernet(0x12, &(0x7f0000000140)={@empty, @empty, @val={@void}, {@generic={0x86dd}}}, 0x0) [ 270.840756][T14605] FAT-fs (loop5): bogus number of reserved sectors [ 270.850445][T14605] FAT-fs (loop5): Can't find a valid FAT filesystem [ 270.859825][T14601] tmpfs: Bad value for 'mpol' 01:40:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000002280)={'macvtap0\x00', @ifru_addrs=@xdp}) [ 270.904575][T14605] FAT-fs (loop5): bogus number of reserved sectors [ 270.913702][T14605] FAT-fs (loop5): Can't find a valid FAT filesystem 01:40:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 01:40:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, &(0x7f0000000080)) [ 270.980358][T14616] tmpfs: Unknown parameter 'fowner<00000000000000060928' [ 270.993109][T14616] tmpfs: Unknown parameter 'fowner<00000000000000060928' 01:40:14 executing program 5: clock_gettime(0x72eff115d44d138d, 0x0) 01:40:14 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000040000000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 01:40:14 executing program 1: mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) 01:40:14 executing program 0: mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000001c0)=0x9, 0x7, 0x0) 01:40:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fb}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) write(r1, 0x0, 0x0) 01:40:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x0) 01:40:14 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="bc", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000240)='user\x00', 0x0, 0x0, 0x0, r0) [ 271.305839][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:40:14 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, 0xfffffffffffffffe) 01:40:14 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00', r0) [ 271.402267][T14638] x_tables: duplicate underflow at hook 3 01:40:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@block={'block', 0x3d, 0x800}}, {@mode={'mode'}}]}) 01:40:14 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@block={'block'}}]}) 01:40:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, 0x0, 0x0) 01:40:14 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) [ 271.869745][T14657] ISOFS: Unable to identify CD-ROM format. 01:40:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x14}, {0x6}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:40:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000280)) 01:40:15 executing program 2: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xb34d8a83e67a6303) 01:40:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f00000011c0)=@isdn, 0x80, &(0x7f0000001600)=[{&(0x7f0000001240)=""/249, 0xf9}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0, 0x0) 01:40:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@mode={'mode'}}]}) 01:40:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@block={'block', 0x3d, 0x200}}]}) 01:40:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000200)) [ 272.601902][T14675] ISOFS: Unable to identify CD-ROM format. 01:40:15 executing program 1: getresgid(&(0x7f0000002800), &(0x7f0000002840), 0x0) [ 272.705727][ T37] audit: type=1326 audit(1617154815.947:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14676 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:40:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@mode={'mode'}}]}) 01:40:16 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x282, 0x0) 01:40:16 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', 0xffffffffffffffff) 01:40:16 executing program 4: socketpair(0x1, 0x0, 0x8ba, 0x0) 01:40:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 272.983844][T14689] ISOFS: Unable to identify CD-ROM format. 01:40:16 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') r1 = eventfd(0x0) dup2(r0, r1) 01:40:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 01:40:16 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='q', 0x1, 0xffffffffffffffff) [ 273.136212][T14703] ISOFS: Unable to identify CD-ROM format. [ 273.172416][T14689] ISOFS: Unable to identify CD-ROM format. 01:40:16 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r2) 01:40:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000036c0), 0x5400, &(0x7f0000003740)) 01:40:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@mode={'mode'}}]}) 01:40:16 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) 01:40:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x8982, &(0x7f0000000100)={@remote, @private1, @dev}) 01:40:16 executing program 4: add_key$keyring(&(0x7f0000007b00)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 01:40:16 executing program 0: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000280)) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) [ 273.501962][T14721] ISOFS: Unable to identify CD-ROM format. 01:40:16 executing program 4: getresgid(&(0x7f0000004340), 0x0, 0x0) getresgid(&(0x7f0000004580), &(0x7f00000045c0), &(0x7f0000004600)) 01:40:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 01:40:17 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0x8, 0x6, 0x0, @private2, @dev={0xfe, 0x80, [], 0x33}, {[@srh]}}}}}, 0x0) 01:40:17 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x800000000009032, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) 01:40:17 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000007fd3d94ef1460400", @ANYRES32=r1, @ANYBLOB="000000000000000018001680140001801000060000000000000000000000000008001b"], 0x40}}, 0x0) 01:40:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@mode={'mode'}}]}) 01:40:17 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 01:40:17 executing program 0: timer_create(0x3, &(0x7f0000000180)={0x0, 0x7}, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) read(r0, &(0x7f0000000340)=""/403, 0x193) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) 01:40:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0xc719}, 0xc) 01:40:17 executing program 4: bpf$OBJ_GET_PROG(0xc, 0x0, 0x0) [ 274.114054][T14756] ISOFS: Unable to identify CD-ROM format. 01:40:17 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x80000040}, 0x8) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) close(r0) 01:40:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfffffdef, 0x4d87a, 0x0, 0x1f4) 01:40:17 executing program 0: bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 01:40:17 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001380)) 01:40:17 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x80000040}, 0x8) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) close(r0) 01:40:17 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0xd0, 0x3f8, 0x270, 0x0, 0x330, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'macsec0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip_vti0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'erspan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) [ 274.558739][ T9] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 274.699548][T14748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.799264][T14748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 01:40:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000007fd3d94ef1460400", @ANYRES32=r1, @ANYBLOB="000000000000000018001680140001801000060000000000000000000000000008001b"], 0x40}}, 0x0) 01:40:18 executing program 3: bpf$OBJ_GET_PROG(0x11, 0x0, 0x0) 01:40:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x14}, 0x14}}, 0x0) 01:40:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0}}, 0x0) 01:40:18 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0x8, 0x0, 0x0, @private2, @dev, {[@srh]}}}}}, 0x0) 01:40:18 executing program 4: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 01:40:18 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1404, 0x4}, 0x10}}, 0x0) 01:40:18 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000001700)=[{0x28, 0x0, 0x0, "5e9f23350b3ed02d781c92c03e1767fbb7"}], 0x28}}], 0x1, 0x0) 01:40:18 executing program 0: bpf$OBJ_GET_PROG(0x11, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x10) 01:40:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='J', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 01:40:18 executing program 2: bpf$OBJ_GET_PROG(0x16, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x10) 01:40:18 executing program 3: syz_emit_ethernet(0x98, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0x5e, 0x6, 0x0, @private2, @dev, {[], "7eede834172f83b0807195cbb1e3a121c32f83ae06b99a361b880a712856018c7bce515fe6bf0bc8b03254cb97de14d88fd9c6c0ed5f811dccd3761b2052a845f3cf057c4c36213639cb1c7c888def230d45d596db2b214fc597c9eb7896"}}}}}, 0x0) [ 275.618601][T14804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 01:40:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000007fd3d94ef1460400", @ANYRES32=r1, @ANYBLOB="000000000000000018001680140001801000060000000000000000000000000008001b"], 0x40}}, 0x0) 01:40:19 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 01:40:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, 0xe8) 01:40:19 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x10}, 0x10}}, 0x0) 01:40:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:40:19 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000001700)=[{0x10}, {0xa8, 0x84, 0x1, "e9507580b29641a195d99e4ae480bee296f68e84541131bb131af98050eaee30ea4dcea965648b30f84f2860143c39d21e579cb45310b9bff3e2a282705ba3294e6a684fb1b67daa21e1c6db8df539e6905646cffc8d7b49d3229f158286ebcd87cbd535b546d1215a45e829447e20d37c563f50c98209ebc1e485574d17cc0d5e78ae39d037f70a10ed72c4d5be66558c934dcc27"}, {0x10, 0x103, 0xff}], 0xc8}}], 0x1, 0x0) 01:40:19 executing program 3: bpf$OBJ_GET_PROG(0x1b, 0x0, 0x0) 01:40:19 executing program 4: bpf$OBJ_GET_PROG(0x13, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x10) 01:40:19 executing program 2: socketpair(0x26, 0x5, 0x523f651a, &(0x7f0000000000)) 01:40:19 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x18}, 0x0) 01:40:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f0000000240)=""/200, 0x2e, 0xc8, 0x1}, 0x20) 01:40:19 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000005c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x4, "8fb1cfb4bd42d9da1655590595b6e33e26fa5192b54bc75aa381e47d7db8dfb0e3167dc586a0e93e381182b74f6c198fbb65d884cd485937a974ffabf59808", 0x24}, 0x60) [ 276.596381][T14836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 01:40:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000007fd3d94ef1460400", @ANYRES32=r1, @ANYBLOB="000000000000000018001680140001801000060000000000000000000000000008001b"], 0x40}}, 0x0) 01:40:20 executing program 3: bpf$OBJ_GET_PROG(0x13, 0x0, 0x0) 01:40:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:40:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 01:40:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x20000000000001cc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:40:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'ip6gre0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "71c3c63707bb3ac4a32e813e859e2338ac856d9ffd48fd6a4f725b3f5af1"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 01:40:20 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000380)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 01:40:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x118}, 0x0) 01:40:20 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@ipv4={[], [], @loopback}, @local, @private2, 0x0, 0x2, 0x3}) 01:40:20 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000000080)) 01:40:20 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a0f457dd6d4c28d3e2dee2be62fdd4eab4e9a3cf91412e9ec4f0d4f2a4e4e02704debcffd1cd1e82b36993b355d57cde4d500e3bf09ed4312ab1a0f5fcac8c", 0x1a}, 0x60) 01:40:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x4) accept4(r0, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80, 0x0) [ 277.757579][T14863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 01:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={0x0}}, 0x0) 01:40:21 executing program 2: socket$unix(0x1, 0xffffffffffffffff, 0x0) 01:40:21 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 01:40:21 executing program 0: socket(0x2, 0x0, 0x10001) 01:40:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x4000050) 01:40:21 executing program 0: syz_emit_ethernet(0xe81, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0xe47, 0x6, 0x0, @private2, @dev, {[@srh], "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"}}}}}, 0x0) 01:40:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000006940)={&(0x7f0000006840), 0xc, &(0x7f0000006900)={&(0x7f0000006880)={0x14}, 0xfffffedd}}, 0x0) 01:40:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) 01:40:21 executing program 4: syz_emit_ethernet(0xe81, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0xe47, 0x0, 0x0, @private2, @dev, {[], "7eede834172f83b0807195cbb1e3a121c32f83ae06b99a361b880a712856018c7bce515fe6bf0bc8b03254cb97de14d88fd9c6c0ed5f811dccd3761b2052a845f3cf057c4c36213639cb1c7c888def230d45d596db2b214fc597c9eb78966af29d259a04a3bd090ab352aa55f2bce22cb1f11a8fe3b33155ac901fd80c72e9c765a07c9f1e6e185f859047f1491abec606bbfaa57e235b69028f7c03de155608c4a859a0a6e6bee8eb03547f220c2b557eb93c45548e52380ec921f61e225e6777e8687b3183e1e3c0fc1098fcbb6a11036ddff8ed656d4a8185e6268236e7742c402dcfc44bd53e1d2da15a9aaf79dbea2d87efe0f4d669810ed9e679e1c087cc3124e1cfa07ba1cce88e6c327efa69fad0f84cf063c7b3d14cdf6592480f082bde60d20831b70155e4728079e2504b23981a865c46ba945358bc2154bebf60bce760ab30cf6f660f609eed38704a972a232badc5d855ee7f153d51bb8d052a33bc20951070806c90f13b344f633152de14b6e4fb1659a7d42a68fb810957154c20cda4c99c888af03b84963507d22b46e195b0ba0e79ffbf1f3a41ad7058c1a97d5dc72e2e3f3efc172c482a5a1c763914d000da0780c79c8f9ad53560bcd1a714d809974dee38b2d9d5acee6a03dcd5aa394ec6f9fe3fcbd15d91eada16d16f7f9dfff8335dff390cd4823fa3a6e18349b3177617b976a2aeb14e6b49d81c6f7aefa6519ca56bae91f2f5bdc2a080e1292840c12511a04dbb90f8def160bbe844e834f626901f4bf66263dba45fd8310c814c4cf6a4abd7a55ea2bf3fcfd3ac5d1f7a79809a2a67dd50412c4b86be0d782547b93687f059d142d07fe525c985135742dc4988d55f15e1ee345dafc95ab66a264eaba79bf49b62648a50f0ac212f749da307de09da28f500da96e2e7ef12e0bb044aba545d6757a5e8dd4cc6fb4c5ee1e7dc45b3cbdb9cc3cf9c9465067f1438f24f7e04d5c503a5de954dba9cd31873bee412331a46e58d92188d6dc2c1a3bbbdc8a39ac9d1b1e21fd831697d524957bddf5884cf13c2a7aba8a11d8c69241b22539c5f8eb510b29796ab6a8adce95afe3400a47af72dd45b969f57d5acbf4334a3d5b434cf8710181c2917694aa45ac3a308d19c5d548db348026428c73cd69a637012a4321ce59ac2188c195edc46982234c2d979fff851381ab901344dff6f4fea1b3941c4c922ecd252f03259f4e735d854d8e73d754f794e1f997d5f48a6a4fd5a223e7a73374466daa7ba89735805adfd80661cdb47db9b14453cb5d0e45e9b3262964a49bf99f69ece4fbe108b73b1c9b4fc549016337577ea26f924ba3ccac5c8082c5751d4c7c722271424a973bb0ef610fa52090fe82bce52b81489178ce65e82426797ea2dd98e90666c58455393d64e67e7eaf104774b1203046636df17a40a546f1804694b9aea31524961919877bbfd3b0db40ce57e5addc4617efc9c3415cc62351868476baeb6579122db878e0a7c767a1bf8fec1a2996b53c2e2d4a2faef3e68ca1a72e3c5c73509f762a91e79b45b8840a49cd5cc75525d5198d7708ac86b4229558934f0db9e9c15ba98ad2b36828bc36db47c18721b1af8d6251069e01c67af34376482b1566e36c3485085a25518961c97e62907d569fcb185a2de08db1a17af487164b62e517e890310b2d8769546580417f496774713630a9af7ccd3753cfcfa8b4169d56d421229daa9f761b5009e217e8d4d62d0500eafaa587585a2f9bc095a43f05b1b6821660f54831dfd79d11cec6e4b6ab6129ab0fa2df350c536b8ffc3a9f4ebe0ace9aaf240cd230cac6970caaf2224a1c766675e7a61dcd15b6fa8b897ce9ba874b216e31aa25e7bc2862b080e6a732034bda5593fec9b4eab8575510bfa564aac47b2e765a29be609e8a7dc08e1e989a556f15f2f2b4cf233aa2e79be2673875ef613cf9e5e2301e2812b36f4330f4171c9ef67353c4e9eb5dbd6fe207336be22ca728364f793656a135cffa1584cb9df48687a6c6a3c17312235f5c36f9ff89ebf8afea1d7591435d0b07dbf64267e3b9ac244d47cfb636798483670e87ead1f673cf1d86c1c4dc45b9578ea890f7a6a9c3568551d2ea51bda46dc0700a5677d4d8f16c634bd603d0e01451013d4bab79b83fd599e42b7f318a06baa7fd7de68dc4eac4fbd0a833aaea226bdcdae28ab71b2b31f981ff8d3738c97ded4cc975dd65c7858cc6aebb9863efb71ac58b2345b109926813949a89b14bb6f7bc3b973c793f3c126d68d5223d0885410608d29c4ebbc3cd5bb9f505483910d5b2b4b1b3ecead5d6a3900fe182989568288f184fb2b289b01933c6a29ecd9ed4bc4321df958fae3abb66a96b49d78988bc6f9a0f66c6d72a25f5e7fdcf722c6d661431c8967e12fc8f27cbbcdf8026a15cdf191762f15c60c1a8369bf05a0585e003b39d348ed7a5608bed01b1560a88c0277834578a5d2f4d4cb81fbc0172940f8463db3edba0aab35c5c2b2c170e3dd6aa21803ef6e1fa24ed40f868065fc3f645343baab36d6cf33880ff82f940222c6ea42727646792233467f3539e38f933bf03ad44c5baa804d1f97f5f219e541a41ca50d81b4eddd6e64a8c3e181ecccc7c1d39b6a641c437eb31ac5888207da31d55324c2c1e711eb0d4552e7797c3ff00d77d3b72b8a60e16709c01f32b431fcf3b1829c480e393b9470a7d1c157f12bfda39ade45cbfa7c56c29532fb44606cf8efc35297e67ffa62ef0c05a872efd6734052ddd20f0d89694627b90003af60079a0ee8960d7cbb2627ea46b728de9d2be8a445ce74ea0efc0494f5f9d3689f7205293b7d29c8f4bd99a61a35d4df4a2541f6c9dd9c66593edfdefa617076fad78fa62e5a2446c266e8f8a784df83d50861a301914578b684a5bf033fca22bda0ed05ff7fb2d1329a21572ea07d81d0e6527e644eb39570f8a215ad246d9f0da68d703ca179d92568f9ddd1f9198aa9226a352347e9aa3dac72aa08f295c0877f5c5798c4025ffb72cbba313202dfb89ab1a2d0117ff19426bbe878a4472a679b7e2986d6c3a958b5db9558fe0681c85aca0efaf4147825f51baea3426dafa46058b33305c6044324f1d651a176071adfc083b614bebd0c4c86bf945ab8d37dff372b0f19a7caadd9becab9c65b2efa7b4568bb4601467dba3f50739c3ab1cf212613cde1cf08267825f16ee245989abd6c5d231f29e0328b72361fb3c19bd8eb1bae633b80fcc4d91bd700c138d1ba1760f6875e2217c27e33e0fa129aad75667f91b9c89e60fc1f43aa605c9dcb5df67335f379d6bb9003b636b8d72c80f9542ccb2336438761f1f4622dd76465e54b597a2a464cae9fe81bbb4db5d6832dc2255aa342ea387e4d33f2100431f913ca3a078e6e9435e80a6afb4f3454c9c9fa0c28e94a33b338135cf5cc0837821ba270cb85315611c9f0aaceae3d3faa9d6e674bc3e8d183dccdb8fc308f0f347178fbc318504945b85eea7959597ba8dd6e0382449d25a9ca519f6e39119aa9e0f4d3ee5799798832b69addfc6ef85721acfde1b1c97f3ddbed611011ca8e65ae73bc055898db4b5ee90e57ecb243b1918980bff4099e2343219878df92a2970e193ef980734909650b01d4d7047099d85425498d95dade3dea687a9823f037d85d0bc45f2db2ac5c00b438a334c43d3d6320aeb31d42cb792aa9d16c8cb677a53b4af5a8c09c9cc541cfefc49d4e5f3d74f188d44f8d0f1587e0c23f2d39ac8c8e6526ebe9bba0bc230c3732da27ee9a01cf39874140c7d00a61999bccb524b01c7971779ce0a3abda280a1939a74529a812ac6cfe0b7c79c3cd7bc7c8c8e8cc08a38a93ac920f304f78c1eec55096b3cdcf93881aaf44b883181bac5b3833428f11d493c38fb9d086391712803b02455f1e5ac51b43d23d0e4bf2dc02efc1b1ebbaf8d5c642a433f69c05537e7a32c60727ef0b1e9d1e7050bf5ff962ba5e91510c37d3b2c7aa70c9e12dd298661f9746444d13273ef7e324d5ba9a32336b141ebde18f8fdb57987c3adc16d2d5bf59ff70d8a62e35d92582f2221be9cc5efbaac043cedcfd7557eb61c9842d278f62c1eaae3129bc6176e018d0b0fd6f08769e6a79e6f766508e4968dad5dadaae120c201fee8949b7c0ffce6d93cfa584e50d36c2b35efcd0ca86411a70c84caf79dce79ca7ba2341959f3d55e17e9f8c9083233df3b9adaa65947e1b319e4cf5abf16247cd7de4115c634188c51fbf6461eed55e021c50984e237f68500125022e4fb7fa1fc777c7cc2c7c061f4a0357a5b52aa48b1c2c0cc3e7dcfa2f1bad8d2f19377de0a74a1f72ebf3cc9563b3ebaac1cb3f405464557c5aca19b8740b97cc95d351d5f85c92fb0f371a3e6d4146146a349ce78db071ad7d02d128938a551812ff6fab0fccb744fa8d4ca6a43883321505c970817994c233daded55f9a5de87c69b54d6c004197f064405b27c536a8a1bb6a227b33226c77b4efd52096485d9be8f80ec0d5a33af7c300fec512b30b1ed17f4ca136a6b8743872a1580de3e805bce9dff52976fa7458ada6273ff2eac3d2905d4457e982658e02f230dddd01810bf88c80c9c3314557be496a4ad88311184d30881ea035699a7362ed0e596530275d9f42e321a2b0bc1a340625d51ea7c02e96ff6b22a2f536963fc78f2c00b86297a39799a5cf9163a4c2f7047a95d3a3ca2a73b77a6eeaace291e6fa67b97a55535af0981cd995767675f0a84d27dd69661564b12d1935274a9a7a6f87a632c4fab72b60ee7ff96fded417543c40d30bd535edb400ade0ffe1cb21d7fe8b5a0511e70da0e9e48292d3418fbd2caef5b33c681416710b781d36d8c1475c7cedefce926072164741314f22088cab661b7d7887ea176e2074d3dad3d3856bb37cf677ae827b5b29aa97545b6db7088da8488ac6dd6b81615b3ddddbceb6a2b3d47203b91aa5cdca9b363fff6138537b6cfbf2f0f2d0580c99202c9824185de5a43007d77a40de9f04d72e430871f3679bf3dabb9c12ada7e3cb2de281b59fb2054468e9ba4100c2df4b1814df5420b024f555515041fe3a4eac95420eecaf6bf71b70480e8514ddb0737202514a5b558ed85770ab88e73f58fdc6779af2d79dded7892e8c2c7e59953b47959ed1153dd1d650"}}}}}, 0x0) 01:40:21 executing program 1: socketpair(0x9, 0x0, 0x0, &(0x7f00000016c0)) 01:40:21 executing program 3: r0 = socket(0x2, 0xa, 0x0) connect$nfc_llcp(r0, 0x0, 0x0) 01:40:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="e55cd71df3c70fba19873b285bdca1691c4176296aa9dc3c", 0x18) 01:40:21 executing program 2: bpf$BPF_LINK_UPDATE(0x7, &(0x7f0000000000), 0x10) 01:40:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 01:40:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private=0xa010101, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, 0xe8) 01:40:21 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 01:40:21 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0x0, 0x0, 0x0, @private2, @dev}}}}, 0x0) 01:40:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040), 0xc) 