59}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000b80)=""/237, 0xed}], 0x6, 0x0) 19:17:09 executing program 1: bpf$MAP_CREATE(0x1c, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:09 executing program 0: process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/151, 0x97}, {&(0x7f0000001800)=""/245, 0xf5}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/186, 0xac}], 0x4, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/94, 0x5e}, {0x0}, {&(0x7f0000001740)=""/132, 0x84}, {&(0x7f00000014c0)=""/99, 0xffffffffffffff4a}, {&(0x7f0000001540)=""/113, 0x71}, {&(0x7f0000000180)=""/25, 0x1d}, {&(0x7f00000015c0)=""/240, 0xf0}], 0x7, 0x0) 19:17:09 executing program 2: pipe2(&(0x7f0000001c80)={0xffffffffffffffff}, 0x0) io_setup(0x3ff, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000340)}]) 19:17:09 executing program 1: socket$inet6(0xa, 0x3, 0x3a) 19:17:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x14, 0x0, 0x0) 19:17:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:10 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x2c}, 0x7}, 0x0) 19:17:10 executing program 2: pipe2(&(0x7f0000001c80)={0xffffffffffffffff}, 0x0) io_setup(0x3ff, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000340)}]) 19:17:10 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x12, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ff080000000000007f00000000000000050000000911ff0fffffffff4db9800010000000181100001a6517364b47a66339acfa0ea5494eb75ca5dffc842122bb9b7130e91c54e8ad03a1dee2e85f2570a3ac308db1c277fbf282b74c5d806ab423508dabf5df156e9521a2a6301fd32e1b478b60cfb5b75a3e8d765f968bc274f2751776eeec48d3", @ANYRES32, @ANYBLOB="00000000000000008520000005000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000680)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x58) 19:17:10 executing program 0: syz_emit_ethernet(0x152, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6987f5f8011c06"], 0x0) 19:17:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 19:17:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:10 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:17:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003480)=[{{&(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x80, 0x0}}], 0x1, 0x0) 19:17:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:11 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$invalidate(0x15, r0) 19:17:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:11 executing program 0: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000001c0)=[{}, {}], 0x2, 0x9) 19:17:11 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x700) 19:17:11 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:11 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:11 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000006480)=[{&(0x7f00000061c0)="bb", 0x1, 0x80000000}, {&(0x7f0000006280)='m', 0x1, 0x100000001}], 0x0, 0x0) 19:17:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x1, &(0x7f0000000240)=@raw=[@exit], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:11 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0}, &(0x7f0000000080)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) [ 283.154424][ T3682] Bluetooth: hci1: command 0x0406 tx timeout [ 283.154474][ T3682] Bluetooth: hci0: command 0x0406 tx timeout [ 283.154502][ T3682] Bluetooth: hci2: command 0x0406 tx timeout [ 283.154528][ T3682] Bluetooth: hci4: command 0x0406 tx timeout 19:17:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:12 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:12 executing program 4: syz_emit_ethernet(0x82b, &(0x7f00000009c0)=ANY=[@ANYBLOB="2fe89fc93b30aaaaaaaaaa2d86dd66"], 0x0) 19:17:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000001ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) 19:17:12 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:12 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:12 executing program 4: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) 19:17:12 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, 0x0}}], 0x1, 0x0) 19:17:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x101, 0x4) 19:17:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:12 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) 19:17:13 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) init_module(0x0, 0x0, 0x0) 19:17:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 19:17:13 executing program 4: r0 = bpf$MAP_CREATE(0x2, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) pipe2(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@mcast2, 0x0, r3}) pipe2(0x0, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x80, 0xfff, 0x100, r0, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x1, 0x6, 0x7, 0x1, 0x40, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x3, 0x33600}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, 0xffffffffffffffff, r0, r0, r4]}, 0x80) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000140)=""/223) 19:17:13 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:13 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40000) unshare(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x44000400) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000030a0300000000000000000000000003090002bd0073797a30000000000000000000797a308000000009000200737999b136e816222fd9c3fa4aee85", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x6afddd45d02b215a}, 0x40084) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xe1e5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 19:17:14 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ff080000000000007f00000000000000050000000911ff0fffffffff4db9800010000000181100001a6517364b47a66339acfa0ea5494eb75ca5dffc842122bb9b7130e91c54e8ad03a1dee2e85f2570a3ac308db1c277fbf282b74c5d806ab423508dabf5df156e9521a2a6301fd32e1b478b60cfb5b75a3e8d765f968bc274f2751776eeec48d3", @ANYRES32, @ANYBLOB="00000000000000008520000005000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000680)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x58) 19:17:14 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1, 0x41) write$P9_RWALK(r0, &(0x7f00000005c0)={0x9}, 0xfffffdef) 19:17:14 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1e, 0x9, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:14 executing program 1: bpf$MAP_CREATE(0xc, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:14 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@mcast2}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x80, 0xfff, 0x100}, 0x48) 19:17:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x7, 0x4) 19:17:14 executing program 1: clock_gettime(0xd, 0x0) 19:17:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:15 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) read$hiddev(r0, &(0x7f0000000240)=""/8, 0x8) 19:17:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:15 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 19:17:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), 0x4) 19:17:15 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) 19:17:15 executing program 0: socketpair(0x2, 0xa, 0x0, &(0x7f0000000200)) 19:17:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xb, 0x0, 0x0) 19:17:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x0) r1 = gettid() r2 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)) 19:17:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:16 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000480)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:17:16 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x220400, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x801) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) 19:17:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8001, 0x4) 19:17:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x19, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:16 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) llistxattr(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 19:17:16 executing program 5: syz_emit_ethernet(0x82b, &(0x7f00000009c0)=ANY=[@ANYBLOB="2fe89fc93b30aaaaaaaaaa2d86dd668c4f4207f521"], 0x0) 19:17:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x19, 0x0, 0x0) 19:17:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x0, 0x0, 0x0, 0x20}, 0x48) 19:17:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x7, 0xf0ffffff7f0000}, 0x0) 19:17:16 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000400), 0x8) 19:17:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xe1, &(0x7f00000000c0)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a00)={&(0x7f0000000500)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@tclass={{0x14}}], 0x18}, 0x0) 19:17:17 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:17 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x1, 0x0) 19:17:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:17:17 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x103003, 0x0) read$rfkill(r0, 0x0, 0x0) 19:17:17 executing program 1: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) 19:17:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x46, 0x0, 0x0) 19:17:17 executing program 0: pipe2(&(0x7f0000001c80), 0x0) pipe2(&(0x7f0000001c80), 0x0) pselect6(0x40, &(0x7f0000001840)={0x5cc}, 0x0, 0x0, 0x0, 0x0) 19:17:17 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0xfffffffffffffe55) 19:17:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x43, 0x0, 0x0) 19:17:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001380), 0x12) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 19:17:18 executing program 0: futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x2) 19:17:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x1e, 0x0, 0x0) 19:17:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 19:17:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6f1800009d9e1915b3f118809768f3c96daabef3"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001380), 0x12) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 19:17:18 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:17:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x33, 0x0, 0x0) 19:17:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xa6, &(0x7f0000000400)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001380), 0x12) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 19:17:18 executing program 4: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) 19:17:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x101, 0x4) 19:17:18 executing program 4: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xfffffeff}, 0x8) 19:17:18 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001380), 0x12) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 19:17:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x101, 0x4) 19:17:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3f00}, 0x80) 19:17:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:19 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000001c80), 0x0) pipe2(&(0x7f0000001c80), 0x0) pselect6(0x40, &(0x7f0000001840)={0x5cc}, 0x0, 0x0, 0x0, 0x0) 19:17:19 executing program 1: syz_emit_ethernet(0x82b, &(0x7f00000009c0)=ANY=[@ANYBLOB="2fe89fc93b30aaaaaaaaaa2d86dd668c4f4207f52100ff"], 0x0) 19:17:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0xddff6ae27af94b09}, 0x14}}, 0x0) 19:17:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x4c, 0x0, 0x0) 19:17:19 executing program 0: setgroups(0x8, &(0x7f00000003c0)=[0xee00, 0x0, 0x0, 0x0, 0xee01, 0x0, 0x0, 0xee01]) 19:17:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@local}, 0x0, @in=@multicast2}}, 0xe8) 19:17:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x15}, 0x48) 19:17:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:20 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 19:17:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x2b, 0x0, 0x0) 19:17:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 19:17:20 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/201, 0xc9}], 0x1, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000840)=""/192, 0xc0}, {0x0}], 0x3, 0x0) 19:17:20 executing program 0: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0), &(0x7f0000000300)=ANY=[], 0x0, 0x0) 19:17:20 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f0000006480)=[{&(0x7f00000051c0)="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", 0xffd, 0x4}, {0xfffffffffffffffe}, {&(0x7f00000061c0)="bb", 0x1, 0x80000000}, {&(0x7f0000006280)='m', 0x1, 0x100000001}], 0x0, 0x0) 19:17:20 executing program 1: add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)="9f", 0x1, 0xfffffffffffffffb) 19:17:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x700) 19:17:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x201) 19:17:20 executing program 5: bpf$MAP_CREATE(0x15, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:20 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 19:17:20 executing program 2: bpf$MAP_CREATE(0x1c, 0x0, 0x0) 19:17:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x36, 0x0, 0x0) 19:17:20 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xf4240, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ff080000000000007f00000000000000050000000911ff0fffffffff4db9800010000000181100001a6517364b47a66339acfa0ea5494eb75ca5dffc842122bb9b7130e91c54e8ad03a1dee2e85f2570a3ac308db1c277fbf282b74c5d806ab423508dabf5df156e9521a2a6301fd32e1b478b60cfb5b75a3e8d765f968bc274f2751776eeec48d3", @ANYRES32, @ANYBLOB="00000000000000008520000005000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000680)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x80) 19:17:21 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x0, 0xfff}, 0x48) 19:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x11, 0x0, 0x0) 19:17:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 19:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f00000005c0)=""/173, 0x32, 0xad, 0x1}, 0x20) 19:17:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x3, 0x0, 0x0) 19:17:21 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1e, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ff080000000000007f00000000000000050000000911ff0fffffffff4db9800010000000181100001a6517364b47a66339acfa0ea5494eb75ca5dffc842122bb9b7130e91c54e8ad03a1dee2e85f2570a3ac308db1c277fbf282b74c5d806ab423508dabf5df156e9521a2a6301fd32e1b478b60cfb5b75a3e8d765f968bc274f2751776eeec48d3", @ANYRES32, @ANYBLOB="00000000000000008520000005000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000680)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x58) 19:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:21 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 19:17:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a00)={&(0x7f0000000500)={0xa, 0x4e22, 0x0, @private1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dstopts={{0x18}}, @tclass={{0x14}}], 0x30}, 0x0) 19:17:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf4240, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000200)=@framed={{}, [@exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst]}, &(0x7f0000000280)='syzkaller\x00', 0x1, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:21 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x19, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff7f000000000000ff080000000000007f00000000000000050000000911ff0fffffffff4db9800010000000181100001a6517364b47a66339acfa0ea5494eb75ca5dffc842122bb9b7130e91c54e8ad03a1dee2e85f2570a3ac308db1c277fbf282b74c5d806ab423508dabf5df156e9521a2a6301fd32e1b478b60cfb5b75a3e8d765f968bc274f2751776eeec48d3", @ANYRES32, @ANYBLOB="00000000000000008520000005000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000680)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x58) 19:17:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x16, &(0x7f0000000000), 0x4) 19:17:21 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x6281) 19:17:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0xffffffff}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x33fe0}}, 0x0) 19:17:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f00000000c0)='GPL\x00', 0x0, 0xfe, &(0x7f0000000100)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:21 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x20}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 19:17:21 executing program 2: pipe2(&(0x7f0000001c80)={0xffffffffffffffff}, 0x0) io_setup(0x3ff, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x1f}]) 19:17:21 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x430}) 19:17:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x3a, 0x0, 0x0) 19:17:21 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x0, 0x81, 0xc, @mcast1, @local, 0x80}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x33fe0}}, 0x0) 19:17:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 19:17:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x1) write$P9_RWALK(r0, 0x0, 0xfffffdef) 19:17:22 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000201f}) r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0}, 0x10) write$P9_RWALK(r0, &(0x7f00000005c0)={0x9}, 0xfffffdef) 19:17:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xbf70, 0x4) 19:17:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000005c0)=""/173, 0x26, 0xad, 0x1}, 0x20) 19:17:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x1) write$P9_RWALK(r0, 0x0, 0x0) 19:17:22 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 19:17:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x0, 0x0, 0x4f}, 0x48) 19:17:22 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 19:17:22 executing program 1: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "283d402aeeea5ca0f859b2ffcd61090f171e4023aa87ddcbc7d55256c4f1ad73e011523a4171901be85087b82b183059d6b5c6773e93bd0aa90013c67a55119c"}, 0x48, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) [ 293.374425][ T4310] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 293.418823][ T3686] Bluetooth: hci5: command 0x0406 tx timeout [ 293.418992][ T3686] Bluetooth: hci3: command 0x0406 tx timeout 19:17:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:23 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x10}]}]}}, &(0x7f00000005c0)=""/173, 0x32, 0xad, 0x1}, 0x20) 19:17:23 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x21abc1, 0x0) 19:17:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x1a, 0x0, 0x0) 19:17:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 293.734401][ T4310] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:17:23 