01:40:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000200)) 01:40:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000240)=""/200, 0x26, 0xc8, 0x1}, 0x20) 01:40:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 01:40:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 01:40:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="d7", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x2000101}, 0x1c) 01:40:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000000000000010000000100000009"], 0x18}, 0x0) 01:40:22 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000016c0)) 01:40:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x200, 0x0, 0x168, 0x0, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'macsec0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip_vti0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'erspan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x47c) 01:40:22 executing program 1: bpf$OBJ_GET_PROG(0xa, 0x0, 0x0) 01:40:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:40:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00'}) [ 279.139223][T14938] can: request_module (can-proto-0) failed. [ 279.200734][T14938] can: request_module (can-proto-0) failed. [ 279.220645][ T37] audit: type=1804 audit(1617154822.468:9): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/279/cgroup.controllers" dev="sda1" ino=13846 res=1 errno=0 [ 279.262864][T14945] x_tables: duplicate underflow at hook 1 01:40:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={0x0}}, 0x0) 01:40:22 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, &(0x7f0000000000), &(0x7f00000006c0)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x1, 0x0, 0x0, 'geneve0\x00', 'veth0\x00', 'vlan0\x00', 'veth1_to_batadv\x00', @dev, [], @broadcast, [], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1}]}, 0x1a6) 01:40:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000180)=""/213, 0x3f, 0xd5, 0x1}, 0x20) 01:40:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0xc719, 0x7}, 0xc) 01:40:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e0f, 0x0, @private2}, 0x1c) 01:40:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast}, 0xa, @in=@remote, 0x0, 0x4}}, 0xe8) 01:40:22 executing program 3: bpf$OBJ_GET_PROG(0x8, 0x0, 0x0) 01:40:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @remote}, &(0x7f0000000180)=0xc) 01:40:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="d7", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffbff, @ipv4={[], [], @local}}, 0x1c) 01:40:23 executing program 5: syz_emit_ethernet(0x44, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0xa, 0x0, 0x0, @private2, @dev, {[@srh], "7eed"}}}}}, 0x0) 01:40:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:40:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 01:40:23 executing program 2: syz_emit_ethernet(0x7aa, &(0x7f0000000040)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '0^a', 0x770, 0x0, 0x0, @private2, @dev, {[], "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"}}}}}, 0x0) 01:40:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast, 0x0, 0x33}, 0xa, @in=@remote, 0x0, 0x4}}, 0xe8) 01:40:23 executing program 5: unshare(0x20010800) 01:40:23 executing program 4: bpf$OBJ_GET_PROG(0x9, 0x0, 0x7) 01:40:23 executing program 3: r0 = socket(0x2, 0xa, 0x0) connect$nfc_llcp(r0, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f7c4fb19fdfaea4c89d9c5178205852dcb5c40748aa213f8d9fe87450b903caec6769ad2cc8549252d6c6b310ed6635c13cc8a079abd0c7d098977c2344a1f"}, 0x60) [ 280.090548][ T37] audit: type=1804 audit(1617154823.338:10): pid=14976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/280/cgroup.controllers" dev="sda1" ino=14177 res=1 errno=0 01:40:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, 0xe8) 01:40:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:23 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:23 executing program 1: bpf$OBJ_GET_PROG(0x14, 0x0, 0x0) 01:40:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 01:40:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "529c95"}) 01:40:23 executing program 2: bpf$OBJ_GET_PROG(0x8, &(0x7f0000000000)={0x0}, 0x7d) 01:40:23 executing program 4: socket$inet6(0xa, 0x409, 0x0) 01:40:23 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/200, 0x2b, 0xc8, 0x1}, 0x20) [ 280.660881][T15001] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 01:40:24 executing program 1: bpf$OBJ_GET_PROG(0x9, 0x0, 0x700) 01:40:24 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 01:40:24 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:24 executing program 4: bpf$BPF_LINK_UPDATE(0x10, 0x0, 0x0) 01:40:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) 01:40:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) 01:40:24 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) [ 280.669114][T15001] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 01:40:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x1, 0x0, 0x0, 'geneve0\x00', 'veth0\x00', 'vlan0\x00', 'veth1_to_batadv\x00', @dev, [], @broadcast, [], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1}]}, 0x1a6) 01:40:24 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:24 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000002500)={&(0x7f00000023c0)=@ethernet, 0x80, 0x0}, 0x41) 01:40:24 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0x0) 01:40:24 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 01:40:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x1}]}, 0x108) [ 281.150076][T15021] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 281.612579][ T37] audit: type=1804 audit(1617154824.858:11): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/282/cgroup.controllers" dev="sda1" ino=14719 res=1 errno=0 01:40:24 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @sco={0x1f, @fixed}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, @nl}) 01:40:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001500)={0x0, @local, 0x0, 0x1, 'lc\x00'}, 0x2c) [ 281.676599][T15044] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 281.989626][T15055] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 01:40:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) 01:40:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="d7", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 01:40:25 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x5}, 0x40) 01:40:25 executing program 4: socket$inet(0x2, 0x3, 0x7) 01:40:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000000)=@abs, 0x6e, 0x0}, 0x0) 01:40:25 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x0) 01:40:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x1c) 01:40:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], &(0x7f0000000180)=""/213, 0x3f, 0xd5, 0x1}, 0x20) 01:40:25 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0xd0, 0x3f8, 0x270, 0x0, 0x330, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'macsec0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip_vti0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'erspan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) socketpair(0x9, 0x0, 0x0, &(0x7f00000016c0)) 01:40:25 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) [ 282.418846][T15066] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 282.585819][ T37] audit: type=1804 audit(1617154825.828:12): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/283/cgroup.controllers" dev="sda1" ino=14161 res=1 errno=0 [ 282.635785][ T7] Bluetooth: hci0: command 0x0401 tx timeout 01:40:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) 01:40:26 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c00)={0x14}, 0x14}}, 0x4000050) 01:40:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x61}, 0x1c) 01:40:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000004c0)) 01:40:26 executing program 1: socket$caif_seqpacket(0x25, 0x5, 0x2) 01:40:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="d76638ec11396a000600000000000000aa490d7bc86d5fa5f65d47fa768c708ea0b2252935e4f9633c72f531b662354e68be912910d8536c23d092ab653a1c4823b86c267abe397747354bf22b0fd9e00cf687db8df0c400836b07dbf76f3774aa0c181fbdb74ea4b6ee8e1be290de50ca2e1e5c7a53c7468f", 0x79, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffbff, @ipv4={[], [], @local}}, 0x1c) 01:40:26 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 01:40:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 01:40:26 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)) [ 283.097737][ T37] audit: type=1804 audit(1617154826.348:13): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/284/cgroup.controllers" dev="sda1" ino=14274 res=1 errno=0 01:40:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) 01:40:26 executing program 1: socketpair(0x1d, 0x0, 0x8, &(0x7f0000000000)) [ 283.509716][ T37] audit: type=1804 audit(1617154826.758:14): pid=15112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/285/cgroup.controllers" dev="sda1" ino=14691 res=1 errno=0 01:40:28 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) 01:40:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) 01:40:28 executing program 2: socketpair(0x1e, 0x0, 0x7, &(0x7f0000000500)) 01:40:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x5}, 0x14}}, 0x0) 01:40:28 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x34}, 0x20) 01:40:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) [ 285.374902][T15124] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 01:40:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast}, 0x0, @in=@remote}}, 0xe8) 01:40:28 executing program 2: bpf$OBJ_GET_PROG(0x3, 0x0, 0x0) 01:40:28 executing program 1: pipe(&(0x7f0000004180)) 01:40:28 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='.\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="6873717307000000911d675f004000000100000003000e00e0000200040000001201000000000000f801000000000000ac01000000000000e00100000000000001000000ffffff0000000000009a010000000000001a73797a6b616c6c6572203a200020438c01200000009820002838001100009e001d0200ed0100000100911d94ee099a404a8f5f4c002a7d00032d6e001a040f000300ff277c005901006d08264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c654eb5000129750102c40b7d00294d00074d0009297d000529f5010a2da46827d31f04bc002add00065d0160de0328232cdc006d0dff410000291f000100c027ed0007dc04651f545d1a085c001100004800130100a100034d00204c00090200040066696c65304000015002b2013104d404f7050200088003032e636f6c647e590201f9069e4001ec080131d60005273100322a3100331100000a00136000a1001fdc0011000069010000000000001a001200c1007edd0020dd0040dd009edd00d6de001201bc001100007e0100000000000008805cf90100535f0100a2010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000b4010000000000000100000000000000d1018ed51f", 0x1ea}], 0x0, &(0x7f0000000040)=ANY=[]) [ 285.527112][ T37] audit: type=1804 audit(1617154828.778:15): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/286/cgroup.controllers" dev="sda1" ino=14763 res=1 errno=0 01:40:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) [ 285.686021][T15140] loop4: detected capacity change from 0 to 264192 01:40:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, &(0x7f00000000c0)=0x98) [ 285.815700][T15140] unable to read xattr id index table [ 285.898748][T15140] loop4: detected capacity change from 0 to 264192 [ 285.931461][T15140] unable to read xattr id index table 01:40:31 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) 01:40:31 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x5, [@ext_cap={0x7}, @generic={0xa, 0x10, 0x3, "0f97d2d9480530"}, @ptm_cap={0x3}, @wireless={0xb}, @ssp_cap={0xc}]}}) 01:40:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) 01:40:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00'}) 01:40:31 executing program 2: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x2ef}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:40:31 executing program 4: socketpair(0x27, 0x0, 0x0, &(0x7f00000019c0)) socket$pptp(0x18, 0x1, 0x2) 01:40:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7, 0xffffffc1, 0x800, 0x6, 0x1, 0x1, 0x2c81}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 01:40:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000480)={0x1, 0x0, [{}]}) [ 288.050616][ T37] audit: type=1804 audit(1617154831.298:16): pid=15174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/287/cgroup.controllers" dev="sda1" ino=14777 res=1 errno=0 [ 288.185480][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 288.235298][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 288.315222][ T9606] Bluetooth: hci0: command 0x0406 tx timeout [ 288.323892][ T9606] Bluetooth: hci1: command 0x0406 tx timeout 01:40:31 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)) [ 288.362065][ T9606] Bluetooth: hci3: command 0x0406 tx timeout [ 288.395097][ T9606] Bluetooth: hci2: command 0x0406 tx timeout 01:40:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) [ 288.434094][ T9606] Bluetooth: hci4: command 0x0406 tx timeout [ 288.455257][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 288.471209][ T9606] Bluetooth: hci5: command 0x0406 tx timeout [ 288.605408][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 288.627279][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 01:40:31 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) [ 288.656095][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 288.664836][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 288.680362][ T37] audit: type=1804 audit(1617154831.928:17): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/288/cgroup.controllers" dev="sda1" ino=14019 res=1 errno=0 [ 288.697406][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.732867][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.817062][T15204] loop3: detected capacity change from 0 to 264192 [ 288.915372][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.925664][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.935078][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.943236][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.954685][ T7] usb 3-1: Product: syz [ 288.960059][ T8] usb 2-1: Product: syz [ 288.964387][ T7] usb 3-1: Manufacturer: syz [ 288.970828][ T8] usb 2-1: Manufacturer: syz [ 288.977034][ T7] usb 3-1: SerialNumber: syz [ 288.981806][ T8] usb 2-1: SerialNumber: syz 01:40:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7, 0xffffffc1, 0x800, 0x6, 0x1, 0x1, 0x2c81}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 289.305226][ T7] usb 3-1: 0:2 : does not exist [ 289.336393][ T7] usb 3-1: USB disconnect, device number 8 [ 289.405330][ T8] usb 2-1: 0:2 : does not exist [ 289.448993][ T8] usb 2-1: USB disconnect, device number 3 [ 290.015287][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 290.024915][ T4867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 290.275026][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 290.445526][ T4867] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.454270][ T4867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.483313][ T4867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.484999][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.502217][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 290.512826][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.654543][ T4867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.666006][ T4867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.674249][ T4867] usb 3-1: Product: syz [ 290.674936][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.679086][ T4867] usb 3-1: Manufacturer: syz [ 290.692461][ T4867] usb 3-1: SerialNumber: syz [ 290.702745][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.724799][ T8] usb 2-1: Product: syz [ 290.729007][ T8] usb 2-1: Manufacturer: syz [ 290.733617][ T8] usb 2-1: SerialNumber: syz [ 290.985107][ T4867] usb 3-1: 0:2 : does not exist [ 291.006046][ T4867] usb 3-1: USB disconnect, device number 9 [ 291.075013][ T8] usb 2-1: 0:2 : does not exist [ 291.108325][ T8] usb 2-1: USB disconnect, device number 4 01:40:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:34 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00e0000200040000001201000000000000f801000000000000ac01000000000000e0010000000000007f000000000000001f0100000000000076010000000000009a010000000000001a73797a6b616c6c6572203a200020438c01200000009820002838001100009e001d0200ed0100000100911d675f40012b0100644c002a7d00032d6e001a040f000300ff277c005901006d08264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c6530b5000129750102c40b7d00294d00074d0009297d000529f5010a2da402e6177e04bc002add00065d0160de0328232cdc006d0dff410000291f000100c027ed0007dc04651f545d1a085c001100004800130100a100034d00204c00090200040066696c65304000015002b2013104d404f7050200088003032e636f6c647e590201f9069e4001ec080131d60005273100322a3100331100000a00136000a1001fdc0011000069010000000000001a001200c1007edd0020dd0040dd009edd00d6de001201bc001100007e0100000000000008805cf90100535f0100a2010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000b4010000000000000100000000000000d101", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) 01:40:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7, 0xffffffc1, 0x800, 0x6, 0x1, 0x1, 0x2c81}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 01:40:34 executing program 2: syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x2ef}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 01:40:34 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) [ 291.782312][T15302] loop1: detected capacity change from 0 to 264192 [ 291.841420][T15308] loop3: detected capacity change from 0 to 264192 01:40:35 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00e0000200040000001201000000000000f801000000000000ac01000000000000e0010000000000007f000000000000001f0100000000000076010000000000009a010000000000001a73797a6b616c6c6572203a200020438c01200000009820002838001100009e001d0200ed0100000100911d675f40012b0100644c002a7d00032d6e001a040f000300ff277c005901006d08264c00000e2f746d702f73797a2d696d61676567656e3431393737363339322f66696c6530b5000129750102c40b7d00294d00074d0009297d000529f5010a2da402e6177e04bc002add00065d0160de0328232cdc006d0dff410000291f000100c027ed0007dc04651f545d1a085c001100004800130100a100034d00204c00090200040066696c65304000015002b2013104d404f7050200088003032e636f6c647e590201f9069e4001ec080131d60005273100322a3100331100000a00136000a1001fdc0011000069010000000000001a001200c1007edd0020dd0040dd009edd00d6de001201bc001100007e0100000000000008805cf90100535f0100a2010000000000001b001e00000600786174747231060000c401274d0032274d00321100000d001200c100024d00244c00110000b4010000000000000100000000000000d101", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) 01:40:35 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:35 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) [ 291.940629][ T37] audit: type=1804 audit(1617154835.189:18): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/289/cgroup.controllers" dev="sda1" ino=14789 res=1 errno=0 [ 292.087391][ T9678] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 292.110264][T15324] loop1: detected capacity change from 0 to 264192 01:40:35 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:35 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) [ 292.203461][T15329] loop3: detected capacity change from 0 to 264192 01:40:35 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:35 executing program 1: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000001f8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/31, 0x1f) 01:40:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:35 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) [ 292.475845][T15342] loop3: detected capacity change from 0 to 264192 [ 292.485982][ T9678] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 292.501015][ T9678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.504441][T15345] loop1: detected capacity change from 0 to 264192 [ 292.548206][ T9678] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 01:40:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7, 0xffffffc1, 0x800, 0x6, 0x1, 0x1, 0x2c81}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 292.695422][ T37] audit: type=1804 audit(1617154835.949:19): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/290/cgroup.controllers" dev="sda1" ino=14789 res=1 errno=0 [ 292.805274][ T9678] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.818785][ T9678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.849777][ T9678] usb 3-1: Product: syz [ 292.854371][ T9678] usb 3-1: Manufacturer: syz [ 292.879058][ T9678] usb 3-1: SerialNumber: syz [ 293.234853][ T9678] usb 3-1: 0:2 : does not exist [ 293.261205][ T9678] usb 3-1: USB disconnect, device number 10 01:40:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xee01) 01:40:37 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/bsg\x00', 0x10000, 0x0) 01:40:37 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendfile(r0, r1, 0x0, 