executing program 4: bpf$MAP_CREATE(0x1e, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:23 executing program 0: socketpair(0x10, 0x2, 0x40, &(0x7f0000000040)) 19:17:23 executing program 2: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 293.894632][ T4310] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.894666][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.894691][ T4310] usb 6-1: Product: syz [ 293.894708][ T4310] usb 6-1: Manufacturer: syz [ 293.894725][ T4310] usb 6-1: SerialNumber: syz [ 294.139396][ T6649] Error: Driver 'raw-gadget' is already registered, aborting... [ 294.139411][ T6649] UDC core: USB Raw Gadget: driver registration failed: -16 [ 294.139431][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.153271][ T4310] usb 6-1: USB disconnect, device number 3 19:17:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1}, 0x48) 19:17:24 executing program 1: io_setup(0x400, &(0x7f0000000340)=0x0) io_destroy(r0) io_setup(0x7, &(0x7f0000000040)=0x0) io_destroy(r1) 19:17:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x4e, 0x0, 0x0) 19:17:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x7, 0x4) 19:17:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 19:17:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xd, 0x0, 0x0) 19:17:24 executing program 4: syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x20080) 19:17:24 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x81}, 'port1\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 19:17:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x56}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@private1}}, 0xe8) 19:17:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 19:17:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x1b, 0x0, 0x0) 19:17:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x7800) 19:17:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x7, 0x0, 0x0) 19:17:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:17:24 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x220400, 0x0) 19:17:24 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xe1, &(0x7f00000000c0)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) 19:17:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x1) write$P9_RWALK(r0, &(0x7f00000005c0)={0x9}, 0xfffffdef) 19:17:24 executing program 5: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) 19:17:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x4d, 0x0, 0x0) 19:17:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcef0376627970696, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x4, 0x0, 0x0) 19:17:24 executing program 4: bpf$MAP_CREATE(0x8, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:17:25 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6b1426a88b862030085e08da3892277f160e3d6b5249e817681c317780fd40ae49ce34cc6947973356ef76246974206d3f8a3490009569720e6d21d8ca7d5dbd"}, 0x48, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) 19:17:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x8000, 0x4) 19:17:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0xb9e, 0x0, 0x1}, 0x48) 19:17:25 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 19:17:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000001fc0)="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", 0x20002fc0}, {&(0x7f00000001c0)="441034733583e80531451a7520685540dfb0925dc3a3f935f89239e9b335e0fb80794e", 0x23}, {&(0x7f0000000600)="587d6724f2eb3d9f731c97041e59ea66654b2d9fad65a5ed4ec84dde1b8f82e9e1d3e74246250e9509db5d49ec3c4306ab510bba332cccc6df1ef7ee0f501e4fd5b3c5faf0471af8d7137575f13e66c2590ff1bbc4b00db09a78793794e996210f38f3b6249de669718638c52b1bd163044fef51bf059129e2d3a1ac30b45710658826dc7a63e26fb4c33454c583733cbfcd11313b59518cfb99426f8f9b9bb70fedc832bbf5e46e1d6845c0354997885951bce51d93d09e3d5b92211603cdfc3fcbbf7bafeb4c9feda18aa2e17a0a8b108f9eb05bb5a9a22f9a700df3c97bfceb4909568cc2c0064a9282ac0eb9f4a02245ffc5b7385e4b80", 0xf9}, {&(0x7f0000003800)="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", 0xee5}], 0x4) 19:17:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000000bc0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 19:17:25 executing program 0: setuid(0xee00) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = geteuid() getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, r1, r2) 19:17:25 executing program 5: timer_create(0x1, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 19:17:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:25 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 19:17:25 executing program 0: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) fsetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') 19:17:25 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x89e, 0x0, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x89e, 0x2) 19:17:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e1, &(0x7f0000000080)) 19:17:25 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000500000"], &(0x7f0000005a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed7ffb) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000200)='N', 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000400)=ANY=[]}, @subvolid=0x5}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x5]}, 0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1cdb42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000000a) write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x5d, 0x9, 0x8f, 0x274, 0x3, 0x17, 0x4}, "a5b73f5c67a4c0fcf1f14fed4ee7"}, 0x2e) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"b92eab360e32e4650abb2909436c0722", 0x0, 0x0, {0x5, 0xad9e}, {0x6}, 0x29df, [0x80, 0xfff, 0x0, 0x10001, 0x1, 0x51, 0x4, 0x1, 0x9, 0x2, 0xffffffff00000000, 0x0, 0x800, 0x101, 0x2, 0x3]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 19:17:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) [ 296.727238][ T6754] tun0: tun_chr_ioctl cmd 2147767521 19:17:26 executing program 1: syz_open_dev$usbmon(&(0x7f0000003280), 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xa}, 0x0, 0x0) [ 296.924084][ T6763] fs-verity: sha256 using implementation "sha256-avx2" [ 297.094307][ T28] audit: type=1800 audit(1652469446.302:57): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1170 res=0 errno=0 19:17:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r0, 0x6, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x61) timer_create(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000002bc0)={0x38, 0x0, 0x1, 0xffff, 0x8000, 0xee09, 0x8, 0x1ff, 0x7f3c, 0x6}, 0x0) sched_setattr(0x0, &(0x7f0000002c00)={0x38, 0x5, 0x62, 0x2, 0x8001, 0x8, 0x800, 0xffff, 0x2, 0x8}, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 19:17:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 19:17:26 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8366, 0xfffffffffffff01c}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback=0x7f000005}]}}}]}, 0x48}}, 0x0) 19:17:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) 19:17:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 19:17:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x0, "8759c565c24508bec7f234e945b576091073f537"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 297.558234][ T6775] process 'syz-executor.5' launched './file0' with NULL argv: empty string added 19:17:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005", 0x1d, 0x10000}, {&(0x7f0000000140)="00f99b5bbb3ecc83ce", 0x9, 0x11400}], 0x0, &(0x7f0000013b00)) 19:17:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) [ 297.719944][ T6763] fs-verity (sda1, inode 1167): Error -4 building Merkle tree [ 297.719984][ T28] audit: type=1800 audit(1652469447.012:58): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1176 res=0 errno=0 19:17:27 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000500000"], &(0x7f0000005a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed7ffb) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000200)='N', 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000400)=ANY=[]}, @subvolid=0x5}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x5]}, 0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1cdb42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000000a) write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x5d, 0x9, 0x8f, 0x274, 0x3, 0x17, 0x4}, "a5b73f5c67a4c0fcf1f14fed4ee7"}, 0x2e) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"b92eab360e32e4650abb2909436c0722", 0x0, 0x0, {0x5, 0xad9e}, {0x6}, 0x29df, [0x80, 0xfff, 0x0, 0x10001, 0x1, 0x51, 0x4, 0x1, 0x9, 0x2, 0xffffffff00000000, 0x0, 0x800, 0x101, 0x2, 0x3]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 19:17:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 297.722466][ T28] audit: type=1804 audit(1652469447.012:59): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/191/file0" dev="sda1" ino=1176 res=1 errno=0 19:17:27 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0xfffffffffffffffe, 0x0) [ 297.725656][ T28] audit: type=1804 audit(1652469447.022:60): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/191/file0" dev="sda1" ino=1176 res=1 errno=0 [ 298.042325][ T28] audit: type=1800 audit(1652469447.332:61): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1170 res=0 errno=0 