0x800000bf) 01:40:37 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r0, r1) 01:40:37 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:37 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/36, 0x24}], 0x1, 0x0) 01:40:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/anycast6\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) [ 293.983280][ T37] audit: type=1804 audit(1617154837.229:20): pid=15403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/291/cgroup.controllers" dev="sda1" ino=14804 res=1 errno=0 01:40:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x12, 0x4) 01:40:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x63, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}}, 0x0) 01:40:37 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:37 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 01:40:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r1, r0) 01:40:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:40:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000300)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xe88, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}]}, {0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "085407169ebdc38a63ccbd4cc7cb1700ee9b23874227b02fda8468a12049e049"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x648, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, @WGPEER_A_ALLOWEDIPS={0x498, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6802acb7a57f545839ba73539fbe7d883c37e783de9f37437079708115123c5"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "25e8e0d5882e9618b28df56f6171aea19bb285ddebe831c0602b60a6f74214cf"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={[], [], @private}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a091f2dedbd4e67c38f00e99d187e88ad08e9500aa22a69f6b3ea9d8e6fd86c0"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}, {0x3ec, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}]}]}, 0xec8}}, 0x0) 01:40:37 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:37 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200, 0x0) 01:40:37 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) msgctl$IPC_RMID(r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 294.614060][ T37] audit: type=1804 audit(1617154837.859:21): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/292/cgroup.controllers" dev="sda1" ino=14805 res=1 errno=0 01:40:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x11, r0, 0x0) 01:40:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x40801, 0x0) write$9p(r0, 0x0, 0x0) 01:40:38 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 01:40:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:38 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 01:40:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 01:40:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 01:40:38 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x0) 01:40:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x0) 01:40:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:38 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:38 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) 01:40:38 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 01:40:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 01:40:38 executing program 2: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) 01:40:38 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2200, 0x0) [ 295.582750][ T37] audit: type=1804 audit(1617154838.829:22): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/294/cgroup.controllers" dev="sda1" ino=14813 res=1 errno=0 01:40:38 executing program 4: bpf$BPF_PROG_TEST_RUN(0x10, 0x0, 0x0) 01:40:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 01:40:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:39 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:39 executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 01:40:39 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 01:40:39 executing program 4: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 01:40:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xde, &(0x7f0000000300)=""/222, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:40:39 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) [ 296.029742][ T37] audit: type=1804 audit(1617154839.279:23): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/295/cgroup.controllers" dev="sda1" ino=14782 res=1 errno=0 01:40:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000100)=""/219, 0x26, 0xdb, 0x1}, 0x20) 01:40:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:40:39 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000440)) 01:40:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:39 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/189, 0xbd}], 0x1}, 0x0) 01:40:39 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x5}]}}, &(0x7f0000000100)=""/219, 0x26, 0xdb, 0x1}, 0x20) 01:40:39 executing program 4: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 01:40:39 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000140)="14", 0x1}, {&(0x7f0000000180)="a6", 0x1}], 0x3, &(0x7f00000008c0)=[{0x10}], 0x10}, 0x0) 01:40:39 executing program 4: bpf$BPF_PROG_TEST_RUN(0x16, 0x0, 0x0) 01:40:39 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) [ 296.573463][ T37] audit: type=1804 audit(1617154839.819:24): pid=15517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/296/cgroup.controllers" dev="sda1" ino=14810 res=1 errno=0 01:40:39 executing program 2: perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:40:39 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000002a00)) 01:40:40 executing program 4: socketpair(0x0, 0x0, 0x401, &(0x7f0000000000)) 01:40:40 executing program 2: bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 01:40:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 297.115853][ T37] audit: type=1804 audit(1617154840.369:25): pid=15543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/297/cgroup.controllers" dev="sda1" ino=14194 res=1 errno=0 01:40:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:40:40 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:40 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000540)="98", &(0x7f0000000580)="1d"}, 0x48) 01:40:40 executing program 2: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:40:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000005a80)={0x0, 0x0, 0x0}, 0x44040) 01:40:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:40:40 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 01:40:40 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:40 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16e, 0x16e, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @datasec={0x0, 0xd, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "e4"}, @func_proto, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], '\x00'}, @struct={0x0, 0x8, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x18d}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:40:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00000001c0)=@nl=@proc, 0x80) 01:40:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:40:41 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffe) 01:40:41 executing program 4: shmget(0x2, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) [ 297.723608][T15571] ptrace attach of "/root/syz-executor.4"[15570] was attempted by "/root/syz-executor.4"[15571] [ 297.745730][ T37] audit: type=1804 audit(1617154840.999:26): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/298/cgroup.controllers" dev="sda1" ino=14805 res=1 errno=0 01:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 01:40:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000580)=@in={0x2, 0x0, @multicast2}, 0x80) 01:40:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:40:41 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @func_proto, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], '\x00'}, @volatile, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x85}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:40:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='ip6erspan0\x00'}) 01:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004180)=[{{&(0x7f0000000000)=@generic={0x0, "f29ba1ed3e318c3aa6def3b6d6610b3eab73c10e28d45f81722db8d6a8e3e693a53ffa2aa4a44c2f61e67c70d0f77fc5340e9f3931577186ba459b5ffbb3780b0b33455a80dbddadd7c1e7b243b55d76739cd0babb03d6eeeaebe5d79d897bcda3d02b4879741a5acc857a93887220bc512740279c7e0d33adcd5746b51b"}, 0x80, 0x0, 0x0, &(0x7f0000007340)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 298.177928][T15593] ptrace attach of "/root/syz-executor.4"[15592] was attempted by "/root/syz-executor.4"[15593] [ 298.196581][ T37] audit: type=1804 audit(1617154841.449:27): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/299/cgroup.controllers" dev="sda1" ino=14784 res=1 errno=0 01:40:43 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:43 executing program 3: timer_create(0x0, &(0x7f0000001040)={0x0, 0x0, 0x4, @thr={&(0x7f0000000040), 0x0}}, 0x0) 01:40:43 executing program 4: timer_create(0xff000000, 0x0, &(0x7f0000000280)) 01:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40030000000000}}, 0x0) 01:40:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:40:43 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000001640)=@xdp, &(0x7f00000016c0)=0x80) 01:40:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0xc0}, 0x0) 01:40:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 01:40:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 01:40:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x1) 01:40:43 executing program 4: socket(0xa, 0x2, 0x3) [ 300.306110][ T37] audit: type=1804 audit(1617154843.560:28): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/300/cgroup.controllers" dev="sda1" ino=14845 res=1 errno=0 01:40:43 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b", 0x3f}, 0x60) 01:40:43 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x84) 01:40:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="5d89355db98b26276c617585daf1b6c8621b66f4f6c6b3adba83aa6662e3e737904dad926def08b07bf2e47f5e0e5a8a4900c7a4fab71848c41b7bd15e737fb87e8a1b4979c619bf9dd434df3007b9e5a646da13aa5f383e231b05923e81", 0x5e}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f0000000300)="7339ebb1414992909805d261ce882301740da90cd2d0bd53a285fda6e6a286a437aa065cfa29a24991a338728cf2513cd14d18f2311d0dbb3021ae02a7339d8e0b613bd4e02117d317f1f7b6c7e0a7dd540de3186c368fdb2fbed92bc5f61b3cc2ff2c134ac90566fb922f87d37906a17ee4fde058cbc511b16d74920270c283afb0b597cb1e724b7a92622e24d71ae19fd6bb164f4a0438975ab5f6b8f8b800a354570d745ff94e1e2f5b0d1d", 0xad}, {&(0x7f0000000100)="468fc025093afad25ee17d7dc9ee21022d814b2d", 0x14}, {&(0x7f0000000840)="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", 0xde4}], 0x5}], 0x1, 0x0) 01:40:43 executing program 3: socketpair(0x10, 0x2, 0x400, &(0x7f0000000000)) 01:40:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 01:40:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 01:40:44 executing program 2: timer_create(0xfeffffff, 0x0, &(0x7f0000000280)) 01:40:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x624a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:40:44 executing program 3: io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r0, 0x0, 0x0) 01:40:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000010dc0)=[{0x0, 0x0, 0x0}], 0x1, 0x44001) 01:40:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x5605, 0x0) 01:40:44 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @func_proto, @struct={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @volatile, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xd6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 301.291577][T15660] ptrace attach of "/root/syz-executor.2"[15658] was attempted by "/root/syz-executor.2"[15660] 01:40:46 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 01:40:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[{0x10}], 0x10}}], 0x1, 0x0) 01:40:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 01:40:46 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000000)='J', 0x1, 0x4}, {&(0x7f00000000c0)="e0", 0x1}, {&(0x7f0000000280)="f2bf74", 0x3, 0xfffffffffffffffe}, {&(0x7f0000000200)="81", 0x1}]) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 01:40:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x764}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:40:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 01:40:46 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000005a00)='/dev/autofs\x00', 0x10200, 0x0) 01:40:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@tipc=@name, 0x80, 0x0}, 0x0) 01:40:46 executing program 2: getgroups(0x1, &(0x7f0000002940)=[0x0]) [ 303.182937][T15683] loop4: detected capacity change from 0 to 16383 01:40:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x7, 0x0, 0xc04a01, 0x0, 0x3}}) 01:40:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:46 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000000)="d5", 0x1, 0x80000001}, {&(0x7f0000000100)='M', 0x1, 0x100000001}, {&(0x7f0000000180)="e2", 0x1}, {&(0x7f0000000280)='r', 0x1}]) [ 304.460871][ T37] audit: type=1800 audit(1617154847.710:29): pid=15711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=14854 res=0 errno=0 01:40:49 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 01:40:49 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x1, 0x0) 01:40:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x300}, 0x0) 01:40:49 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x2) 01:40:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xbb0, 0x0, 0x1}, 0x40) 01:40:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00'}) 01:40:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreq(r0, 0x0, 0x16, 0x0, 0x0) 01:40:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 01:40:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8912, 0x0) 01:40:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 01:40:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') openat$cgroup(r0, &(0x7f00000010c0)='syz1\x00', 0x200002, 0x0) [ 306.843638][ T37] audit: type=1800 audit(1617154850.090:30): pid=15740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=14874 res=0 errno=0 01:40:51 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 01:40:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 01:40:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001280)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 01:40:51 executing program 1: io_setup(0x1, &(0x7f0000000040)=0x0) io_setup(0x8, &(0x7f0000000080)) io_destroy(r0) 01:40:51 executing program 3: request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 01:40:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:51 executing program 3: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, r0+60000000}, 0x0) 01:40:51 executing program 4: socketpair(0x11, 0x3, 0x3, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 01:40:51 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2280, 0x0) 01:40:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000700)={'wlan1\x00', @ifru_map}) 01:40:52 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:40:52 executing program 2: syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x0, 0x10444) [ 309.430054][ T37] audit: type=1804 audit(1617154852.680:31): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/306/cgroup.controllers" dev="sda1" ino=14890 res=1 errno=0 01:40:54 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b"}, 0x60) 01:40:54 executing program 3: epoll_create1(0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)) 01:40:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000100)="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"}) 01:40:54 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f610500020000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000fcf4453a3ebc26b20825aded8f4c8740a69836544fad782439bdc4508f1ecb5afbd7a1f0c3ebd8a33127b1788591d5341cee3828bf2798b59e6959f96b960cb585373d2db0b6cfc41c191d90b58d0b00dd7d777523ab1f272b27b1f64f44ec22ab16337b87f83da944b7519e7ca924848ee8d5e581cf3a990ec1aebb5ccd1b833dea03730f0e8f5109c94502f4fed2b520fcba6"], 0x28}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0xfffffffffffffd82}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='i'], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 01:40:54 executing program 2: socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000fc0)='team\x00', r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001440)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 01:40:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:54 executing program 3: syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept(r0, 0x0, 0x0) 01:40:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 01:40:54 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f610500020000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000fcf4453a3ebc26b20825aded8f4c8740a69836544fad782439bdc4508f1ecb5afbd7a1f0c3ebd8a33127b1788591d5341cee3828bf2798b59e6959f96b960cb585373d2db0b6cfc41c191d90b58d0b00dd7d777523ab1f272b27b1f64f44ec22ab16337b87f83da944b7519e7ca924848ee8d5e581cf3a990ec1aebb5ccd1b833dea03730f0e8f5109c94502f4fed2b520fcba6"], 0x28}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0xfffffffffffffd82}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='i'], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 01:40:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:54 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000280)) 01:40:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) 01:40:56 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b"}, 0x60) 01:40:56 executing program 1: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1a1bc0, 0x0) close(r0) 01:40:56 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f610500020000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000fcf4453a3ebc26b20825aded8f4c8740a69836544fad782439bdc4508f1ecb5afbd7a1f0c3ebd8a33127b1788591d5341cee3828bf2798b59e6959f96b960cb585373d2db0b6cfc41c191d90b58d0b00dd7d777523ab1f272b27b1f64f44ec22ab16337b87f83da944b7519e7ca924848ee8d5e581cf3a990ec1aebb5ccd1b833dea03730f0e8f5109c94502f4fed2b520fcba6"], 0x28}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0xfffffffffffffd82}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='i'], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 01:40:56 executing program 2: open$dir(&(0x7f0000000200)='./file0\x00', 0x4040, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) 01:40:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:40:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) [ 313.508655][ T37] audit: type=1800 audit(1617154856.761:32): pid=15860 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=14929 res=0 errno=0 01:40:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x15) 01:40:56 executing program 4: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007021dfffd946f610500020000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000002900000032000000fc01000000000000000000000000000fcf4453a3ebc26b20825aded8f4c8740a69836544fad782439bdc4508f1ecb5afbd7a1f0c3ebd8a33127b1788591d5341cee3828bf2798b59e6959f96b960cb585373d2db0b6cfc41c191d90b58d0b00dd7d777523ab1f272b27b1f64f44ec22ab16337b87f83da944b7519e7ca924848ee8d5e581cf3a990ec1aebb5ccd1b833dea03730f0e8f5109c94502f4fed2b520fcba6"], 0x28}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0xfffffffffffffd82}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='i'], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0) 01:40:56 executing program 1: open$dir(&(0x7f0000000200)='./file0\x00', 0x4040, 0x0) readlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=""/80, 0x50) 01:40:56 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 01:40:56 executing program 2: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1e31c0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x18) 01:40:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7, 0x0, 0x0, 0x0, 0x85000000}) [ 313.858279][ T37] audit: type=1800 audit(1617154857.111:33): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14939 res=0 errno=0 [ 313.998269][ T37] audit: type=1800 audit(1617154857.161:34): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14939 res=0 errno=0 01:40:58 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xfffffffffffffe86, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "792cab69531fe113f2e0f75cdf3aeda81c86903de4860000000000000000191eeedc8039f8b6f67288d5119ad15758e01740b7f693e17dcc21a7ef76a37f3b"}, 0x60) 01:40:58 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 01:40:58 executing program 4: open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = io_uring_setup(0x7adc, &(0x7f0000000040)) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000000c0)=r3, 0x1) 01:40:58 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2140, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup2(r1, r0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 01:40:58 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8, 0xbf, 0x62, 0x20, 0x4b4, 0x1002, 0xb7c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x55, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 01:40:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r0, 0xc0045878) 01:40:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr\x00') getdents(r2, &(0x7f0000000140)=""/163, 0xa3) getdents(r2, &(0x7f0000000000)=""/223, 0xdf) 01:40:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}, @in={0x2, 0x0, @multicast2}]}, &(0x7f0000000080)=0x10) 01:40:59 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 01:40:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000004140), 0x1, 0x0, 0x0) 01:40:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3d}, {0x45}, {0x6}]}) [ 316.132743][ T9606] usb 3-1: new high-speed USB device number 11 using dummy_hcd 01:40:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 316.325322][ T37] audit: type=1326 audit(1617154859.581:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 316.392971][ T9606] usb 3-1: Using ep0 maxpacket: 32 [ 316.533146][ T9606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.552694][ T9606] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=b7.c7 [ 316.581478][ T9606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.605974][ T9606] usb 3-1: config 0 descriptor?? [ 316.848161][ T8] usb 3-1: USB disconnect, device number 11 [ 316.957028][ T3244] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.963419][ T3244] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.632539][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 317.872595][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 317.992923][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.003355][ T7] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=b7.c7 [ 318.014631][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.025742][ T7] usb 3-1: config 0 descriptor?? [ 318.272748][ T7] usb 3-1: USB disconnect, device number 12 01:41:01 executing program 2: r0 = epoll_create(0x8000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x60000004}) 01:41:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x130, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "a776c365b01a41e518420c054170d694c9ba7d94e309d2e286528941f051a37879e0841cc008dfe35fe9f0f926ba80360eb6c9cdac79a4796d22c0e7757c214a94597d353f5ed71f42e51ed34876b29547b76a25bc1f42d46f1d79d1099342a578ac3ef459960385b729db35cd3cbc13c80b0b165fa8fdec5d3d01b83e961bee2074148e102b11062dcae9eb92f62c3312df5df3ddb89564d74e1526225c3cc770aa63113573e504e26c0f71bc57832a6ab3bd3f2ab5ab6b838c57cca837d2b8ed3bee67277fe16b9734df8c6fa6fbb545980b8e7961d084e874917f3fdee4d14cfb14140439fee9baac47a5200effcb3a4662ac22283e38166ad2170e8b4a"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "3bb0ac78b135010897164c7db1465f50bb85016c0947b5536cc69adca08422bc449e48aa27e2a52c6f6bee481753afc3e845b2b5b8a5eca025bc232b0872341ea0257faa0404e0b1ca1bc94514a492adf9747e968e48caa7705517279337f5270586da52936a800ac23bc3218e90b7f7bb85276acf19bb576242cf99ddda76482f6ed6021de7ce9c408ecd173f36866902a97ba401cb6bd9bc163260b4bcbf8d872ccf3cb53e5c7d07e52791894bfe0346998b6722c705c38ff42b54e02ea6bc6b9502e21b429a49d1e3bd7048ceaf085a85fccf3c91fbf81b394e2b0b44a03d220c5676ce77b2dcd0832a3ffa9b5ce10045c458de17a7bd981eb0ae1eaf80"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3b877edb3294"}]}, @NL80211_ATTR_NAN_FUNC={0xae8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xae4, 0xd, 0x0, 0x1, [{0x4}, {0x79, 0x0, "5ee5caa92f6507fa2f888b7744f0f2cf5a478b40d75673922bd6e286ecb1a1ef56ce69c45a95155e0dfe7b2daf668468d6693d2ece8fb5c6b7ccbb4ac09cbd90e7baeea10498f5b0cda919ec3e60ba9a22ea8d781569538c41c2b37d5b4c74b9a2cb061421e9ffe43e406ddb93eb219da8fbf6d088"}, {0xb9, 0x0, "34dd4484e4efffc0119b9f5c2238fe17d15627fe7e00a917e4ca62860ac6db885c89206eab21e3030385f9753bb260f0ef7b39dc7e1b1918fdb63154428cc220a9816e4e3a109f5e178fe28a4f147ec0c0724ff6ab8a1051af006de899dd29e7f424fe535a2c2c51073a5be606df7aa3709b7e7d9cbd9a2c9ecc678517bea4d7e460dc78586bea0416b22fb9ba6b23ec6258c1255ed6d0e8c4f722e54fbb62b7c7556201cd0a4f8c24e5878bd379ce850c27126f56"}, {0x9, 0x0, "b71712ae75"}, {0xea, 0x0, "264dea74d3d60bae4a11b0765b724b3e7ecb351a0a510a6dcc15decace2e624150f061b84cd55b177828685eaa994a3639dab1d23063e61a5edb49338fc1b31662f7319d171a5f7b58bf231969adbc75862da563344a2841fec9f01ed766719fe308980eb71d8d5e3319b289dc5cc42cac696b5d7cad5310227198ccd68a3e8e450a6b9761664998e26709a8a8a93df37ee166e29b31e281aa8c6f8cb9501a4d82dba13e73a73e1c84ecb24904ba547b3592c4d98e6643ac923a0f6854214a5de2765ed3560de763bfec6922ff990e85f5ef7cb657acd7ef564d85d8d0c20169196cec8783c9"}, {0x8a9, 0x0, "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"}]}]}]}, 0xec4}}, 0x0) 01:41:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x130, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "a776c365b01a41e518420c054170d694c9ba7d94e309d2e286528941f051a37879e0841cc008dfe35fe9f0f926ba80360eb6c9cdac79a4796d22c0e7757c214a94597d353f5ed71f42e51ed34876b29547b76a25bc1f42d46f1d79d1099342a578ac3ef459960385b729db35cd3cbc13c80b0b165fa8fdec5d3d01b83e961bee2074148e102b11062dcae9eb92f62c3312df5df3ddb89564d74e1526225c3cc770aa63113573e504e26c0f71bc57832a6ab3bd3f2ab5ab6b838c57cca837d2b8ed3bee67277fe16b9734df8c6fa6fbb545980b8e7961d084e874917f3fdee4d14cfb14140439fee9baac47a5200effcb3a4662ac22283e38166ad2170e8b4a"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3b877edb3294"}]}, @NL80211_ATTR_NAN_FUNC={0x59c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x588, 0xd, 0x0, 0x1, [{0x4}, {0x7a, 0x0, "5ee5caa92f6507fa2f888b7744f0f2cf5a478b40d75673922bd6e286ecb1a1ef56ce69c45a95155e0dfe7b2daf668468d6693d2ece8fb5c6b7ccbb4ac09cbd90e7baeea10498f5b0cda919ec3e60ba9a22ea8d781569538c41c2b37d5b4c74b9a2cb061421e9ffe43e406ddb93eb219da8fbf6d0880c"}, {0xb9, 0x0, "34dd4484e4efffc0119b9f5c2238fe17d15627fe7e00a917e4ca62860ac6db885c89206eab21e3030385f9753bb260f0ef7b39dc7e1b1918fdb63154428cc220a9816e4e3a109f5e178fe28a4f147ec0c0724ff6ab8a1051af006de899dd29e7f424fe535a2c2c51073a5be606df7aa3709b7e7d9cbd9a2c9ecc678517bea4d7e460dc78586bea0416b22fb9ba6b23ec6258c1255ed6d0e8c4f722e54fbb62b7c7556201cd0a4f8c24e5878bd379ce850c27126f56"}, {0x9, 0x0, "b71712ae75"}, {0xe9, 0x0, "264dea74d3d60bae4a11b0765b724b3e7ecb351a0a510a6dcc15decace2e624150f061b84cd55b177828685eaa994a3639dab1d23063e61a5edb49338fc1b31662f7319d171a5f7b58bf231969adbc75862da563344a2841fec9f01ed766719fe308980eb71d8d5e3319b289dc5cc42cac696b5d7cad5310227198ccd68a3e8e450a6b9761664998e26709a8a8a93df37ee166e29b31e281aa8c6f8cb9501a4d82dba13e73a73e1c84ecb24904ba547b3592c4d98e6643ac923a0f6854214a5de2765ed3560de763bfec6922ff990e85f5ef7cb657acd7ef564d85d8d0c20169196cec8783"}, {0x4}, {0xad, 0x0, "2042b75bead4674746fb12565d23aa0014b1f2299f36d7d466caf23141d136238cb666c75d14f75ac5f1b3da7b32de6508b59cbba361fbd8bcb9d7977694da2402c00c82756ba525eb0c16974c7288f92bf2d7b64e99f51a28a01600eeba538fc653f74a9cf39a2a26dfe987c89b7738672b53cd03f014486c8122daf61188144747abc10cfbab5faa9b246eea85ab638b868fa4b0fc337a735628da7d7757e9292b90413b1087fc5b"}, {0xb4, 0x0, "d5edc678f8f71ed0ae35f22271cbdfd9cdcb65b805cb504ce0a072e8effb18d2a0136c73107a8bad6e41844d651706997df00e525135c53ea7b0e7aec6d9f5b286855dca9e4955496eacbb9c4eed6c8b47bfe82aaf4e48fffca73fa7b2f5b846e4ea586bdb0be5ec39e3e7d0ee8782ff2d8a3d6c3645f1260547acefd1b013c0fc512507cf1d876c009cea8543b4f4d8a985e9e801dfea1f68246baf1ddbff7abb900419e451fcfed3cbc7ee1ac0db95"}, {0xec, 0x0, "084cf6478f219105a2649f6875e8c8787b37835c85fc7e2dd878443ef605e0d43052278f717a8b3234083aaa9049f9116eb733cf25bb692dbd014185adb5e43bb27f261b9a5237150ff21b833547c24bbb6070305b34c58aad1c6e4c9b10d27c265c793662fad51ecfa0a1cc7a18293dd6496717b66ad016143727d8aecfcc8ddf9451a0f603ce3dba5fc21f0f3a72cc62f1893ab8448960551dd5593040d905fe45704f67d6d1c0ff4aeed64b126a9485c61d4e1cd7350961ef64e8f89068792de29a70dedc3c9776c727594d6dab915b16d0b05d805091a8ab74fd6777bde1fef8e2253a0f6359"}, {0xfb, 0x0, "6ddce04719b6ad4e54927ccafc4131167bd9812b97f8102928ea981ad58d882e1784b4bd6e17e979d0f3c7292e1b0530d3fcbfd340293737012f5c93e02ee0fa9966dbaded0bff27e80f655636c8462c06b49e3659c44967722ef227e8f3183cfc4eda55db203d1b880d8ba4d64512ced13a5c75e24059b823cf3dc21548c11a9e01e7c593dd9c11580c5d3317e84c8d8614d59d81e48b86a1f07b799fbeb67d5ecbff0852eb7a7b747a2526e48a52604a4bfac8bd92bc6d17ffdf4b05f3c21fa838d124cef3a64289479da0d817b93b031835e5d1a7bec004c63021339077556ba1e304da51dbf52b42549d0f4517679fbee15799bd81"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x80000001}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xec, 0xd, 0x0, 0x1, [{0xe7, 0x0, "745e9568a2a4dbea2a6c2b37a31a473f41c521bd44e4516b8ab4c9e29a46c5cc552f6ad606eb64d0f1594b46ea059b342d8f10558cefcdbced6b6518e556264c22b05fac8eb0f0443fbbfa974ab593f93ec5563751a8b606533ec6fa733239ed224f179c8a40666dc178958697838dd0500a47efcfae7dbb256c6b61997e7f2f6d85cdb38989174267bf9a2296065a39eeedf133a2acfbb9528ed3f1255f2d9e0555a117a7173e41a492d26540ee7f4ce85e28901bda68490b3e4721f98078567b48dec368fcb35f2f5452d96c21d2e1d476c5216c9b475cb4623a3538144ba797ce66"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x112c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x8c, 0xb, "aeb834918d3a43735085712ca8e07694d1dfe6f94a504fe792e4e818a11229657bd584161d74b0808121a6c3e25f7c7aa484fd53d1e8a60207d424c7169d934456b8fbeea7c45b451b83e9cca3c53e369b815274b7de0b496f8ef7561df6bc3076c78594e488e4e74ed72dd6201f45ec4a382602e0762eb3ee7e4a25cedd5119b77d75e2f69770d4"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x109c, 0xe, 0x0, 0x1, [{0xa4, 0x0, "6c890dda3e2d5f5d553691d57f0ce89a92a711c17164c1437b6d2dd4d8ebf20b3a17aead75db2e268e3218e73add7064d86f00190c957a26ff889d132002d363d0f6bc59e98fe03db2909f9ed335df649e428ec400b7a13b1fd40b73065ce23f4eda58ae4f3735b36d7626499c9b7499055536fb53219b08104e455dd7005d19dc7dd9fa882f9d7f5adaef445383429ef72cdd251080a5824942c5faef4fe879"}, {0xe84, 0x0, "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"}, {0x70, 0x0, "7eab7d86cafa176f7f65e160b074a966257a605fcd556238d3b72412a87bbeed8e6fab5ad9f21fc156bd813dbdf563f7cc4ed5b5b739e39b08dd6f6b083fbda680d8902096924d8fef9e0a65936a411c52bc7c146563c8cc513e1852782c2b8743bd816c5665303a442ab4c0"}, {0xfe, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "be229d5ea60d"}]}, @NL80211_ATTR_NAN_FUNC={0x670, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x458, 0xe, 0x0, 0x1, [{0xc9, 0x0, "23dda945ac64af2fb79df41d9471f39e65f39655c39c585b67a25b16a08d533a5af0bc09714004b1c493f5af8d4ff04f409a5d44bffe0ec153b8b621ee1aaee42a912310bcba975f8ac6aa8e16cd95c3def97fb029063661d9ab78c6b54b5e790a0bd11f268148ad03a9a5110a3c6c1001008e70f7d1566c553d2114007aac264bfd686bc2cf5f2069f98d38137495c18642049264ccbedb706503adcac027cfc1f66d8ceacca5c49d6a76318f2998fcb2b1d0db461338dd79f0e3dd504edca32900b8132c"}, {0xc5, 0x0, "e8a7457f95e0378c7b7576f73f30778d8f5810681652045ddd82f2c400f4111891555e8888b239706fec4319f6a9c3cda4976f31ef7c180056735ce566601e72466762bbd6ed04e1842a1e3c8545c1042de3bc9ed78609a710e8123fb0bdbf306fac55b9dfcc678577ffc6f3ad5b16f4cd39da411030d8c49257908f2e82960a306439c325d98a4c4ca5cf330655583f9820c23c35b6fbb2be6283f844d15b81034db69a5bfb23e8ec8cddfbc65608a6e5f7dc0dfda4c056b45b8485fa472c6cce"}, {0xe4, 0x0, "13ea2d44a26fff918177a420ce640e61d45a16827d47eb5127dbb1ae258288fbe7c76f6b0ccd251b67ae7daebd865a7d5ba6c1fb1d4f97bcbd871418cd5296cec73c88b45ac800e2845c5358e8b1edfa87ae50123d5bac34eb6746949c4fe06cf872f60c0a11c763eb748ed3df4f3db1ea5e0af98dc9c68bb5bf212e5c0dcf0d14abd037a90ce39170462d871f83e338fcfcacffe284b9fb6699afb4995d2d8bfd661e748a39fb661641d7d3215f78924dc559e59b97c45b3e58a77deb9863ad8f7ed1a2073974be2df58e7dcf1e8949b73492f8097f62bef34c5d2c91b5db9a"}, {0x4}, {0x27, 0x0, "c3203019ca683ce542ba7a1ac1af9914dce262ed5dbad63d3b63dfb8507b3ec480b738"}, {0x39, 0x0, "01d1742b038814dd583047c781ded17797bedcca1c068f27c9ef4cc7f8221a22a019b58e39cc85044600ed5901557e1f7bf345c491"}, {0xae, 0x0, "049c95e8ce57b332459b3ec6bbe859c87de51cb2598cccf8744aba834b6ae2803263cadbe047cd530dbdfcca4d5df94b9e3a92ddbf066ad1d10baefdcb3c134b1163a457f5a89624b557a1a48264c890b169c41406793496801ac61568aef9a6b1d624f3b0eac9158aaf7da356a099cf898f0ffe1ba8a4dfe7f22200ee19800d7a7785995cfc100db64066c51ef6474a124b247ee829277f1c9b3a6aff09da5efa7c741bde0989d63b41"}, {0xc1, 0x0, "72d5ca77f8f33a4b602f0454bc15b055b4b5844cd54d240295497a4f15d77c1c273524c918048cb4d3737c64784642d2e7ad16e60a2789ab2ab7e5497fc48274271cdd7dd4bdc5b4a89bb46a8e79f8badea4c863d70b6aff6d5013a73f3e9581241d4b6af2260d744ea69e2d8514bbcae78535dd09fdcbc3c7e174848a0da396e73c1fc7f2c93b9bd8949571a48f49fd9cb297be8e70c6bf5067bd6129268f4ad2d3fc8d3bb47391addd82cb5d917c4464a545e23df6d2a9dce104d4af"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_SRF={0x20c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "dfde532ea07e0da3c0c0a2f765bd7b262a77efd289bfb74a5ec3050e069b8fe4bc8f84d677f6f5e77d312164085161c7d10031d836a380fcf83263ea201321b033f37a282adc153471689081c99457edea112e5e8750e1b532480d909d01600c3ee3ffde94b371a601fbeafe0b77b52fd8e6bcf39751c50adbec740ea388a3a541e745bab9ff7f2ec35c6404a255db1dcc02833a1447cdde26a18fe503bf4dba54d2a3672828dee97aaa2742636ceb12af0613af8194899f92fe7b13b1d693e2af3442e21469555166cd62f6a8d549eaf5b3ed3caeecb90515f9710dacf53a4e6f68e55b9267a6d6481c488745eb44c14ac1f83cc9c2ca1d269c881f1a62c5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0x2240}, 0x1, 0x0, 0x0, 0x800}, 0x40) 01:41:01 executing program 1: syz_io_uring_setup(0x4e3e, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:41:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:01 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 01:41:02 executing program 1: mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mincore(&(0x7f0000fea000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/185) 01:41:02 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x14, 0x0, 0x0) 01:41:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:41:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x20005b}, @void, @val={0xc, 0x99, {0x0, 0x3f}}}}}, 0x28}}, 0x0) 01:41:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:02 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/capi20\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 01:41:02 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/zero\x00', 0x2c4c2, 0x0) 01:41:02 executing program 1: clone3(&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001140)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:41:02 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffeffff7fff, 0x0) 01:41:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 01:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:02 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) 01:41:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000300)="1c", 0x1}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}, 0x0) 01:41:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), 0x4) 01:41:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) 01:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x7fffffff, 0x0, 'client0\x00', 0x0, "571105e8e1437058", "2a36f433b4e628f21eaa19d2d4b5f043ea4e73550dd848d5a600297d17822ad2"}) 01:41:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 01:41:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) 01:41:02 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) 01:41:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:02 executing program 3: socketpair(0x29, 0x2, 0x2, &(0x7f0000000000)) 01:41:02 executing program 1: io_setup(0x200, &(0x7f0000000100)=0x0) io_submit(r0, 0x3, &(0x7f0000003840)=[0x0, 0x0, 0x0]) 01:41:02 executing program 5: socket$isdn(0x22, 0x2, 0x10) [ 319.798851][T16032] delete_channel: no stack [ 319.815266][T16032] delete_channel: no stack 01:41:03 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) 01:41:03 executing program 4: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000ffc000/0x4000)=nil, 0x3) 01:41:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00', r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 01:41:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7b, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:03 executing program 1: syz_io_uring_setup(0x1cb, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x27b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:41:03 executing program 4: getresuid(&(0x7f0000002cc0), 0x0, 0x0) syz_open_dev$char_raw(&(0x7f0000005240)='/dev/raw/raw#\x00', 0x1, 0x0) fork() getresuid(&(0x7f0000005280), &(0x7f00000052c0), &(0x7f0000005300)) 01:41:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x38}, 0x0) 01:41:03 executing program 3: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={[0x687]}, 0x8}) 01:41:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:03 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x420c0, 0x0) 01:41:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:41:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000100)="e9", 0x1}], 0x1}, 0x0) 01:41:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000240)={'veth1_to_bridge\x00', @ifru_settings={0x0, 0x0, @cisco=0x0}}) 01:41:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x40) 01:41:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:04 executing program 1: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000900)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000940)) 01:41:04 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0xc00, 0x0, 0x878, 0x878, 0xad0, 0xa10, 0xb68, 0xb68, 0xb68, 0xb68, 0xb68, 0x6, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'bridge0\x00', 'vlan1\x00'}, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}, {[{[{}, {}, {0x0, 0x2}, {}, {0x2}, {}, {}, {0x0, 0x2}], [{}, {0x0, 0x7a}, {}, {0xfffffff7}, {}, {}, {0x1}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {[{}, {}, {0x0, 0x1}], [{}, {}, {0x0, 0x1}, {}, {0x7}, {}, {}, {}, {}, {0x4}], 0x3}], 0x9}}]}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xc60) [ 321.296128][T16092] x_tables: duplicate underflow at hook 1 01:41:04 executing program 5: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9c48144df73e8ea7) 01:41:04 executing program 4: pipe(&(0x7f0000001000)={0xffffffffffffffff}) connect$pptp(r0, 0x0, 0x0) 01:41:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0xdd, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003040080"], 0x0, 0x0}, 0x0) 01:41:04 executing program 3: io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 01:41:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:04 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ab820021"}, 0x0, 0x0, @planes=0x0}) [ 321.842184][ T4867] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 322.145701][ T4867] usb 2-1: Using ep0 maxpacket: 32 01:41:05 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x4c2003, 0x0) 01:41:05 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "ebbd994a"}]}}) 01:41:05 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006a40)) 01:41:05 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x800) 01:41:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 322.282715][ T4867] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:41:05 executing program 4: pipe(&(0x7f0000001000)={0xffffffffffffffff}) accept(r0, 0x0, 0x0) 01:41:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0) [ 322.485585][ T4867] usb 2-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 322.515491][ T4867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:41:05 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff2000/0x2000)=nil, 0x4) [ 322.533468][ T4867] usb 2-1: Product: syz [ 322.538976][ T4867] usb 2-1: Manufacturer: syz [ 322.552194][ T4867] usb 2-1: SerialNumber: syz [ 322.702376][ T9678] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 322.962203][ T9678] usb 6-1: Using ep0 maxpacket: 8 [ 323.051039][ T4867] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 323.080691][ T4867] usb 2-1: USB disconnect, device number 5 [ 323.203136][ T9678] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.393035][ T9678] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 323.402247][ T9678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.410498][ T9678] usb 6-1: Product: syz [ 323.418394][ T9678] usb 6-1: Manufacturer: syz [ 323.423935][ T9678] usb 6-1: SerialNumber: syz [ 323.484474][ T9678] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 323.686489][ T4867] usb 6-1: USB disconnect, device number 10 [ 323.782248][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 324.022084][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 324.142342][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 324.313692][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 324.323027][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.331028][ T8] usb 2-1: Product: syz [ 324.336713][ T8] usb 2-1: Manufacturer: syz [ 324.341329][ T8] usb 2-1: SerialNumber: syz 