19:17:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 19:17:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x504}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000002100), 0x3, 0x1a1081) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) r2 = dup(r0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000040)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, "c2005774a86e45584de9db53b22ad589c9f494916af24d789f7a9739a18674ffaef9031af54fdf04833ff4cfa6adf179a161a2c19f271d1dbe45361d8dcda602", "230f5e07bbcd6fe65721e23668cba25058ec16d2a058fdf470b142ac5de307ad48468f4c6036aab10af6ba44ec57699b0ec33db654058b4b6b1d96e24ad99bd2", "170f2dc9af47e18c2abb14aafa682ddbcc45d3cb26b4958d9c4a9e9374d495ca"}}) 19:17:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "53368990b6f81e48500996497a08c077cadf5ac90ee94cadd5d02ed9341cd15e9abc4eb05b2cea212bc5aea4a567683dc6dc76730e7ed2ccbf06aef82f479dbbcde43eb99d1ef94b258216142faed846661ec82b"}}, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 19:17:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000780)={[{@uni_xlate}, {@shortname_mixed}], [{@fowner_lt}, {@obj_user}]}) 19:17:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) 19:17:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001600), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125e, 0xffffffffffffffff) 19:17:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) [ 298.694308][ T3686] usb 6-1: new high-speed USB device number 4 using dummy_hcd 19:17:28 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000500000"], &(0x7f0000005a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed7ffb) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000200)='N', 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000400)=ANY=[]}, @subvolid=0x5}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x5]}, 0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1cdb42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000000a) write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x5d, 0x9, 0x8f, 0x274, 0x3, 0x17, 0x4}, "a5b73f5c67a4c0fcf1f14fed4ee7"}, 0x2e) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"b92eab360e32e4650abb2909436c0722", 0x0, 0x0, {0x5, 0xad9e}, {0x6}, 0x29df, [0x80, 0xfff, 0x0, 0x10001, 0x1, 0x51, 0x4, 0x1, 0x9, 0x2, 0xffffffff00000000, 0x0, 0x800, 0x101, 0x2, 0x3]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 19:17:28 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 19:17:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) fsetxattr(r1, &(0x7f00000001c0)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}]}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) [ 298.860516][ T6793] fs-verity (sda1, inode 1169): Error -4 building Merkle tree [ 299.055644][ T6820] netlink: 'syz-executor.2': attribute type 153 has an invalid length. [ 299.084877][ T3686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.084915][ T3686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.084942][ T3686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.084986][ T3686] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.085013][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:28 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0xa}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x20, 0x10, 0x16, {0x16, 0x0, "8759c565c24508bec7f234e945b576091073f537"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 299.089249][ T3686] usb 6-1: config 0 descriptor?? [ 299.262235][ T28] audit: type=1800 audit(1652469448.552:62): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1168 res=0 errno=0 19:17:28 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) [ 299.591572][ T3686] plantronics 0003:047F:FFFF.0001: global environment stack underflow [ 299.591595][ T3686] plantronics 0003:047F:FFFF.0001: item 0 2 1 11 parsing failed [ 299.592713][ T3686] plantronics 0003:047F:FFFF.0001: parse failed [ 299.592746][ T3686] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 299.771301][ T3686] usb 6-1: USB disconnect, device number 4 [ 300.099639][ T6822] fs-verity (sda1, inode 1166): Error -4 building Merkle tree 19:17:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "53368990b6f81e48500996497a08c077cadf5ac90ee94cadd5d02ed9341cd15e9abc4eb05b2cea212bc5aea4a567683dc6dc76730e7ed2ccbf06aef82f479dbbcde43eb99d1ef94b258216142faed846661ec82b"}}, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 19:17:29 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "1db9d7db73a88a523761f92a4a76dcf0507f6af3c9ec3a43b2c89e7f9dbe6fb82d86f0e4e718a172c0d762a6054a51763b5b45c77b9f942f083b36e9f4b95caa2461e2e44aefe7e09a3497aba7eb1bfbc09fb00b628c236e067311397071df32723bdb8e967321e09a380618d0877821f62a86c0609235894a197080a39cf08d650bda9d1f14328b977bbd1925266e0f8c43411abeefb473378f52313d009cd77773fd3f525b4c68469b7c71497f743f2105d46f19a6740c8efe2a8b235b1d3c55a6e4c1a55173cf7c51f12819cdd7bbafa3aaa8b656b6282b62bd0f5873d8387be2fd9b40c75b64a7c8a3cd4caf4de9c985f7cf3e8e37b695d3ef213fea9f8873d335a1c7668fc449b3ae269713d264fad7c0871ef737fe1dc441ef66b720aa3aee0a697f56de295ea1c262b001d27878d8829371f3051c5c0873c65a7cd1d164432eb8d26a4ca413bf094c0c2158382769a77109dd054879a621245da3b379d456c69f7c08843fd2b81dd291fc2344a8d04e856d1642c2c2f7db50507733e8ee6688d7ea16489cdbee46b99d9d9f846b9734a32514794f737960183750b900207b2090374b790412fbdeb64be36d1739ab2c47455d59ba1fb9c8b804183e1495b29e30fb062ce4cf36cd51445d5fa0f3f49f629d5460bb622d6f3c65eebbd1b447992b146b8fee18ed064d7318a2d715c599fb745e985a5bc23339c37c1ce937237c220441e920d742efa3a8159ddb09985355b858678dfbde985bb2b9e97674ea5250f4874de81f59a89a28500b16ac6a12473be9fcbcdcea5cc4c16736cfb3fee1ce0d2d89f612e2db6a66364fb1a9f635b67a223db473a2d59f86437776f1fe441b1994303caa72d06c9a399304f83f4a908bb64c37077138ba9101b551cb98b4369e0e890399259ee09aa2ee6f44342d03767f4650d811d83b72fa47c3e64d7b7e930cf513840a240804524b799fd187821d5bba7f7823354f272b15df521539c2bb663ef4f225d198407d3a353f1b72fec3319076fe40b770ed35ebc4abcd92bf76d0e0f8371f479562d3fe4714f661571ac9dec67e6b1e434e10f0194a1204eb56c0c6dff5d7347cb938bb3def0b9296c8784e771e01cd12fec552f382ed5af8a62b28e4dfed07b229897499191f9208a6abb0794bdd69000e008986f8aa06530e974ea3857fb8a8730e51ff55abce205c45e31ec901031b5405bfc285de98fc1c0ae6876721c96cb259a7724eb285631351924e01eb613624bbe4cef303a9c9e66ae0abd8c9d3e8bb63792e294e2b2629a42be50b0cecf85c6c7353b372ec006ec3235a10e25ee45ccb326f2c8dbe855b98556eb9a62e82abb8cb20cf6670038ba29a8d3895f6c74b4b6fbeb0a19ba6d9fd2801eccd7522107365299bc7f35d150bce6b6544f9550e8cb9565cdf71b7d3ef1f537297387ee51bd31fc3358699a393cef0c25d226927bc272ac5765a4948b07be598be8f3995f84c51f08e3b8e9cf55d1daeec5212705e6545e72150f74c07e78a114f296ca1e55a29e1b24aa7743699c866522bdc19b1d79e4b91a57bb1a7f1a966b9b97b248ff88823d1ced2614666ba60b9a5ab30f2e0c85bd83350558498e265007d7b259ccf1b5ca10279eb6039b2a7a98689862fd19039054ae4b3e327bc95358d9450f2332c2c0b1c3953b29a3dc7e776522fac1e1d4ae8286723ab7897fde681e427d442236d71a9d71a8cd500e08a12c9bb3fbdc46019f6fcb9d7d9a1ff704f87c9019c3b5765d73ab56200c1268aae10c4ffe3a95dc9cb6add5c5ca77d3d7f6b5056509fa3d85e04c4c803a45e979f3dd1319473f04ab7a4f45e134714f8ac4a943d9c7a3ffe3815b086a46e0b6a56cfb6d02e8c6c638dfec02c6c5b5d655d40475b23101279e1c6c82d001eaa59e48c3fa02d6f1f420a657153fd1834849579ec09cb22b1507dfc3b7886e7809b3673b3e0cde894b667974bafbd85bc2dcca47082e563b6b5d0da7b7e6877cf6cb3a7059a36e83befaaa9249bd9858f10a9958a0fb5ca3a3f58597c0186ad3b4ddd00a3a2f188d8fb2c797f37d0643ecb02cb57ee6ea4fce2e545710a33e0b8c652343dcf4791d5f3d5bc29addad6ec42c136849f0db0c709e3dd669a83b26bd3590bea422fc689838b01dee0470cce13830a7d3852961c4aca392e01b66c89db22dc3782c57d2d615dba9d1a37bd4a8d194bf59d5264d9614d43468feb4cdc0ac0f89504fb4c1cdaa51213d987913c808d67431cf9c95360c0a20a8e98d1a056bb6bcd01b280f08431b4b6e88072b6e3d7caa713bff0a5a6dcaef94044bf7556eebc36143390980b99c5acb75d1fa510d4cc6c0031bd76d045048ca8cd6b710e403d03d5c7cc8506ad1de163097ac6f9d9558c60c3179b85971fdfbe6440d7baedc34662ae015ce0ba0a006eaaec66f4c902909b2b1559a6ce8dc0e5f2301de47632be38b6ca7c2f323bc909ec98e1364278d10deaa332d86cc01c635f828073cb4765563047b612ee96c08e5618e7f968aafd1d6f5cd2a6bddfb3781d0ff44565b3b79c569d7f45b1ede5a698b3530bc04ab17aa632efd6397746721a17475c57d48ab261b27ed05d071b1f31ebbc2c9289f9323f53b2f4145a74149bae1bea91516626c657921fca9efe6635150e1fc20bc11ea155584e88f57db98cdf0a5620a9fc3c86af3a5d4ad00c0d8759b821a082fad28f738fd1214a4c5125698afcdf8b9c9a8c9e2103cf0531f8042ad1ce4f889826e6da4666cc754ae281b3d3ab8519f5bacfe25aa6eb0972dcd698c46d34d9cc11845f51d9dcf68287552a889c687de35d84bfccc13d193d7d6aae5eea88e7b5a39b6c7f4d09aeb93281bc0594de471207f52693dc81915bf6e8ef932a0856571b216a870e6b6b98473b9266c4fa0b4defa64757fe203c1784dc5cdaf610bda125405280648b23f71886517aa53ffe19f80b7c25c4936224204907590893dc74986329bc62adc4a19ed19cbe16387dcc29f8c9d63ef6f23bbc2169c19ff50e8ab9bde2a15c58f89fb4d3bff030fcfa8d869bceb7b5082610b476d76c23a215464ea1601088a0915ff859646479193587f51fac4d34e33523d3e262e9176423a79663e0fee1a6d994c9caa4808c3a1c894aa6d65e781a825ecb553897ab752d2cb4aa75883654e549b79c4befb32a6aee00a21c6beb9f89aee0a7fb3a5c69d47d151bfa9011c5cac20ae9dbbd9f278cbc7d7021732d6aeb11c2ac47b5dfea6ba7d51f91ab2bfb614fbf36c0aa80ed4eb8061d7e4b42186bd94234a1872fc78aa7780500ee258ce0210ab5fa415129cef558f0bd81b29f552de4b16788bc1e110b049c3d549284b0c584a2ca7a2550f932a4e0193cabf96e52f8b6b89626c1359b3b85cb6f931daa6b59cb15ae2652acabe0573c28534a3e9f386826cab17aad7434b98ba5f12d4