01:41:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000240)) 01:41:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x6100, 0x0) 01:41:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:41:07 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) [ 324.462085][ T4867] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 324.544314][ T8] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 324.584912][ T8] usb 2-1: USB disconnect, device number 6 [ 324.732088][ T4867] usb 6-1: Using ep0 maxpacket: 8 [ 324.965405][ T4867] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.162209][ T4867] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 325.177026][ T4867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.190476][ T4867] usb 6-1: Product: syz [ 325.207165][ T4867] usb 6-1: Manufacturer: syz [ 325.211816][ T4867] usb 6-1: SerialNumber: syz [ 325.284937][ T4867] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 01:41:08 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0xffffffffffffff3b) 01:41:08 executing program 3: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) 01:41:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) 01:41:08 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:08 executing program 1: fanotify_mark(0xffffffffffffffff, 0x52, 0x0, 0xffffffffffffffff, 0x0) 01:41:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 325.339231][ T4867] usb 6-1: USB disconnect, device number 11 [ 325.458623][T16232] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 01:41:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x824, 0x1, 0x7, [], 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x40) 01:41:08 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) 01:41:08 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) 01:41:08 executing program 5: socket$isdn(0x11, 0x3, 0x0) 01:41:08 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:09 executing program 3: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x79, &(0x7f0000ffd000/0x1000)=nil, 0x2) 01:41:09 executing program 1: clone3(&(0x7f00000003c0)={0x20100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) 01:41:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x19}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) 01:41:09 executing program 5: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) 01:41:09 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={r0}, 0x0) 01:41:09 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 326.265137][ T37] audit: type=1804 audit(1617154869.522:36): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/325/cgroup.controllers" dev="sda1" ino=14967 res=1 errno=0 01:41:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:09 executing program 2: bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x8000, &(0x7f0000ff9000/0x7000)=nil, 0x4) 01:41:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:41:09 executing program 3: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0xcb416d85ae01ee59, 0x0) 01:41:09 executing program 1: r0 = gettid() clone3(&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001140)=[r0], 0x1}, 0x58) 01:41:09 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:09 executing program 2: socketpair(0x10, 0x2, 0x1, &(0x7f0000000000)) 01:41:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:41:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x2c}, {0x35, 0x0, 0x0, 0x1}, {0x6}]}) 01:41:09 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x700044a) 01:41:09 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 326.745449][ T37] audit: type=1326 audit(1617154870.002:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16280 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) [ 327.325518][ T37] audit: type=1804 audit(1617154870.582:38): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/326/cgroup.controllers" dev="sda1" ino=14567 res=1 errno=0 01:41:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x600}, 0x4) 01:41:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x824, 0x1}, 0x40) 01:41:10 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) 01:41:10 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:10 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, 0x0) 01:41:10 executing program 2: io_uring_setup(0x6ee3, &(0x7f0000000300)) 01:41:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:41:10 executing program 5: clone3(&(0x7f0000000580)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:41:10 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3157b6473db010b7, 0x30, 0xffffffffffffffff, 0x8000000) 01:41:10 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0xdd, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x7de}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x5d}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003040080091f5c6234f898d7bcd5a906d7c0000403"], &(0x7f0000000200)={0x0, 0x22, 0x11, {[@main, @local=@item_4={0x3, 0x2, 0x1, "c47dd348"}, @global=@item_4={0x3, 0x1, 0x0, "e3c24fcf"}, @global=@item_4={0x3, 0x1, 0x6, "e872bf56"}, @global]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xd9b}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000004c0)={0x20, 0x3, 0x1}}) [ 328.221791][ T9606] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 328.484554][ T37] audit: type=1804 audit(1617154871.742:39): pid=16334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/327/cgroup.controllers" dev="sda1" ino=14581 res=1 errno=0 [ 328.511767][ T9606] usb 4-1: Using ep0 maxpacket: 32 01:41:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:11 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) 01:41:11 executing program 1: clone3(&(0x7f0000000680)={0x1940080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:41:11 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:41:11 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 328.643995][ T9606] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.668679][ T9606] usb 4-1: config 1 interface 0 has no altsetting 0 01:41:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) 01:41:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004280)) 01:41:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newtclass={0x24}, 0x24}}, 0x0) 01:41:12 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 328.851917][ T9606] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 328.874542][ T9606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.910306][ T9606] usb 4-1: Product: syz [ 328.928106][ T9606] usb 4-1: Manufacturer: syz [ 328.952999][ T9606] usb 4-1: SerialNumber: syz 01:41:12 executing program 5: shmget$private(0x0, 0x3000, 0xb00, &(0x7f0000ffb000/0x3000)=nil) [ 329.661785][ T9606] usbhid 4-1:1.0: can't add hid device: -71 [ 329.669183][ T9606] usbhid: probe of 4-1:1.0 failed with error -71 [ 329.697882][ T9606] usb 4-1: USB disconnect, device number 8 [ 329.791313][ T37] audit: type=1804 audit(1617154873.042:40): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/328/cgroup.controllers" dev="sda1" ino=14581 res=1 errno=0 [ 330.231725][ T9606] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.481569][ T9606] usb 4-1: Using ep0 maxpacket: 32 [ 330.602391][ T9606] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.618057][ T9606] usb 4-1: config 1 interface 0 has no altsetting 0 [ 330.781773][ T9606] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 330.790879][ T9606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.807894][ T9606] usb 4-1: Product: syz [ 330.812709][ T9606] usb 4-1: Manufacturer: syz [ 330.817306][ T9606] usb 4-1: SerialNumber: syz 01:41:14 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) 01:41:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000001600)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1}, 0x0) 01:41:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:41:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x4040) 01:41:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 331.181855][ T9606] usbhid 4-1:1.0: can't add hid device: -71 [ 331.189441][ T9606] usbhid: probe of 4-1:1.0 failed with error -71 01:41:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030028000510d25a802e8c25940d0424fc60040018400a0011000200000037153e370a00038004000008d1bd", 0x33fe0}], 0x7}, 0x0) [ 331.251163][ T9606] usb 4-1: USB disconnect, device number 9 01:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:14 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xffffffffffffff0c) 01:41:14 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3d}, {0x84}, {0x6}]}) 01:41:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:14 executing program 5: pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 331.778027][ T37] audit: type=1326 audit(1617154875.032:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16422 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 331.898470][ T37] audit: type=1804 audit(1617154875.152:42): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/329/cgroup.controllers" dev="sda1" ino=15000 res=1 errno=0 01:41:15 executing program 1: openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) 01:41:15 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/mnt\x00') 01:41:15 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x5c7}, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 01:41:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:15 executing program 3: syz_io_uring_setup(0x16a, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:41:15 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 5: socketpair(0xa, 0x3, 0x3, &(0x7f0000000200)) 01:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:41:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) 01:41:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 01:41:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x24}}, 0x0) 01:41:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:15 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0xcf1cd4d6c692ff19, 0x0) [ 333.157886][ T37] audit: type=1804 audit(1617154876.412:43): pid=16455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/330/cgroup.controllers" dev="sda1" ino=15004 res=1 errno=0 01:41:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:16 executing program 5: socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) 01:41:16 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0xf40c3, 0x0) 01:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:16 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3d}, {0x14}, {0x6}]}) 01:41:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x40) 01:41:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:16 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 333.601701][ T37] audit: type=1326 audit(1617154876.862:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16487 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:17 executing program 5: socketpair(0x28, 0x0, 0xb23, &(0x7f0000000680)) 01:41:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x824, 0x1, 0x7}, 0x40) 01:41:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x5}, 0x4) 01:41:17 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, 0x0) 01:41:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ppp\x00', 0x0, 0x0) 01:41:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:17 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x22, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 01:41:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:17 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:18 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xc, 0x0, 0x0) 01:41:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2c, 0x0, 0x0) 01:41:18 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:18 executing program 5: clone3(&(0x7f0000000300)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 335.240436][ T37] audit: type=1804 audit(1617154878.492:45): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/334/cgroup.controllers" dev="sda1" ino=15015 res=1 errno=0 01:41:18 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 01:41:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) 01:41:19 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) 01:41:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) 01:41:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:19 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) 01:41:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) 01:41:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 336.306499][ T37] audit: type=1804 audit(1617154879.562:46): pid=16605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/336/cgroup.controllers" dev="sda1" ino=15017 res=1 errno=0 01:41:19 executing program 5: prctl$PR_MPX_ENABLE_MANAGEMENT(0x59616d61) 01:41:19 executing program 4: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:19 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x5c7}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 01:41:20 executing program 4: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:20 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x5c, 0x0) [ 337.027853][ T37] audit: type=1804 audit(1617154880.282:47): pid=16633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/337/cgroup.controllers" dev="sda1" ino=15008 res=1 errno=0 01:41:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 4: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 5: socket(0x1d, 0x0, 0xbf) 01:41:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:20 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 01:41:20 executing program 4: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 337.660409][ T37] audit: type=1804 audit(1617154880.912:48): pid=16666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/338/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 01:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) 01:41:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:21 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 5: prctl$PR_MPX_ENABLE_MANAGEMENT(0x25) 01:41:21 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)={0x5c7}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 01:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 338.284450][ T37] audit: type=1804 audit(1617154881.543:49): pid=16692 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/339/cgroup.controllers" dev="sda1" ino=15017 res=1 errno=0 01:41:21 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:21 executing program 5: socketpair(0x0, 0x5936c5eba22acf44, 0x0, 0x0) 01:41:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:22 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x31ccec8ea3eea2dd}, 0x18) 01:41:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 338.979228][ T37] audit: type=1804 audit(1617154882.233:50): pid=16721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/340/cgroup.controllers" dev="sda1" ino=14996 res=1 errno=0 01:41:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x44681, 0x0) 01:41:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:22 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:22 executing program 5: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10082}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:41:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 01:41:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:23 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:23 executing program 3: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000001540)='/dev/ppp\x00', 0x14000, 0x0) 01:41:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:23 executing program 3: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 340.052854][ T37] audit: type=1804 audit(1617154883.313:51): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/342/cgroup.controllers" dev="sda1" ino=14545 res=1 errno=0 01:41:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a8"], 0xa0}}, 0x0) 01:41:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 1: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:23 executing program 3: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 5: bpf$ITER_CREATE(0xd, 0x0, 0x0) 01:41:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 1: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:23 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:23 executing program 1: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:23 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x100, &(0x7f0000000380)=@string={0x100, 0x3, "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"}}]}) 01:41:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 341.131027][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd 01:41:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:24 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 341.401026][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 341.541078][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 341.742184][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 341.766644][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.785063][ T7] usb 6-1: Product: syz [ 341.793515][ T7] usb 6-1: SerialNumber: syz [ 341.860542][ T7] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 342.064620][ T7] usb 6-1: USB disconnect, device number 12 [ 342.840763][ T9606] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 343.080702][ T9606] usb 6-1: Using ep0 maxpacket: 8 [ 343.202037][ T9606] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 343.390757][ T9606] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 343.400441][ T9606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.409576][ T9606] usb 6-1: Product: syz [ 343.414558][ T9606] usb 6-1: SerialNumber: syz [ 343.473400][ T9606] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 01:41:26 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x8c000, 0x0) 01:41:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 343.681836][ T9341] usb 6-1: USB disconnect, device number 13 01:41:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 343.966097][ T37] audit: type=1804 audit(1617154887.213:52): pid=16866 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/343/cgroup.controllers" dev="sda1" ino=15068 res=1 errno=0 01:41:27 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 01:41:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 5: setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x03/', 0xffffffffffffffd6) 01:41:27 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:27 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000001080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @mcast2}}, 0x24) 01:41:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:28 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x59}}, 0x10) [ 344.968153][ T37] audit: type=1804 audit(1617154888.213:53): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/345/cgroup.controllers" dev="sda1" ino=15058 res=1 errno=0 01:41:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:28 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3d}, {0xac}, {0x6}]}) 01:41:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:28 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 345.554476][ T37] audit: type=1326 audit(1617154888.803:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16934 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:28 executing program 5: socket$isdn(0x22, 0x3, 0x3) [ 345.739781][ T37] audit: type=1804 audit(1617154888.983:55): pid=16944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/346/cgroup.controllers" dev="sda1" ino=15065 res=1 errno=0 01:41:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:29 executing program 5: socketpair(0xa, 0x3, 0x0, &(0x7f0000000200)) 01:41:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 346.265836][ T37] audit: type=1804 audit(1617154889.513:56): pid=16972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/347/cgroup.controllers" dev="sda1" ino=15063 res=1 errno=0 01:41:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:29 executing program 5: add_key$fscrypt_v1(&(0x7f00000002c0)='logon\x00', 0x0, &(0x7f0000000340)={0x0, "47a1c84b4971143529f36a43303e92fc24352c3fe0053c73a49669f6e0517b15f05700bef46784bda6d6c2f690c11ff621b257a098da025fe747a82adc55e4a0"}, 0x48, 0x0) 01:41:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:29 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030028000510d25a802e8c25940d0524fc6004000e400a0011000200000037153e370a00038004000008d1bd", 0x33fe0}], 0x7}, 0x0) 01:41:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 346.718220][ T37] audit: type=1804 audit(1617154889.963:57): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/348/cgroup.controllers" dev="sda1" ino=15062 res=1 errno=0 01:41:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:30 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) 01:41:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8) 01:41:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 347.524525][ T37] audit: type=1804 