e992bccbe34c3f82cc8a8011f306e90bbb090e31691f6021368c648d1a0628f5749be82fe4c7b69ca4a6dedf6ffc980a43fc9ded8c44397fb3b2aa0ff24e76e983ceaaa5f8eb754716ab364e5d2d30761f2d110556c8f36243d7d7331ee8c35ebdad44931f81ae7056e09b33cfd5f17f6c3c635baaa0d27c0b3a258b7873fa3b5ce93767ff23bf8e02577b8793797346e3e2658fb2ede5aba603d666e5727389bf32e6dbc3eefadaae82b38d1c12c3fca5e8cb914e4ca38df7291c5700a8b615987aea0b7fc66043018012a2f1ad624e0a6ae7336f4827ba814540f6728a71691b58d8a1d7d91310e254183ddc98fd0352e47b6a60cbfe4f4d2ec32d7a1b47642562589e2cc0aaf94a57fb0df4f3854526fe33226c6c79f6cc52cd2be82de323259812da22cc973cf3c618f1f0f9755ca136b28439e418af38407508e5358c21f591289cf09c03d2582d6f958b42c0e7e4db2c1178230cd9bbf0b14756e726467594b3574ce86c5bd1a5c29c165d1c159bfbd3633485c3e8f9cd1eab21ea438abc08d6ab647e42ab00a5978b72fa1c2018023cb0d2a67682595d0ec41b08c7c7e25da7147af584948ba025ad159f7b1e77b9a2aa818a7c32ac00426c8e387f701d4476777b30c56f55ce2b2389d7577721b33f55696e7d1ab063892d65b153773a0dd6f1db6e2d134ae31d25aa94113efd4e92f124d451cd9862a4172035670f23fe342f7f8358ed94cc2a9b4894009a426088d119fea1bbb9841bc0471d4e91ad612adad4c17c0d210a5450e697b4d852b103ac4c8edff0e0bc22cffb32d41c024df80d66af1ed35d4db4479e29d966157c1385381846eb15a3b629f49e27aa7a91971f5da7b5d9644c12b44e4ff2d14f83d61c66bd19a2d83622dca23f5280b1841bc82aeb12788fc89c8e97c9e4878759f662ef9dfe065dbab599d9e9d3afeec2b8259c47fd9d2d8f9b5be14b7ed6e4f3530ded6e57d86c62e33485e8fe28cbbc5cb22c300ad313473402328fb7ebac709021284dacc0997b4993978412b450691b3e8918fc7f623bfb2ca6d8f84759af8d99dfc119c327114a02982e2dc061e41a66d01faf00404befc039e4220ce7ef9f727c23014006b1132b340eb9a9152c7bf8977a31b34bcc271d7db96b48fc84a48a22fc8bfd526200d6db67f0d0312b62db855fafb24508f9ff68e83626f08da868c964ee5bf2107b2e52d58e0ed87e1a4045e301813310a1bb1d79d34ea8adc4037bd7ae723c2177fad"}, 0xd15, 0x2) 19:17:29 executing program 4: r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000500000"], &(0x7f0000005a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed7ffb) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000200)='N', 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000400)=ANY=[]}, @subvolid=0x5}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x5]}, 0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1cdb42, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000000a) write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x5d, 0x9, 0x8f, 0x274, 0x3, 0x17, 0x4}, "a5b73f5c67a4c0fcf1f14fed4ee7"}, 0x2e) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"b92eab360e32e4650abb2909436c0722", 0x0, 0x0, {0x5, 0xad9e}, {0x6}, 0x29df, [0x80, 0xfff, 0x0, 0x10001, 0x1, 0x51, 0x4, 0x1, 0x9, 0x2, 0xffffffff00000000, 0x0, 0x800, 0x101, 0x2, 0x3]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) 19:17:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_012={0x2, 0x2, 0x0, "1058"}, @main=@item_4={0x3, 0x0, 0x0, "a23e7132"}, @local=@item_4={0x3, 0x2, 0x0, "202e1ec5"}, @global=@item_012={0x1, 0x1, 0x8, 'q'}]}}, 0x0}, 0x0) 19:17:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 300.410543][ T28] audit: type=1800 audit(1652469449.692:63): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 300.634649][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd 19:17:30 executing program 1: r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) fsetxattr(r1, &(0x7f00000001c0)=@known='user.syz\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') [ 301.045837][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.045882][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:17:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 301.045909][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.045954][ T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.045982][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.050149][ T27] usb 6-1: config 0 descriptor?? [ 301.266409][ T6837] fs-verity (sda1, inode 1179): Error -4 building Merkle tree 19:17:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) [ 301.556395][ T27] plantronics 0003:047F:FFFF.0002: global environment stack underflow [ 301.556418][ T27] plantronics 0003:047F:FFFF.0002: item 0 2 1 11 parsing failed 19:17:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) [ 301.556965][ T27] plantronics 0003:047F:FFFF.0002: parse failed [ 301.557044][ T27] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 19:17:31 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) 19:17:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 19:17:31 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) [ 301.804915][ T6] usb 6-1: USB disconnect, device number 5 [ 301.943662][ T28] audit: type=1800 audit(1652469451.232:64): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1169 res=0 errno=0 19:17:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "53368990b6f81e48500996497a08c077cadf5ac90ee94cadd5d02ed9341cd15e9abc4eb05b2cea212bc5aea4a567683dc6dc76730e7ed2ccbf06aef82f479dbbcde43eb99d1ef94b258216142faed846661ec82b"}}, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 19:17:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 19:17:31 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) 19:17:31 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) 19:17:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:31 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) 19:17:31 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) [ 302.664432][ T4310] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 303.024789][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.024827][ T4310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.024852][ T4310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 19:17:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 303.024940][ T4310] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.024996][ T4310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.027721][ T4310] usb 6-1: config 0 descriptor?? [ 303.506401][ T4310] plantronics 0003:047F:FFFF.0003: global environment stack underflow [ 303.506423][ T4310] plantronics 0003:047F:FFFF.0003: item 0 2 1 11 parsing failed [ 303.506894][ T4310] plantronics 0003:047F:FFFF.0003: parse failed [ 303.506927][ T4310] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 303.748106][ T4310] usb 6-1: USB disconnect, device number 6 19:17:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "53368990b6f81e48500996497a08c077cadf5ac90ee94cadd5d02ed9341cd15e9abc4eb05b2cea212bc5aea4a567683dc6dc76730e7ed2ccbf06aef82f479dbbcde43eb99d1ef94b258216142faed846661ec82b"}}, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 19:17:33 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) 19:17:33 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) 19:17:33 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) 19:17:33 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) [ 304.644595][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd 19:17:34 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) 19:17:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 305.004856][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.004894][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.004920][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.004963][ T6] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.004990][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.007141][ T6] usb 6-1: config 0 descriptor?? [ 305.486956][ T6] plantronics 0003:047F:FFFF.0004: global environment stack underflow [ 305.486979][ T6] plantronics 0003:047F:FFFF.0004: item 0 2 1 11 parsing failed [ 305.487666][ T6] plantronics 0003:047F:FFFF.0004: parse failed [ 305.487699][ T6] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 305.709644][ T6] usb 6-1: USB disconnect, device number 7 19:17:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:37 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000008e80)=ANY=[@ANYBLOB="1500000065ffff0100000008c8395032303030"], 0x15) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x89, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@dfltuid}, {@version_u}, {@mmap}, {@afid={'afid', 0x3d, 0x7}}], [{@hash}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0xd15, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0xd15, 0x2) 19:17:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:39 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000280)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x1015, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x1015, 0x0) 19:17:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:39 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x9c6}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x504}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:43 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x9c6}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x504}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:43 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000038000000850000000e000000a60000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) pkey_alloc(0x0, 0x0) 19:17:43 executing program 2: waitid(0x0, 0x0, &(0x7f0000001840), 0x0, 0x0) 19:17:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x9c6}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x504}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x9, &(0x7f0000000040)={0x8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000000}, 0x0) 19:17:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x0, 0x0, 0x0, 0x101}, 0x48) 19:17:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) 19:17:44 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x7, 0x20}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xe0, 0x97, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe5, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x2, 0x3f, 0x10, 0x6}, 0x83, &(0x7f00000000c0)={0x5, 0xf, 0x83, 0x6, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0x3, "b9f0b024ea17651abec865c80af90f3fab028697eadb94f8e8e22f05a5e55717a38fe98180b190600a9ece15bf56734c0e0553ad433a97479b9bd468ff9b"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "8c890b963ff670db6446682031fe3842"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x4d, 0x5, 0x6, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x1ff, 0xf00, 0x9, [0xc0]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c0a}}]}) waitid(0x2, 0x0, &(0x7f0000001840), 0x8, &(0x7f00000018c0)) [ 315.451839][ T6978] loop5: detected capacity change from 0 to 264192 [ 315.506213][ T6978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 19:17:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, 0x0, 0x808, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7, 0x5}, {0x9, 0x3}, {0x81, 0x5}, {0x7, 0x6}, {0x1, 0x80}, {0x4, 0x6}], "8e411f73bbd853c0"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3, 0x2}, {0x2, 0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x10, 0x2}, {0x0, 0x7}, {0x0, 0x80}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x40, 0x6}, {0x73}, {0x80, 0x5}, {0x6, 0x1}, {0x9, 0x2}, {0x6, 0x2}, {0x40}, {0x0, 0x2}], "b77fc07ab79ebd5a"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x81, 0x5}, {0x4, 0x4}, {0x1f, 0x5}, {0x81, 0x3}, {0x7, 0x2}, {0xff, 0x3}, {0xff, 0x4}, {0x3f, 0x5}, {0x1, 0x6}, {0x5, 0x3}], "6c52e83df813a86c"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xbb, 0x4}, {0x1f, 0x5}, {0x40, 0x5}, {0x20, 0x5}, {0x1f, 0x3}, {0x4, 0x4}, {0x67}, {0x3f, 0x2}, {0x6, 0x1}, {0x40, 0x2}, {0xdb}, {0x0, 0x1}, {0x1}, {0x40, 0x5}, {0x7, 0x5}, {0x3f, 0x4}, {0x9, 0x2}, {0x2, 0x5}], "88e3fe6aca13b856"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xb0, 0x3}, {0x0, 0x5}, {0x8, 0x6}, {}, {0xff, 0x4}, {0xf5, 0x7}, {0xda, 0x4}, {0x2, 0x4}, {0x2, 0x5}], "04ae02ba5ae2dd74"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x3}, {0x3f, 0x5}, {0x1, 0x1}, {0x3f, 0x7}, {0x3, 0x1}, {0xff, 0x5}, {0x7, 0x1}, {0xc9}, {0xfa, 0x1}, {0x8, 0x5}, {0x0, 0x8}, {0xf3, 0x5}, {0x64, 0x5}, {0x1f, 0xe0}, {0x3, 0x40}], "681a562d351ea86f"}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000005}, 0x8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x67}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x909f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2, 0xf8000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfad}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf6d1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xed}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3fc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x118, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x82}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbad9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x29a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf337}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x56}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x36}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x844deaee0c837d7f) r6 = socket(0x6, 0x4, 0x80000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400d081}, 0x4004) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2a}, @void, @val={0xc, 0x99, {0x4, 0x68}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a499b4e1602e2f44fbe25ce4d71bdc0fde0a5a87cae2f372"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f68f58fa5f3bb9dcf7f7e887b9e04536ba64725fb8763f2"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x44885}, 0x41) 19:17:46 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x9c6}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x504}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:46 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)}, {&(0x7f0000000600)="587d6724f2eb3d9f731c97041e59ea66654b2d9fad65a5ed4ec84dde1b8f82e9e1d3e74246250e9509db5d49ec3c4306ab510bba332cccc6df1ef7ee0f501e4fd5b3c5faf0471af8d7137575f13e66c2590ff1bbc4b00db09a78793794e996210f38f3b6249de669718638c52b1bd163044fef51bf059129e2d3a1ac30b45710658826dc7a63e26fb4c33454c583733cbfcd11313b59518cfb99426f8f9b9bb70fedc832bbf5e46e1d6845c0354997885951bce51d93d09e3d5b92211603cdfc3fcbbf7bafeb4c9feda18aa2e17a0a8b108f9eb05bb5a9a22f", 0xd9}, {&(0x7f0000003800)="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", 0xbfc}], 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB=',grou', @ANYRESDEC]) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x81) 19:17:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) 19:17:46 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x9, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7, 0x20}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xe0, 0x97, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe5, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x2, 0x3f, 0x10, 0x6}, 0x83, &(0x7f00000000c0)={0x5, 0xf, 0x83, 0x6, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0x3, "b9f0b024ea17651abec865c80af90f3fab028697eadb94f8e8e22f05a5e55717a38fe98180b190600a9ece15bf56734c0e0553ad433a97479b9bd468ff9b"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "8c890b963ff670db6446682031fe3842"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x4d, 0x5, 0x6, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x1ff, 0xf00, 0x9, [0xc0]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c0a}}]}) [ 317.214362][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214413][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.300946][ T7003] loop5: detected capacity change from 0 to 264192 [ 317.313663][ T7003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 19:17:46 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x969, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x969, 0x2) 19:17:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) fsetxattr(r1, &(0x7f00000001c0)=@known='user.syz\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') 19:17:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x9, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "cf49deaf4a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x7, 0x20}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xe0, 0x97, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe5, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x2, 0x3f, 0x10, 0x6}, 0x83, &(0x7f00000000c0)={0x5, 0xf, 0x83, 0x6, [@ptm_cap={0x3}, @generic={0x41, 0x10, 0x3, "b9f0b024ea17651abec865c80af90f3fab028697eadb94f8e8e22f05a5e55717a38fe98180b190600a9ece15bf56734c0e0553ad433a97479b9bd468ff9b"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "8c890b963ff670db6446682031fe3842"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x4d, 0x5, 0x6, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x1ff, 0xf00, 0x9, [0xc0]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c0a}}]}) 19:17:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x5452, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'veth0_to_hsr\x00'}) 19:17:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) 19:17:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) [ 318.005928][ T7019] loop5: detected capacity change from 0 to 264192 [ 318.026254][ T7019] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 19:17:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) open$dir(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d90100000080db0000000000000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000013b00)) 19:17:47 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}) 19:17:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 318.233170][ T7027] loop5: detected capacity change from 0 to 264192 19:17:47 executing program 2: mount$binderfs(0x0, &(0x7f0000000340)='./binderfs2\x00', 0x0, 0x0, &(0x7f00000003c0)) waitid(0x2, 0x0, &(0x7f0000001840), 0x8, 0x0) 19:17:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x61) execveat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) [ 318.431783][ T7027] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. 