audit(1617154890.773:58): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/349/cgroup.controllers" dev="sda1" ino=15068 res=1 errno=0 01:41:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000000, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\tw4c'}, 0x0, 0x0, @fd}) 01:41:30 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:31 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 01:41:31 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:31 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 348.234986][ T37] audit: type=1804 audit(1617154891.483:59): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/350/cgroup.controllers" dev="sda1" ino=15088 res=1 errno=0 01:41:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 348.360471][ T9606] usb 6-1: new high-speed USB device number 14 using dummy_hcd 01:41:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:31 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 348.650533][ T9606] usb 6-1: Using ep0 maxpacket: 32 [ 348.770663][ T9606] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.838240][ T37] audit: type=1804 audit(1617154892.083:60): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/351/cgroup.controllers" dev="sda1" ino=15092 res=1 errno=0 [ 349.020685][ T9606] usb 6-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 349.040993][ T9606] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.049052][ T9606] usb 6-1: Product: syz [ 349.074929][ T9606] usb 6-1: Manufacturer: syz [ 349.079598][ T9606] usb 6-1: SerialNumber: syz [ 349.143065][ T9606] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 349.346195][ T9606] usb 6-1: USB disconnect, device number 14 [ 350.130259][ T7] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 350.370353][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 350.490481][ T7] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.680534][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 350.689736][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.703302][ T7] usb 6-1: Product: syz [ 350.707737][ T7] usb 6-1: Manufacturer: syz [ 350.714657][ T7] usb 6-1: SerialNumber: syz [ 350.783134][ T7] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 01:41:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400c2"], 0x24}}, 0x0) 01:41:34 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 350.969820][ T4867] usb 6-1: USB disconnect, device number 15 01:41:34 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 351.166071][ T37] audit: type=1804 audit(1617154894.413:61): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/352/cgroup.controllers" dev="sda1" ino=14241 res=1 errno=0 01:41:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x12001, &(0x7f0000006a40)) 01:41:34 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 351.770385][ T37] audit: type=1804 audit(1617154895.013:62): pid=17151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/353/cgroup.controllers" dev="sda1" ino=14050 res=1 errno=0 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 01:41:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 01:41:35 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 352.179511][ T37] audit: type=1804 audit(1617154895.423:63): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/354/cgroup.controllers" dev="sda1" ino=14322 res=1 errno=0 01:41:35 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xc102, 0x0) 01:41:35 executing program 5: waitid(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid(0x0, 0x0, &(0x7f00000001c0), 0x4, 0x0) 01:41:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:35 executing program 5: shmget$private(0x0, 0x3000, 0xc00, &(0x7f0000ffb000/0x3000)=nil) 01:41:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 01:41:35 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 352.844225][ T37] audit: type=1804 audit(1617154896.093:64): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/355/cgroup.controllers" dev="sda1" ino=14434 res=1 errno=0 01:41:36 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) 01:41:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 01:41:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:36 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, r0/1000+10000}}, &(0x7f00000000c0)) 01:41:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 01:41:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 353.418337][ T37] audit: type=1804 audit(1617154896.664:65): pid=17224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/356/cgroup.controllers" dev="sda1" ino=14451 res=1 errno=0 01:41:36 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x0, 0x0) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) 01:41:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 01:41:36 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:37 executing program 5: mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/195) 01:41:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2f0}}, 0x0) 01:41:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2f0}}, 0x0) [ 353.981574][ T37] audit: type=1804 audit(1617154897.234:66): pid=17250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/357/cgroup.controllers" dev="sda1" ino=14113 res=1 errno=0 01:41:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x3}, 0x4) 01:41:37 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2f0}}, 0x0) 01:41:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000001600)=[{&(0x7f00000000c0)="b05a9048649d15b15040af22bc53e1d00a681cba1361e1b3cfbfc81ea5ce59f1d7304b", 0x23}, {&(0x7f0000000100)="e97c1cf9f2dd8a16e22e99ae5a5c4bd0f1a5a78e67d3697a2453a7685d587eab3eb88bdbfdfccf23cc3b1975cb23c9626f557186954657dbdc90367d6a37becc45241a2724d19929e745bd4eaef4b3c533a397d18aaf", 0x56}, {&(0x7f0000000180)="15ededd3d5b29a63165eb095777ee5dd7cecbeb9dc5d48d13a1680033fe635146bbb976bd3ba74fec78503ca7a93d44eb656b744ca17c16801e200bc1459a2d3021374e4bd29ebde1086e570", 0x4c}, {&(0x7f0000000200)="04a4d6d82a574adf566d0c38314e36327121e71b7a7ce681", 0x18}, {&(0x7f0000000240)="0b0efddfc7276193b97b0c303541e59fb6868cf76eb1883be74b649390d58a3a9f2b53229b854cc82c567ee8650d8845bc5f90c867eaa8fe23759a00fd0ace6f4ba41a7a0f01dec58d6eabf300150c6ad2bf2f1c3000ce7ed71eb3735d974c5b47ba82206b01056fb7460aa77a01de0175ab53fc78d5df1686f95349d04c308b246756c4c46d46ca647e046688d3134ee66dfcf2294b9a5915b301637002a43a1dc4", 0xa2}, {&(0x7f0000000300)="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", 0x366}], 0x6}, 0x0) 01:41:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2], 0x2f0}}, 0x0) 01:41:37 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 354.658655][T17286] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.716511][ T37] audit: type=1804 audit(1617154897.964:67): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/358/cgroup.controllers" dev="sda1" ino=14085 res=1 errno=0 01:41:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2], 0x2f0}}, 0x0) 01:41:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 354.960312][T17298] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 355.309298][ T37] audit: type=1804 audit(1617154898.554:68): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/359/cgroup.controllers" dev="sda1" ino=13969 res=1 errno=0 01:41:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0xff}, 0x14) 01:41:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2], 0x2f0}}, 0x0) 01:41:38 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 5: setitimer(0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 355.504299][T17318] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:38 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, 0x0, &(0x7f0000000040)) 01:41:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2f0}}, 0x0) 01:41:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 355.795387][T17329] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:39 executing program 5: get_mempolicy(0x0, &(0x7f0000000040), 0x7, &(0x7f0000ffc000/0x4000)=nil, 0x3) 01:41:39 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, 0x0, &(0x7f0000000040)) 01:41:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2f0}}, 0x0) [ 356.190526][T17341] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:41:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:39 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, 0x0, &(0x7f0000000040)) 01:41:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2f0}}, 0x0) [ 356.408033][ T37] audit: type=1804 audit(1617154899.654:69): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/360/cgroup.controllers" dev="sda1" ino=14098 res=1 errno=0 01:41:39 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000080)='\x00'], &(0x7f0000000240)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='{!}&\\\x00']) [ 356.551249][T17357] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 5: syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x0, 0x4000) 01:41:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108"], 0x2f0}}, 0x0) 01:41:40 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, 0x0) 01:41:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108"], 0x2f0}}, 0x0) 01:41:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, 0x0) 01:41:40 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) [ 357.093952][ T37] audit: type=1804 audit(1617154900.344:70): pid=17376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/361/cgroup.controllers" dev="sda1" ino=14050 res=1 errno=0 01:41:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108"], 0x2f0}}, 0x0) 01:41:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 5: prctl$PR_MPX_ENABLE_MANAGEMENT(0x34) 01:41:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:40 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4074, 0x0) 01:41:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000"], 0x2f0}}, 0x0) 01:41:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000007680)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)='`', 0x1}], 0x1}}], 0x1, 0x0) 01:41:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, 0x0, &(0x7f0000000040)) 01:41:40 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:41:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000"], 0x2f0}}, 0x0) 01:41:41 executing program 5: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 357.786549][ T37] audit: type=1804 audit(1617154901.034:71): pid=17401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/362/cgroup.controllers" dev="sda1" ino=14705 res=1 errno=0 01:41:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, 0x0, &(0x7f0000000040)) 01:41:41 executing program 4: socket$isdn(0x24, 0x3, 0x0) 01:41:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 01:41:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x18, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) 01:41:41 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x200000) 01:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000"], 0x2f0}}, 0x0) 01:41:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, 0x0, &(0x7f0000000040)) 01:41:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1d}, {0x35, 0x0, 0x0, 0x1}, {0x6}]}) 01:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108021100000008"], 0x2f0}}, 0x0) 01:41:41 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)) 01:41:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, 0x0) [ 358.437582][ T37] audit: type=1804 audit(1617154901.684:72): pid=17435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/363/cgroup.controllers" dev="sda1" ino=15108 res=1 errno=0 01:41:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108021100000008"], 0x2f0}}, 0x0) [ 358.654476][ T37] audit: type=1326 audit(1617154901.904:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17434 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:42 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x3, 0x0) 01:41:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, 0x0) 01:41:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:41:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d20233008020000108021100000008"], 0x2f0}}, 0x0) 01:41:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x13, &(0x7f00000010c0)=""/4074, 0x0) 01:41:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 01:41:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000000802"], 0x2f0}}, 0x0) [ 359.123611][ T37] audit: type=1804 audit(1617154902.374:74): pid=17461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/364/cgroup.controllers" dev="sda1" ino=14738 res=1 errno=0 01:41:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:41:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@prinfo={0x18, 0x84, 0x5, {0x10}}, @authinfo={0x18}], 0x30}, 0x0) 01:41:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x12012, r0, 0x8000000) 01:41:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000000802"], 0x2f0}}, 0x0) 01:41:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x10c4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x130, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0xcfc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xcf8, 0xd, 0x0, 0x1, [{0x4}, {0xea, 0x0, "264dea74d3d60bae4a11b0765b724b3e7ecb351a0a510a6dcc15decace2e624150f061b84cd55b177828685eaa994a3639dab1d23063e61a5edb49338fc1b31662f7319d171a5f7b58bf231969adbc75862da563344a2841fec9f01ed766719fe308980eb71d8d5e3319b289dc5cc42cac696b5d7cad5310227198ccd68a3e8e450a6b9761664998e26709a8a8a93df37ee166e29b31e281aa8c6f8cb9501a4d82dba13e73a73e1c84ecb24904ba547b3592c4d98e6643ac923a0f6854214a5de2765ed3560de763bfec6922ff990e85f5ef7cb657acd7ef564d85d8d0c20169196cec8783c9"}, {0xc04, 0x0, "7e5b94b3bff28d1692cbd19d3bfa32492ce07d6d593b0bfdfbb50af335c14e35f4490d3ec5f313bddf0b6ee0c9b287f2ecff32bcc19c6396de4a6f58059d54a1550ebf20329b987ca190a349ed434e0aef4a5c3a3a8d0743762dc57845285c5676e2f5451ceccb35606ba7cf2633257b6dd9056a4c5c411b4767cc3fd90ea8e3dd5c38200cc2cd9610232170199ff6cd30e529d17dcf7770807f65ad384e62de735fc2abdb3741013b1f6d09a120ff1c3e86ed2d21e27ea2777e3a8e04baa8a441e2e14e994d2bf28609d52e48e25f740ed32429009c1896c75f87dc7f5ef32bfee48efec978fb8e5b8988622aef810c13a46de74995954d93453a362703d40e454a20b9adf42abe9c88f0b26d6cf04ef5a359e70eec1edf1dcc27b8a41b75d6bac85ffb0917d6379cc81d8f0af465251a5426869731dd18d4923b279a35d5735445c0571a986d4c5ad56c54a7c0000c68ab70c1ee3ceb24a086172e1d6712d317175dcb904b98264c7ce4dd8bf39ecb312195db6c6ad63f083777551a37e39bd6df2544e917925b2698723a0beeed72b10bbf7a71fc2386e2e67f38e941085477c9305f0a58814aa0e3667f0b1398956d3513d80ed369de19567fe96260441886eb4262b44f88e1d6c2a67c8cceabc77ca7548132a1e539a9a39634616294e9506a9751d56a08761274b298fef0f7bf0288221d43d4e393efc2d3204491f92ab5bce260662afc78e8c527bce1b37261c796656d3b8895693143c60d37591e3953b0f8d41da1b0f86d8410d44bdf2bdd2adc13bcdd8075a98daab0804ff75d8725b363ab7b86ad947080692a7de8baae43174629718784f4d024a9fc1b0ec17f68fd5e30b37b527ef07224532950b13fb49484b7079c4994dc566f1a9eda2992153f605bcf8027b64b76184008a12ad09a099ce6e14dad70a595f077d860904281712cf1160978c517852f6d7c374cf89ed3036bec129cf777665caba8686a0f78637b30c5da08c949c026a51c87dbb2f28b568fbff66bcf48a2027f8a35b18924b4c760430037f55dca14afd4582fc5cf793b14204cda89f57822ebe761ce6a1fc434fd5485d51fb25dcc744144ae38b1a3ea0443e5cc74f623532c768958b343a9e5ffba677b1b7207710fef96ce2d0c77d9f97136387857f5608f333e0a2ac2b9dadc34d80ed133150cda70d004712c929bac4110d441d9aab7902d52f600f964d1f41d9b45207cc1d617680b5db723c2e56d1dd25a704a172ac96f9e266c07138f8eceded3e65df9e6790e030043e73bc6f88cac98fc48879db275de157e155b60b77f4e99084612ea9738d86df8edf2321a2d012d194c2fb44dd48e0b630ffc9f94b78539e8735c43e89f46339c300e3ee89a9c1a1001c01640ddff23b29217d040a751529167bbdd0d6e77a86395e32f395d66861adbdd03fdf1dcaca78effd9466ca1977a6c5bf82efe7ff73ca0339d42d0bd63ee7632462ed4865c3424f3059e53cbc6a2369c9fe0fa2251d55b982a17a0a0a124bf093bd371847f1e98a4c9ae637aac4bed0a8d5f7f2afe0db3e4d61eb1186bfd930636516b6afbba2d0ef202d63d88bd0601679844a0b4be975fd10c7cb305776443ce0d708745b0671b96020ececac7f55aeb75a99a7c51481ad06c0e438861900d7a35716c8b25f74ae6427f3a41087cb1b11b9b308d59965c84d13e03426a2cef0e06a6fa58d5f54c23e595807f1e8b7082dd9d86cdc0f793b3a730001a153ee277e1c2c9d949dc916a0e68c252668719011fe207d0bebb2efeb18e55c2f8275832b56efeba29d4c1d44542d62c9da00b4a80353dd44b7a926ac65908990fe0c907a096698e6f9f1b63621dd987adaf9cd862b6b0384ec07b83c495be9a0f45381c2a15acab758923f86e18d896feefd3b90f2ca14a4f98d3b8e9fb3d04a2c30ff574c04d951ed1e7e22aa387381e5b5f7a78951aa2ac5d171235e7a3b27fe0592ede229c54f8677c5e8c74f7cf787ed652bea43fb4522840140839464622bc56e91fb4b4c53e0a23f705451c15bb769ce7eb0675ddb7b793f62852537b1ab33341df6e913087bd6750a26d8424bf2b0306771104b17b97dab940b7f0f1ca35b63af27bc4f2d5d48722818504e6770f255c85e5c20dc084a289f6bb00be9aed24cc77fef886e5191ce57dff275d080a11f06b8ddbf7a81c06db024770f078cc54591e0e40a0e4471927214c92f00c6c24b1a7e7ca05bf7ede03fefe37ea896dc5ddb562da63ca6690bb2a16e74f02ca23468ba1be0f4058b95c56d59ef271dbf3d0aaecd849d84e721a258b92b770fdbb3ef4f3b78a35516e2ab2e80776ae51a18e4ffef14ec6a062b66601ae46e81b7f3a29007371af909294fe2c151c8e81baaac443245d4cf6f1ef7883e591332d4ab56849b2c17822e041a81db11aa9c2adee5355012f0bc6aa95cd66db10821c1acc857f224fc7e68e74cc5672fb8902f91177ff56b419972eddc70e82b8e724212ce38df7153bf0a4f331c50d6577848a5acdf271e7040a6be40831fc093b4c9e4067a78b511c419eee248042918af819179765e6b0edf43fec7082c78f7be84f32f7a4dc019878fbc0572267a82fefe3067470c013e150e8ec6bc0519d71a36fe5c0bd32981ff86441497fd8df765afdd8b48a5ce7e4012dfe9f2c013c927d267306e7c124c36ab938732d24a2983a055bd45e82272951b5d1478c70b4254b2904450037400e4223274b249bbd8b2138a950d5abe8fbd38900acd7c3140c613bc9d6668d73f620aedbeab58787544222be76b6ded0935f040be52f55d076083d26836df8ae8c23d9df7c70185af1dc4bf8ee22d41ab644441be8c425ea7a5f55b8b5b7b4a8dd5aac37160e54a4753d0e40e0975236205ee8a9394edbc9dc136c756142d0299f970193375cad17bc6f8e7eaef9d7120e8492405ba9a501bd8dff91299b176147c8ae80a4617491c5322342adbb97b2d51f9a7c465b09deb8544b69eb367d809784dadfa76c7fec8a956fe6e3b84318b23bdee14171dde0ea884b68668f820404eadd2f45101d7909e7d744824787a56cdd92db85061e310ebcecac429f6341a50855b4d07f76f921eb28df671f6401a69ffd4e3e32749e87af68c44b0ee5ec41b42fdfd54bc935f0ff32e5b6afaf65c2683bd4677d6cf8850f8017b22d401422018ab7f3eca5042117978c2475bbbf4eefd93fe02ab70176711674f8619484ab49d84348fee0b36c340a19fbda14019fce4924bafc9f88d2bff2778a9359ca5800a090c7ea68848b8902bfcb6372dbef492ccff9136c2f33d73b14fed1489ff99df85e96cea52e04b69f7790805030f876a5768f26195bb6e65e07cfa5d0d2a27913cb4254c1806342af195b5d1e818b0368e310a375bb3829d5d78d6f095f5950290362840367d903a0e2cd4c406ff844d74db10c9f99625919cee95f48201d679ee9fdecaf4e20f1c2601c03b245928df4c175211de79c90d0e99c99b883fa0be147ce1612eaf985871c4fa8f6caed6eb3cf0cd7875cb2167338cd77d373d07ba1af018b2005338a6b557534556a65d8d3d24464a0cb4f4b1cdc8d5bb6ca01721725637ce84322af1a664aa44a90573449851a0b13ec15a7fee080884e0b214eaa34d94284f4cbf47d692d6963ec2a5d0c85c01cbadf8dc9af852dc411fffec829a940116d5e0c7fcf2936d2ecffe33db8e123bcb91f8e596e552e45282d8aa5adbc84e4cb8e98c4273f9e21dcf0308a234c191d1d9d94d0b8115c2b86be198c96a03fbeba322ac6a784d0658118e4eb9085ac0786c0f5d895c97de5ae8837a7c47baf269d64cb859bc78980111d3fb7e4e54507cb67a36c5aae9799834aca6d6d9b2df40da87d0c76b4a1e0b26abfd9ec22b8abf7fc7344edeeacd1acfab5ca9df8df29509144895bf57f541c3f51625626b520bd2ec11f36aef4d976fb72bb8ca351ba5dc2b6782b83fcf15d5d69ffc15657d71a70f28a73667430908b4487131fd0e44003ec478db4902fee10735d2211b2463a09034b0c2f976e7d86eeb41500726621dcf72456d4fae98360eed80709d4f713e4cf23f4c88bca579748bc8100e0046f255499736a2f4346c8fcd4c967b8246c9d4d8b3cb2d2f8ec35f1d01bea3682a2a92696908374ce077607465c90b3aceeee0965daa55519047ab5dc4a275352368a77944f2649ce15a7fedd1d54a2c881544b2a8c6a6d5a53b4975283273906882fa95385b60bb51b0e4d33507d3fa3af46d152e30423ab3f0bbae8dc4fa7bc12d0ff1327bb3aec40a53e8c184f047ec2b2ea5e584554c77439a6f04c5412646edd20847f53b1a61f0988"}]}]}]}, 0x10c4}, 0x1, 0x0, 0x0, 0x800}, 0x40) [ 359.595663][ T37] audit: type=1804 audit(1617154902.844:75): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/365/cgroup.controllers" dev="sda1" ino=13894 res=1 errno=0 01:41:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x83, 0x0, 0x0) 01:41:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802000010802110000000802"], 0x2f0}}, 0x0) 01:41:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 01:41:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, 0x0, &(0x7f0000000040)) 01:41:43 executing program 4: clock_gettime(0x5, &(0x7f0000000340)) 01:41:43 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 01:41:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:43 executing program 4: pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$capi20_data(r0, &(0x7f0000001040)={{0x10}}, 0x12) write$ppp(r0, &(0x7f0000001480)="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", 0x1001) 01:41:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, 0x0, &(0x7f0000000040)) [ 360.078197][T17506] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 360.107171][ T37] audit: type=1804 audit(1617154903.354:76): pid=17504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/366/cgroup.controllers" dev="sda1" ino=13909 res=1 errno=0 01:41:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 01:41:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x6, 0x0, 0x0) [ 360.201372][T17511] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, 0x0, &(0x7f0000000040)) 01:41:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x3d}, {0x4c}, {0x6}]}) 01:41:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 360.516688][T17526] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, 0x0) [ 360.628215][ T37] audit: type=1326 audit(1617154903.874:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17530 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) [ 360.848557][ T37] audit: type=1804 audit(1617154904.094:78): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/368/cgroup.controllers" dev="sda1" ino=14050 res=1 errno=0 01:41:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, 0x0) [ 360.904348][T17544] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 01:41:44 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x3, 0x0, 0x0) 01:41:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f00000010c0)=""/4074, 0x0) 01:41:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 2: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x18}, 0x18) 01:41:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 01:41:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0xdd, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x7de}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x25, 0x5d}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x20, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000140)={0x0, 0x0, 0x5, {0x5, 0x0, "7ad417"}}, &(0x7f0000000540)=ANY=[@ANYBLOB="0003040080091f5c6234f898d7bcd5a906d7c00004031a08"], 0x0, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0xd9b}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x8}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400), &(0x7f00000004c0)={0x20, 0x3, 0x1}}) 01:41:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x2}]}) 01:41:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 361.706902][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 361.706919][ T37] audit: type=1804 audit(1617154904.954:80): pid=17574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/370/cgroup.controllers" dev="sda1" ino=15122 res=1 errno=0 01:41:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 01:41:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@prinfo={0x18}, @authinfo={0x18}], 0x30}, 0x0) 01:41:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 361.989606][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd 01:41:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003c40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000003c80)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 01:41:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 362.136425][ T37] audit: type=1804 audit(1617154905.384:81): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir864752670/syzkaller.OCZj2W/371/cgroup.controllers" dev="sda1" ino=15130 res=1 errno=0 [ 362.249476][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 362.383520][ T8] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 362.404603][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 362.589876][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 362.598970][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.619512][ T8] usb 4-1: Product: syz [ 362.623722][ T8] usb 4-1: Manufacturer: syz [ 362.628332][ T8] usb 4-1: SerialNumber: syz [ 363.279641][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 363.285744][ T8] usbhid: probe of 4-1:1.0 failed with error -71 [ 363.294874][ T8] usb 4-1: USB disconnect, device number 10 [ 363.889478][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 364.139377][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 364.259458][ T8] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 364.275389][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 364.439645][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 364.448736][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.458479][ T8] usb 4-1: Product: syz [ 364.463637][ T8] usb 4-1: Manufacturer: syz [ 364.468424][ T8] usb 4-1: SerialNumber: syz 01:41:47 executing program 3: r0 = socket$isdn(0x10, 0x3, 0x0) sendto$isdn(r0, 0x0, 0x0, 0x20000001, 0x0, 0x0) 01:41:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @addba_req}}]}, 0x44}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 01:41:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x7c}, {0x35, 0x0, 0x0, 0x1}, {0x6}]}) 01:41:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 364.785590][ T37] audit: type=1326 audit(1617154908.034:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17633 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 364.811456][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 364.818204][ T8] usbhid: probe of 4-1:1.0 failed with error -71 01:41:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 364.879861][ T8] usb 4-1: USB disconnect, device number 11 01:41:48 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) bind$qrtr(r0, 0x0, 0x0) 01:41:48 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qrtr-tun\x00', 0x0) 01:41:48 executing program 0: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 01:41:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:48 executing program 3: get_mempolicy(&(0x7f0000000540), 0x0, 0x0, &(0x7f0000ff2000/0x2000)=nil, 0x4) 01:41:48 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 01:41:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0), 0x14) 01:41:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=@raw=[@btf_id], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:41:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x20005b}, @void, @val={0xc}}}}, 0x28}}, 0x0) 01:41:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:48 executing program 3: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'rose0\x00'}) 01:41:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 365.660893][ T9678] usb 1-1: new high-speed USB device number 4 using dummy_hcd 01:41:49 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e80)) [ 365.939341][ T9678] usb 1-1: Using ep0 maxpacket: 8 [ 366.169419][ T9678] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 366.380304][ T9678] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 366.399220][ T9678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.407539][ T9678] usb 1-1: Product: syz [ 366.440801][ T9678] usb 1-1: Manufacturer: syz [ 366.445549][ T9678] usb 1-1: SerialNumber: syz [ 366.501872][ T9678] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 366.703754][ T9341] usb 1-1: USB disconnect, device number 4 [ 367.479163][ T4867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 367.719134][ T4867] usb 1-1: Using ep0 maxpacket: 8 [ 367.919228][ T4867] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.089319][ T4867] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 368.098559][ T4867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.107149][ T4867] usb 1-1: Product: syz [ 368.111810][ T4867] usb 1-1: Manufacturer: syz [ 368.116947][ T4867] usb 1-1: SerialNumber: syz [ 368.161630][ T4867] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 01:41:51 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 01:41:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 01:41:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x78}}, 0x0) 01:41:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 368.306770][ T9732] usb 1-1: USB disconnect, device number 5 01:41:51 executing program 2: fanotify_mark(0xffffffffffffffff, 0x2a, 0x3, 0xffffffffffffffff, 0x0) 01:41:51 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140), &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'tgr192\x00'}}, 0x0, 0x0) 01:41:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:52 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1200) 01:41:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7055175cceaa2e"], 0x28}}, 0x0) 01:41:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 01:41:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "88a53335"}, 0x0, 0x0, @userptr}) 01:41:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:41:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 369.520251][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:41:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:52 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 01:41:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 369.601045][T17779] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 01:41:52 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000540)="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", &(0x7f0000000180)=@udp}, 0xfffffffffffffe52) 01:41:53 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 369.767845][T17790] netlink: 660 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r1) close(r1) 01:41:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x84}, {0x35, 0x0, 0x0, 0x1}, {0x6}]}) 01:41:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:53 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 370.059060][ T9732] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 370.082611][T17806] netlink: 660 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.156221][ T37] audit: type=1326 audit(1617154913.405:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17804 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 01:41:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 370.342816][T17815] netlink: 660 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.352675][ T9732] usb 4-1: Using ep0 maxpacket: 8 [ 370.479200][ T9732] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.498922][ T9732] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.769075][ T9732] usb 4-1: string descriptor 0 read error: -22 [ 370.775388][ T9732] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 370.786592][ T9732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.831612][ T9732] usbhid 4-1:1.0: can't add hid device: -22 [ 370.851478][ T9732] usbhid: probe of 4-1:1.0 failed with error -22 [ 371.034779][ T4867] usb 4-1: USB disconnect, device number 12 [ 371.808929][ T9606] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 372.048949][ T9606] usb 4-1: Using ep0 maxpacket: 8 [ 372.170245][ T9606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.181329][ T9606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.428974][ T9606] usb 4-1: string descriptor 0 read error: -22 [ 372.435461][ T9606] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 372.445722][ T9606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.501437][ T9606] usbhid 4-1:1.0: can't add hid device: -22 [ 372.507514][ T9606] usbhid: probe of 4-1:1.0 failed with error -22 01:41:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008d, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00', r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0306000000000000000012"], 0x34}}, 0x0) 01:41:55 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0) 01:41:55 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000640), 0x8) 01:41:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:55 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 372.676499][ T9732] usb 4-1: USB disconnect, device number 13 [ 372.802590][T17854] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:56 executing program 0: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/103, 0x67) 01:41:56 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:56 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) [ 373.098849][ T9606] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 373.106670][T17872] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:56 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:56 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) [ 373.469164][ T9606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.484243][ T9606] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.499074][ T9606] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 373.514038][ T9606] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.689148][ T9606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.703477][ T9606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.717842][ T9606] usb 3-1: Product: syz [ 373.725436][ T9606] usb 3-1: Manufacturer: syz [ 373.736310][ T9606] usb 3-1: SerialNumber: syz [ 373.759492][T17858] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.795664][ T9606] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 373.989924][ T9606] usb 3-1: USB disconnect, device number 13 [ 374.778748][ T9732] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 375.178903][ T9732] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.188848][ T9732] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 375.201018][ T9732] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 375.211394][ T9732] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.398762][ T9732] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.398799][ T9732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.398823][ T9732] usb 3-1: Product: syz [ 375.420407][ T9732] usb 3-1: Manufacturer: syz [ 375.424999][ T9732] usb 3-1: SerialNumber: syz [ 375.450436][T17858] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 375.472266][ T9732] cdc_ether: probe of 3-1:1.0 failed with error -22 01:41:58 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:41:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:58 executing program 3: pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, 0x0, 0x0) 01:41:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:58 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x4040) [ 375.672946][ T8] usb 3-1: USB disconnect, device number 14 [ 375.840785][T17920] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:59 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0xffffffff) 01:41:59 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80001, 0x0) 01:41:59 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:59 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:41:59 executing program 0: socket$inet(0x2, 0x1, 0x9) write$capi20_data(0xffffffffffffffff, 0x0, 0x0) [ 376.178095][T17939] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:59 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) io_setup(0xdc6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 01:41:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:59 executing program 2: bpf$ITER_CREATE(0x9, 0x0, 0x0) 01:41:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 376.497194][T17956] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:41:59 executing program 3: r0 = epoll_create(0x3) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 01:41:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:41:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:41:59 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8401, 0x0) 01:41:59 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x64a540, 0x0) 01:42:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10040, 0x0) [ 376.845666][T17972] netlink: 724 bytes leftover after parsing attributes in process `syz-executor.1'. 01:42:00 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 01:42:00 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@sndinfo={0x20}, @authinfo={0x18}], 0x38}, 0x0) 01:42:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 3: clone(0x220000, 0x0, 0x0, 0x0, 0x0) 01:42:00 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 2: clone3(&(0x7f00000003c0)={0x280000, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/226, 0xe2, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:42:00 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x101, &(0x7f0000000380)=@string={0x101, 0x3, "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"}}]}) 01:42:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:00 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x4, 0x0, 0x4) 01:42:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:00 executing program 3: io_setup(0x8, &(0x7f0000000000)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) 01:42:00 executing program 2: r0 = shmget(0x3, 0x4000, 0x616, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(0x0, 0xf) 01:42:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:01 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 377.729462][ T9732] usb 1-1: new high-speed USB device number 6 using dummy_hcd 01:42:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:01 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000016b) [ 377.968733][ T9732] usb 1-1: Using ep0 maxpacket: 8 [ 378.088687][ T9732] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.270080][ T9732] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 378.298713][ T9732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.317675][ T9732] usb 1-1: Product: syz [ 378.327339][ T9732] usb 1-1: SerialNumber: syz [ 378.381037][ T9732] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 378.405613][ T3244] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.412002][ T3244] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.585041][ T9341] usb 1-1: USB disconnect, device number 6 [ 379.368477][ T9587] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 379.638546][ T9587] usb 1-1: Using ep0 maxpacket: 8 [ 379.778589][ T9587] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 379.988661][ T9587] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 379.997765][ T9587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.006341][ T9587] usb 1-1: Product: syz [ 380.011368][ T9587] usb 1-1: SerialNumber: syz [ 380.071026][ T9587] usbhid 1-1:1.0: couldn't find an input interrupt endpoint 01:42:03 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 01:42:03 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x878, 0x878, 0xad0, 0xa10, 0xb68, 0xb68, 0xb68, 0xb68, 0xb68, 0x6, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'bridge0\x00', 'vlan1\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 01:42:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:03 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:03 executing program 3: io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 380.288692][ T9587] usb 1-1: USB disconnect, device number 7 01:42:03 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 01:42:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:03 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 01:42:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000084000000080000000010000000000000000001180000000000000084"], 0x38}, 0x0) 01:42:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 01:42:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x70bd28, 0x0, {0xa, 0x78}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) [ 381.035822][ T37] audit: type=1326 audit(1617154924.285:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 01:42:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560001000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fbd15f0332701d9d14a3f3109d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000", 0xdf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:42:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 381.150437][ T37] audit: type=1326 audit(1617154924.285:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 01:42:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 381.291182][ T37] audit: type=1326 audit(1617154924.325:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=286 compat=0 ip=0x466459 code=0x7ffc0000 01:42:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 381.414859][ T37] audit: type=1326 audit(1617154924.325:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 01:42:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 381.605284][ T37] audit: type=1326 audit(1617154924.325:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 381.625590][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:42:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 381.753954][ T37] audit: type=1326 audit(1617154924.325:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x466459 code=0x7ffc0000 01:42:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 381.844879][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.881247][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 381.958668][ T37] audit: type=1326 audit(1617154924.325:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 382.040695][ T37] audit: type=1326 audit(1617154924.325:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 382.120132][ T37] audit: type=1326 audit(1617154924.335:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=283 compat=0 ip=0x466459 code=0x7ffc0000 [ 382.132364][T18117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.167836][T18117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.176198][T18117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x0, 