19:17:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000038000000850000000e000000a60000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) pkey_mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) 19:17:49 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x969, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x969, 0x2) 19:17:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@local=@item_012={0x2, 0x2, 0x0, "1058"}, @main=@item_4={0x3, 0x0, 0x0, "a23e7132"}, @local=@item_4={0x3, 0x2, 0x0, "202e1ec5"}, @global=@item_012={0x1, 0x1, 0x8, 'q'}]}}, 0x0}, 0x0) 19:17:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x61) execveat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 19:17:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d80)={&(0x7f0000000bc0)={0x1e84, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x890, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x75, 0xb, "0d4ce86dbdc18b33c0e69192791a37c9cbd17c7ed2929425989ae008f374733f1b2328103c9368906d378cdd73a99b6e2538b3aade4efd72d54daa883e594614eff34d27885bda507a615c15d8cde4766e31afd312a20f5aa79e660da94392b0e9c8fb2399d994d8772343ce0be8fe360e"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SRF={0x37c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x474, 0xe, 0x0, 0x1, [{0x4d, 0x0, "33c8f29f6e0b947e3f6950b615578adaa229b92b76256e659aaf8eabccd56c12d39c15f7a1bc3682edf713536bf9296abd5d6b387bf2b818b1fb94a126a7be2cf078a65d8d1e7d14ef"}, {0xf9, 0x0, "6613bba9d4f21b46291e91f1d57fb3ede5b4f68ca6ea6e95303b0d14ba270a527fc85b48a15a44554880983d46fbc6caa9d985fce7fe9b3477a24ad52172b86e64bb8df12aac97172917a7c2d161ef99b84f7a0cd29a0d4302ceb456d5d36678669c707cbf287bc64f490074089ae736c27114187c0adfe36720ab835a4c49d45b4f7bd20225aa73a12ec1fb00165a14bf474728f85e28cdb18fd014c76175dd181939520c8bec42bdefeb34dcc6ccfeae4a782500326531a4d127faa620af097b5fe488fd083ab21cf0ec7c5380c0c5357a82fe5639c7e8367a48a889ef95d3ccf0225260f5be5e2842fee1782435803ad53dafb5"}, {0x5, 0x0, '#'}, {0xbd, 0x0, "78fdf0152f047247abd8fe2f0a472209819231f96438ebbf040dec372874457cbe3ec16dfaf18c51610eef389f9caaa0191bf2f03bcd438e8d955a7aec070cae2e24833fa780ac39fdefdc70c416eb920c4b709df4dc57ea0fb174da5ffee740dda94ba171cfac10787e1774628a501516bf3cf2fbcc886050ac832356411b7b2cc53147467e9cbe6717a21e4116f463120ea291ee34a9149837acab35149fdf7fcbadd9158e6e5e8e815592054493e7d9e25c87de015fd105"}, {0x5d, 0x0, "84f7097af3f5dd2a630d2b4f2567a573afddbe2934eeeeb21573b26d700b6452e7b406a2b62a9033ea7daa8a307edb4b9c6d96fc938f96381352b90e9f78d80d1a537eb309339d4e48751d8950bee9ef40f090843b98f08614"}, {0xd5, 0x0, "fdacab4b5d7089a7505ab39c9703fde0584f5b53b80fb7270e3e592143a499c5145d77862a6b2e865b40892afba093c6399ea7cbe0ccc6fec1287d4338700d0c52a5c8f445900f238108a0a34a5a13ebccf4d435f28ce064dd4c8693d19b6dddcfdd7208de4c4021d0e1e9eac91e1d0bc454b1c21945e1b31460b1ecc490fa84591fa000cd3e854cd22c3ffa7d0c24ae572ef9d7807422d1712c42d82b666cbcfa834a5f1caf5ac8ae1a06e5a7e8ebcbb2396d9c73145ad65dfdd6e6687798fac2f5ee82e0e4d4a7901d731174c9c784ca"}, {0xcd, 0x0, "83dc1f04fe440c000d97f484ef7a21e8d54d8623482e7fda9e2723854054b0193ad86e75421b3d385a3a48d4c9ed98beedb5e172917c35062707782fa9a2963871ddcba35b268699d1ad4872adb4aece154f503d3b9a67da19ffea9b263bd9eeaa135d63753d143f4f3e368fbdfae43e0daa9a27ac4d8092168ee4d7c2587d7bcf278ff5d7cbbe9f90aa0bb64130e41831c6eb3bbf336d460df7eacf6244ab90ceae653b63d6d12bcc3ae9d7f06a99f21bb0033d22b1da7c8c91a4903df4aa966f5b84a01a5a7cf364"}, {0x51, 0x0, "203349ef43b73bb6b681d3bac03c5ae837ba185b9e293be90366f7786ab5e3f2b0193e74a0f4287e6bfc0cd1978070158de83fc8c91e468868a704955973263bd328125d759604899fe7e77951"}]}]}, @NL80211_ATTR_NAN_FUNC={0x268, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x240, 0xe, 0x0, 0x1, [{0x7d, 0x0, "ef2d354c58c0c8a5c8484de65605741c49b509aa473d654d63a3f64939dfb2261a3d19da450c8cf85cd380fe8dd3293f7f272041367d2f94bfc3dcf2af5290c239303432e225cc29db2b8cdbc99ff7df055f6e51e70c2770200d7e63cc335b6b6e70face7231ec0e388f37046998656be1b4b8bd3097b3442d"}, {0xd1, 0x0, "325999d5cd04cd1778fb27eb746d68c05960366d2829b4fd7fd0831553a893865e46c39e899b09089b0245684859f4c8bba93a83fac4a5c47af06165852203c41cacd164bef66160147fc3462a6b36bfd5fd6dd9e7480d45555536a1fc71459a6b31d86dbc27432fd5e1a3cd59378e22db65488da3151e03f53b22e4182a3b67d3bc6c0677c7c917ca13dcc8eec5700b161400db9a16dc9de8a9c68d59e6649c69a139302a931d8aeb71abd27624d706d5ab5b92caf47fe5fb6e9fefbe37e70d71134815b90023321007503f11"}, {0xe5, 0x0, "d2cb6a540297cc365113749a4d3f52b2131c1ffd5c78ad5ba7e63de533450694acd3bd1d454a72adcc4b44b9d69cfa9eaf9dfc3e414e6bda93f625d475b30a1cf25349d3f5a66dd3f3aa14fd12cb0fa26751405b7be9ba8fb68399b68a712ea907491969b86dd7651b3a74252eb2929aa51dede056c8b712123f02af9569adeac50f5465bde4b5991dc21ed0c2c05099b729087c5735990c7157b3f219542b6e3355f4e25c8a730adfb75d9e859a451a2b80542f5c7896304b62832748386b3cdc1b04b009e093312351566d74a16f8826166e3feefa5d40cb17f9ce4c15baae06"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x180, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x2d, 0xb, "4e2c5262514a3527302a8c33f9cae01a1da818e9b797f55b5d5a5a844bbf1ca4a4e1c5f00c4d83206f"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x21, 0xb, "6df856c31be0e51a2bd2001147cc4348b697afe33f4ed47815fcd0d2fa"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x118, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xbc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x9d, 0xb, "83ed0bf6d6019cd2124c8cff4b22873daa39c45d0f023c59efb6b76e32f9d076ab7f081f131138176956c4eb16c65ddad8ecc87ae603d07be1615feb3ab81efbb2f0dfcfdf4f393b497a22c09d7b5e4bd6920cc67178eb7ce82e50a255f02f76e865ec227d5e114c6696e4ca9699cdaaa2e64e25fe325b55eb77518fbfaa83b50254ad40ba22b309380c08fd80708112ffe8ed71272f86f524"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1134, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1128, 0xd, 0x0, 0x1, [{0x6d, 0x0, "edf4afc3e198ed22468de324cc260d0f2f418b2797f5979879fd1d9c7fe5217538bc49fd80dd80ad636edd4b25791c37ff38a68ffc037fe7f700d72be56c813c4b672c59cb4f1799a2e4463bbc952e6554d4b8b8ac6c6b08f5e6f0aaf0e9edf26f8da880998f17b008"}, {0xf1, 0x0, "eb3f3720509ba4f4ffef8e05bc618900eab6739798bbbb17f4551b314ac759886dcd50cda74f7ee7a3a1ddb0bc412a80d6002ee4f0dc5a8faa3672360242bf27d977af6415234b04a2c57207fe25f3c6a90c24a81338877892dce6648c0886c4850e315de14ce31b395577209ae2000bd7b9357106c10c5f491861da91a90730bc7934d1ece7cf31772a1abaceabdde2698715d0de106d06a226d020b41a0aa1d138057109e8c108c5d7fc5628d9db6069ff6711180fda0854e3ed376538b2e72de1d13561f1a3c632a47b8f2f68a6fb439f117b700551bbc1485231f000103fc5de1d3713f4cbc462a908545f"}, {0xfbd, 0x0, "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"}]}]}]}, 0x1e84}}, 0x0) 19:17:49 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7, 0x20}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x97}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe5, 0x7, 0x9}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5d, &(0x7f00000000c0)={0x5, 0xf, 0x5d, 0x4, [@ptm_cap={0x3}, @generic={0x3e, 0x10, 0x3, "b9f0b024ea17651abec865c80af90f3fab028697eadb94f8e8e22f05a5e55717a38fe98180b190600a9ece15bf56734c0e0553ad433a97479b9bd4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x1ff, 0xf00, 0x9}]}, 0x1, [{0x0, 0x0}]}) 19:17:49 executing program 4: r0 = creat(&(0x7f0000000280)='./file1\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) fsetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') 19:17:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 320.699302][ T4311] usb 6-1: new high-speed USB device number 8 using dummy_hcd 19:17:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x61) execveat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 19:17:50 executing program 2: r0 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)) 19:17:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x50a}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='async\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) [ 322.274278][ T4311] usb 6-1: Using ep0 maxpacket: 32 [ 322.594634][ T4311] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 322.594700][ T4311] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 322.854780][ T4311] usb 6-1: string descriptor 0 read error: -71 [ 322.854874][ T4311] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.854903][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.884513][ T4311] usb 6-1: can't set config #1, error -71 [ 322.891073][ T4311] usb 6-1: USB disconnect, device number 8 19:17:52 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x969, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x969, 0x2) 19:17:52 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f00000001c0)="441034733583e80531451a7520685540dfb0925dc3a3f935f89239e9b335e0fb80794e", 0x23}, {&(0x7f0000000600)="587d6724f2eb3d9f731c97041e59ea66654b2d9fad65a5ed4ec84dde1b8f82e9e1d3e74246250e9509db5d49ec3c4306ab510bba332cccc6df1ef7ee0f501e4fd5b3c5faf0471af8d7137575f13e66c2590ff1bbc4b00db09a78793794e996210f38f3b6249de669718638c52b1bd163044fef51bf059129e2d3a1ac30b45710658826dc7a63e26fb4c33454c583733cbfcd11313b59518cfb99426f8f9b9bb70fedc832bbf5e46e1d6845c0354997885951bce51d93d09e3d5b92211603cdfc3fcbbf7bafeb4c9feda18aa2e17a0a8b108f9eb05bb5a9a22f9a700df3c97bfceb4909568cc2c0064a9282ac0eb9f4a02245ffc5b7385e4b80", 0xf9}, {&(0x7f0000003800)="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", 0xee5}], 0x4) 19:17:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40, 0x61) execveat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 19:17:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x50a}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:52 executing program 5: chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19:17:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x50a}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x62}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x50a}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:54 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@string={0x4, 0x3, "5496"}}, {0x94, &(0x7f0000000240)=@string={0x94, 