0x70bd28, 0x0, {0xa, 0x78}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) [ 382.228060][ T37] audit: type=1326 audit(1617154924.335:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18099 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x7ffc0000 [ 382.762718][T18149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.965521][T18149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.992425][T18149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x1, &(0x7f00000005c0)=@raw=[@call], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xe4, &(0x7f00000000c0)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:42:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000f80)='msdos\x00', &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)={[{@fat=@flush='flush'}]}) 01:42:07 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x4, &(0x7f0000000100)={0x9}, 0x8) 01:42:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 384.411910][T18166] FAT-fs (loop3): bogus number of reserved sectors [ 384.439535][T18166] FAT-fs (loop3): Can't find a valid FAT filesystem 01:42:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 384.496877][T18166] FAT-fs (loop3): bogus number of reserved sectors [ 384.535530][T18166] FAT-fs (loop3): Can't find a valid FAT filesystem 01:42:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 01:42:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, {0x4, 0x0, "0cb9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x3, "12458f"}, 0x0}) 01:42:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f002", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 0: syz_btf_id_by_name$bpf_lsm(&(0x7f0000000180)='bpf_lsm_task_prctl\x00') 01:42:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f002", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f002", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) [ 385.198191][ T9678] usb 4-1: new high-speed USB device number 14 using dummy_hcd 01:42:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 385.568276][ T9678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.585830][ T9678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.606940][ T9678] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 385.617279][ T9678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.640505][ T9678] usb 4-1: config 0 descriptor?? [ 386.141735][ T9678] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 386.328229][ T9678] cp2112 0003:10C4:EA90.0001: Part Number: 0x45 Device Version: 0x8F [ 386.549450][ T9678] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 386.571036][ T9678] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 386.582508][ T9678] usb 4-1: USB disconnect, device number 14 [ 387.307946][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 387.698215][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.709317][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.721623][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 387.732517][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.748526][ T8] usb 4-1: config 0 descriptor?? 01:42:11 executing program 3: syz_mount_image$ubifs(0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0), 0x0, 0x0) 01:42:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00200", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$NS_GET_PARENT(r0, 0x8902, 0x970000000000) [ 387.998066][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 388.004327][ T8] usbhid: probe of 4-1:0.0 failed with error -71 01:42:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 388.063915][ T8] usb 4-1: USB disconnect, device number 15 01:42:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00200", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00200", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d202330080200001080211000000080211"], 0x2f0}}, 0x0) 01:42:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x11}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) futex(&(0x7f00000002c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)) timer_create(0x7, &(0x7f0000000200)={0x0, 0xa, 0x1, @thr={&(0x7f0000000340)="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", &(0x7f0000001340)}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x33, 0x1, @tid=r0}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) 01:42:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 388.328035][T18298] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 388.348572][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:42:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3280, &(0x7f0000000040), &(0x7f0000ee4000/0x4000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2391], 0x985) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000010000000000080008000100000000ff", 0x24) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 01:42:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 388.626124][T18321] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 01:42:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 388.959860][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 01:42:12 executing program 3: r0 = syz_io_uring_setup(0x3280, &(0x7f0000000040), &(0x7f0000ee4000/0x4000)=nil, &(0x7f00006d7000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x200450f, 0x0, 0x0, 0x0, 0x0) 01:42:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$NS_GET_PARENT(r0, 0x8934, 0x0) 01:42:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 390.093975][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 01:42:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 1: socketpair(0x23, 0x5, 0x2, &(0x7f0000001240)) 01:42:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000143) [ 390.443646][T18373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 01:42:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:13 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x5425, 0x0) 01:42:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:14 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 01:42:14 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 391.193861][T18411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.201697][T18411] IPv6: NLM_F_CREATE should be set when creating new route [ 391.209005][T18411] IPv6: NLM_F_CREATE should be set when creating new route 01:42:14 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:17 executing program 1: open(0x0, 0x141042, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000100)={'U+'}, 0x16, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x44, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x10, 0x8003, 0x8020001) 01:42:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$befs(&(0x7f00000001c0)='befs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[], [{@seclabel='seclabel'}]}) 01:42:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:17 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 393.987160][T18440] befs: Unrecognized mount option "seclabel" or missing value 01:42:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 01:42:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 394.098819][T18440] befs: (loop3): cannot parse mount options 01:42:17 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 1: r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup3(r1, r0, 0x0) 01:42:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 01:42:17 executing program 3: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x400000000000010, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newaddr={0x18, 0x14, 0x0, 0x70bd28, 0x0, {0xa, 0x78, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x4080001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 01:42:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 394.545598][T18477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:42:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x5418, 0x0) [ 394.598328][T18477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 01:42:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 394.649647][T18477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 394.784581][T18492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:42:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 394.838853][T18492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 01:42:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 394.897167][T18492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) r3 = fork() sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@setlink={0x4c, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 01:42:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, 0x0}, 0x0) 01:42:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r1, r1, &(0x7f0000000200), 0xa198) 01:42:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, 0x0}, 0x0) 01:42:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 395.330830][T18519] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. 01:42:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, 0x0}, 0x0) 01:42:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 01:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x5421, 0xfffffffffffffffe) 01:42:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 01:42:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 01:42:19 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 01:42:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 01:42:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) 01:42:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 01:42:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000080)='sysv\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)={[{'ext4\x00'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) 01:42:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 396.227567][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd 01:42:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 396.309612][T18573] VFS: unable to find oldfs superblock on device loop3 [ 396.503183][T18585] loop3: detected capacity change from 0 to 512 [ 396.531267][T18585] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 396.545799][T18585] EXT4-fs (loop3): group descriptors corrupted! [ 396.666390][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.687877][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 396.696971][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.722371][ T8] usb 2-1: config 0 descriptor?? [ 396.780070][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 396.982960][ T9341] usb 2-1: USB disconnect, device number 7 [ 397.788214][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 398.189318][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 398.207017][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 398.217613][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.233132][ T8] usb 2-1: config 0 descriptor?? [ 398.301195][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 398.517645][ T7] usb 2-1: USB disconnect, device number 8 01:42:21 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x301c00, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) 01:42:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 01:42:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 01:42:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 01:42:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_btf_id_by_name$bpf_lsm(&(0x7f0000001400)='bpf_lsm_file_alloc_security\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:42:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, 0x0, 0x0) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 01:42:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 01:42:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 01:42:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 01:42:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_btf_id_by_name$bpf_lsm(&(0x7f0000001400)='bpf_lsm_file_alloc_security\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:42:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 01:42:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 01:42:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 01:42:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 01:42:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) syz_btf_id_by_name$bpf_lsm(&(0x7f0000001400)='bpf_lsm_file_alloc_security\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:42:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 01:42:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 01:42:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 01:42:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, 0x0, &(0x7f0000000040)) 01:42:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 01:42:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:25 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r0) 01:42:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 01:42:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, 0x0, &(0x7f0000000040)) 01:42:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:42:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, 0x0, &(0x7f0000000040)) 01:42:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)) 01:42:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 01:42:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, 0x0) 01:42:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 01:42:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, 0x0) 01:42:26 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000001000073564d38e10000001e000000000000000010cc030200010052654973457233467300000001000000020001000200853d00000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003bc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/1984, 0x7c0, 0x11000}, {&(0x7f0000010a00)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x800, 0x11800}, {&(0x7f0000011200)="0000000000000000000000001200000000000000843d00000001000073564d38e10000001e00"/64, 0x40, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000000000000000000000000000100000002000000000000000000000000002c00d40f0100010000000200000001000000f401000002003000a40f00"/96, 0x60, 0x3d97000}, {&(0x7f0000011400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003bc1655f3bc1655f3bc1655f0100000000000000", 0x60, 0x3d97fa0}], 0x0, &(0x7f0000011500)) 01:42:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 01:42:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xe, &(0x7f00000010c0)=""/4074, 0x0) [ 403.625866][T18791] loop1: detected capacity change from 0 to 252287 01:42:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) poll(0x0, 0x0, 0x201) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000040)) 01:42:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) [ 403.729079][T18791] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 403.764782][T18791] REISERFS (device loop1): using ordered data mode [ 403.862090][T18791] reiserfs: using flush barriers 01:42:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 01:42:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x2, [@const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto]}}, 0x0, 0xca}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) [ 403.905769][T18791] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 01:42:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x0, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) 01:42:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000010c0)=""/4074, &(0x7f0000000040)=0xfea) [ 404.051451][T18791] REISERFS (device loop1): checking transaction log (loop1) [ 407.649020][T18791] REISERFS (device loop1): Using tea hash to sort names [ 407.658912][T18791] general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN [ 407.670802][T18791] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 407.679230][T18791] CPU: 0 PID: 18791 Comm: syz-executor.1 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 407.689225][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.699280][T18791] RIP: 0010:reiserfs_security_init+0x28f/0x530 [ 407.705515][T18791] Code: 48 c1 e9 03 80 3c 11 00 0f 85 91 02 00 00 49 8b 87 a0 05 00 00 48 ba 00 00 00 00 00 fc ff df 48 8d 78 68 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 4d 02 00 00 48 83 78 68 00 0f 84 be 01 00 00 48 [ 407.725119][T18791] RSP: 0018:ffffc90001e17970 EFLAGS: 00010202 [ 407.731196][T18791] RAX: 0000000000000000 RBX: 0000000000000036 RCX: 000000000000000d [ 407.739156][T18791] RDX: dffffc0000000000 RSI: 000000000000006c RDI: 0000000000000068 [ 407.747136][T18791] RBP: ffff8880791c8798 R08: 0000000000000000 R09: ffffc90001e17a18 [ 407.755096][T18791] R10: ffffffff82035730 R11: 0000000000000000 R12: 000000000000057d [ 407.763064][T18791] R13: ffff88806e848000 R14: 0000000000000000 R15: ffff888014c21000 [ 407.771027][T18791] FS: 00007fadd8775700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 407.779947][T18791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.786533][T18791] CR2: 0000000001ad6848 CR3: 000000001c211000 CR4: 00000000001526f0 [ 407.794524][T18791] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 407.802487][T18791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 407.810449][T18791] Call Trace: [ 407.813719][T18791] reiserfs_mkdir+0x2d0/0x980 [ 407.818457][T18791] ? reiserfs_mknod+0x700/0x700 [ 407.823403][T18791] ? down_write+0xe0/0x150 [ 407.827862][T18791] ? down_write_killable+0x170/0x170 [ 407.833271][T18791] ? down_write_killable+0x170/0x170 [ 407.838550][T18791] reiserfs_xattr_init+0x4de/0xb60 [ 407.843680][T18791] reiserfs_fill_super+0x2166/0x2e00 [ 407.848976][T18791] ? reiserfs_remount+0x1580/0x1580 [ 407.854337][T18791] ? lock_downgrade+0x6e0/0x6e0 [ 407.859225][T18791] ? snprintf+0xbb/0xf0 [ 407.863419][T18791] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 407.869182][T18791] ? set_blocksize+0x1c1/0x3b0 [ 407.874007][T18791] mount_bdev+0x34d/0x410 [ 407.878362][T18791] ? reiserfs_remount+0x1580/0x1580 [ 407.883571][T18791] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 407.888591][T18791] legacy_get_tree+0x105/0x220 [ 407.893362][T18791] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 407.899601][T18791] vfs_get_tree+0x89/0x2f0 [ 407.904024][T18791] path_mount+0x132a/0x1fa0 [ 407.908705][T18791] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 407.914973][T18791] ? strncpy_from_user+0x2a0/0x3e0 [ 407.920159][T18791] ? finish_automount+0xad0/0xad0 [ 407.925178][T18791] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 407.931540][T18791] ? getname_flags.part.0+0x1dd/0x4f0 [ 407.936970][T18791] __x64_sys_mount+0x27f/0x300 [ 407.941765][T18791] ? copy_mnt_ns+0xae0/0xae0 [ 407.946348][T18791] ? syscall_enter_from_user_mode+0x27/0x70 [ 407.952271][T18791] do_syscall_64+0x2d/0x70 [ 407.956681][T18791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 407.962620][T18791] RIP: 0033:0x46797a [ 407.966512][T18791] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 407.986212][T18791] RSP: 002b:00007fadd8774fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 407.994655][T18791] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046797a [ 408.002619][T18791] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fadd8775000 [ 408.010595][T18791] RBP: 00007fadd8775040 R08: 00007fadd8775040 R09: 0000000020000000 [ 408.018581][T18791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 408.026545][T18791] R13: 0000000020000100 R14: 00007fadd8775000 R15: 0000000020011500 [ 408.034514][T18791] Modules linked in: [ 408.043341][T18791] ---[ end trace 8135dda567145307 ]--- [ 408.049154][T18791] RIP: 0010:reiserfs_security_init+0x28f/0x530 [ 408.055350][T18791] Code: 48 c1 e9 03 80 3c 11 00 0f 85 91 02 00 00 49 8b 87 a0 05 00 00 48 ba 00 00 00 00 00 fc ff df 48 8d 78 68 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 4d 02 00 00 48 83 78 68 00 0f 84 be 01 00 00 48 [ 408.075054][T18791] RSP: 0018:ffffc90001e17970 EFLAGS: 00010202 [ 408.081183][T18791] RAX: 0000000000000000 RBX: 0000000000000036 RCX: 000000000000000d [ 408.089264][T18791] RDX: dffffc0000000000 RSI: 000000000000006c RDI: 0000000000000068 [ 408.097289][T18791] RBP: ffff8880791c8798 R08: 0000000000000000 R09: ffffc90001e17a18 [ 408.105277][T18791] R10: ffffffff82035730 R11: 0000000000000000 R12: 000000000000057d [ 408.113786][T18791] R13: ffff88806e848000 R14: 0000000000000000 R15: ffff888014c21000 [ 408.121849][T18791] FS: 00007fadd8775700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 408.131148][T18791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.137878][T18791] CR2: 0000000001ad6848 CR3: 000000001c211000 CR4: 00000000001526f0 [ 408.146088][T18791] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.155604][T18791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.163941][T18791] Kernel panic - not syncing: Fatal exception [ 408.170890][T18791] Kernel Offset: disabled [ 408.175220][T18791] Rebooting in 86400 seconds..