0x3, "96ae806ac1313a593018065140f43e34935fc51556e54a1c21521dc18ed78104bd5003b557e8f1cbbfbe44cae421f3d28997c9113a698e95336df25d7387b21eec6a0fd5aa3cb546062297d6297f0bd5356bcc631886251c0137455eb73b9066dd1ee32fe4fe50dcdef1c2bf62c9fa91890a232eabc587984fa78bdc400b42f60f6634ca93b58cf69ce4eb6dc7f78adb0df7"}}]}) 19:17:54 executing program 1: select(0x36, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x7c2b}, 0x0) 19:17:54 executing program 4: mount$binderfs(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) [ 325.994430][ T5347] usb 6-1: new high-speed USB device number 9 using dummy_hcd 19:17:55 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)={0x0, 0xfb, 0x969, 0x5, 0x6, "dcd2e0d791f187c24fd367ce8f15953a", "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"}, 0x969, 0x2) 19:17:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x5, 0x0, 0x0) 19:17:55 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e00)='y', 0x0}, 0x48) 19:17:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x102}, {&(0x7f0000000140)=""/85, 0x3c8}, {&(0x7f0000000fc0)=""/4096, 0x3d8}, {&(0x7f0000000400)=""/106, 0x50a}, {&(0x7f0000000740)=""/73, 0x14d}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x409}, {&(0x7f0000000100)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:17:55 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x3d, 0x0) 19:17:55 executing program 1: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) 19:17:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, 0x0, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffffff) 19:17:55 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x28, 0x0) 19:17:55 executing program 2: bpf$PROG_BIND_MAP(0x23, &(0x7f0000006e00), 0xc) [ 326.404619][ T5347] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.584814][ T5347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 326.584849][ T5347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.584873][ T5347] usb 6-1: Product: syz [ 326.584890][ T5347] usb 6-1: Manufacturer: 꺖檀㇁夺ᠰ儆㐾従ᗅ᱊刡석힎ҁ傽딃쯱뺿쩄⇤틳鞉ᇉ椺閎洳已蝳Ẳ櫬픏㲪䚵∆횗缩픋欵揌蘘ᰥ㜁幅㮷暐ờ⿣ﻤ뿂쥢釺ઉ⸣얫颇ꝏୀ昏쨴떓淫 [ 326.584966][ T5347] usb 6-1: SerialNumber: syz [ 326.904616][ T3680] usb 6-1: USB disconnect, device number 9 19:17:56 executing program 5: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7f}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 19:17:56 executing program 1: io_setup(0x0, &(0x7f0000006800)) 19:17:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) io_setup(0x7, &(0x7f0000006800)) 19:17:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) 19:17:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6ca, &(0x7f0000000000), 0x20a154cc) 19:17:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', 0x0, 0xffffffffffffffff) 19:17:56 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 19:17:56 executing program 0: io_uring_setup(0x6e92, &(0x7f0000000340)) io_uring_setup(0x67e8, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x0, 0x319}) 19:17:56 executing program 5: pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 19:17:56 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)={0x0, 0x0, 0xc}, 0x10) 19:17:57 executing program 4: mq_open(&(0x7f0000001000)='\\*/:\')$\x00', 0x0, 0x0, 0x0) 19:17:57 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x1c, 0x0) 19:17:57 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) 19:17:57 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:57 executing program 5: io_cancel(0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:17:57 executing program 4: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0) 19:17:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', 0x0, 0xffffffffffffffff) 19:17:57 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:17:57 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:57 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:57 executing program 4: bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) 19:17:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x267, 0x0) 19:17:57 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 19:17:57 executing program 5: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2) 19:17:57 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r0}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001140), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001100)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6bf, &(0x7f0000000000), 0x20a154cc) 19:17:57 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 19:17:57 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000040)='async\x00', 0x0, 0xffffffffffffffff) 19:17:58 executing program 4: io_uring_setup(0x6e92, &(0x7f0000000340)) 19:17:58 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:58 executing program 1: pipe2(&(0x7f0000000c40), 0x0) 19:17:58 executing program 0: mq_open(&(0x7f0000001000)='\\*/:\')$\x00', 0x0, 0x0, &(0x7f0000001040)) 19:17:58 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:58 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) io_setup(0x6, &(0x7f00000004c0)) 19:17:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x2100000000) 19:17:58 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x1a, 0x0) 19:17:58 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:58 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:58 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x1000301, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 19:17:59 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000140)) 19:17:59 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x2, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 19:17:59 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) 19:17:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000a80)=""/232, 0xe8}], 0x6, &(0x7f0000000b80)=""/141, 0x8d}, 0x664436a2}, {{&(0x7f0000000c40)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000640)}, {&(0x7f0000000cc0)=""/95, 0x5f}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f0000000e80)=""/86, 0x56}, {&(0x7f0000000f00)=""/234, 0xea}, {&(0x7f0000001000)=""/227, 0xe3}, {&(0x7f0000001100)=""/41, 0x29}], 0x9, &(0x7f0000002380)=""/189, 0xbd}, 0xea}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001140)=""/30, 0x1e}, {&(0x7f0000002440)=""/238, 0xee}, {&(0x7f0000002540)=""/224, 0xe0}, {&(0x7f0000001180)=""/58, 0x3a}, {&(0x7f0000002640)=""/198, 0xc6}, {&(0x7f0000001200)=""/5, 0x5}, {&(0x7f0000002740)=""/114, 0x72}, {&(0x7f00000027c0)=""/184, 0xb8}], 0x8, &(0x7f0000002900)=""/240, 0xf0}, 0x2}], 0x3, 0x10000, &(0x7f0000002ac0)={r0, r1+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}, {0x0, 0x0, 0x1700}, {0x0, 0x0, 0x6700000}, {0x0}, {0x0}, {&(0x7f0000000580)="111fc0d901000000803a0900803a0900", 0x10, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000", 0x12}, {0x0}], 0x0, &(0x7f0000013b00)) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x604000, 0x124) sendmmsg$unix(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)}, {&(0x7f00000012c0)="de683eccb03455c46e62d8ccea691fc25d2bf5076ddc46fee16210f79d4b235fa117c6269b64dab47faf6f49fa03a00d3022a38120df898bd2aa90ce03348faf82520c9699ea1bf60e8ee139087083f7f38c0f49904a8d0e2de5f801939e9d9e64e9f1855140d5a9e59b0efac34acc2353ee90ca9348cbed0ec8c4bdf5e0cf6783a702153d8adce823a5d3c2a39dfcfa3cc80b0f521ee24359aa409cc3dd5678d0d264557a3c209df6c0a185f1f72e0bc767f85897f6b844f6be918b377f6a3eb04dd31e487a0c140621d06665db75f592a16a0c0f284af335159bb2dabe07492f2c94ba8a3df258fa51d53b17e6b25d032b094d7dcde17e94d6b3a25fc7f9710859eda7eaaa98ce267a290a11a0258f89a46956c85894f848aace8396d7a3d0fc3c4399c8d01cd76df757aa290aefdef00cba5fc2a75ac3eece6db4faf9e9d7bf040ae0ae03bf8057e708b2a583507dddd283b0e4b60d353cd50b0f18ba75080143588518cf2af4aa956f239d6cd2b321693cfb2c3e27e47ab994e36ade64b38956d9a363044799e0b8cdf466b9899ced4ab9207a6d71925582e7b8270d151bbaa36aa3ead504bb838da48935110e436c6c2e7fe2732b50f98b4a10df500399e4e587b804b0ecaa917e57c8ef9f7df9c8ac9a9bde84e5c62939a2a8a945c7af875c145f572a0c3e028382f1839b3c58ed9a94d693cd106bdbe94d31e297326aedb77f790475f982b320c383ad2866f065e28266aabf28f6242b684757d3a17898cf1ec859c3f4a784d713c81ef88a8e6f018ec6fb4a4487bf225511868b9b38f0f0037115a5adf5b84b459a4c9134372aee6486a9bd29e1b5d41d6ae5c0322fe61b9e34e43a7b7b9715a1f578387dd333f74ac6615ecd0b57bb8d0d6ec1cb73cae790d75f07f3a694e9028ee70bec94d52cd8f982ec9019447186d129f6690beefae1520b9664802036bcf028ab0508a7c9edfbed77e331a07c8e3728d2af722d5ef17fc0b81d11eb07860d5aac74568774af1a01cf9efb72553c4ca9bf0600a1cbc1d826bb6c096bfdfc4546a63f0477926b667d3a6d66e8421f46cfd9130d2b52f00e13b46b072b7d6e3f2911a3f9d1e50f1770bdbaf04044acfa031766163d3900cae0b7d32e18f592cd22ccc8331a03dc2ef0a3b62abd1f89ed862642b9ba03bb1803eda23ed9955e6cf838e99e63fa3e803ef62441cb6ceda46146023c9117964e30418c4f5bdfde2f0b0a4fbbd34f71668c7932c326659938cd1b08790f769013977e363b03af65b6175e9fbc808447527fbacae174019efd88d0e2ac98e00d86fc416de7014c232c547a7446de72aac50918cba0552b46d4ab9eb3074b004f05cb176b8ec710a02ca4fa85d0db6a591ebee89d98ca7febf0ecbe60fdad6018131f48697fb34049a206325bf34b5aec3c46974dc28b53b623535bc1f9a8e236553b81f5f1f38dcc5557dd1d807a59d1d3823f046493758e4e902caa88de589e14c85c684b6e980d9b9980112fc3d8d4df4fc67dfd67bb9e3b12ea7b50902e623459fce2b9ad3f110c89c37e2f544eda4fe614597e2727c641042aa2d655e37443f63879d7628fef9accc737681e137e400d5838b07ac4263602ac83e88af218ca2a8121b69a392db83057a9777b9d3d8b5ddb06f55d59c0ec42b2968fad83f65cf72caf832cb99beb8ebd080c9afd66b744252323bc1eb708ec86a95a627ca68f00849463b6f721be0d2971e7fe95c6b0639823c34a541e0fed706d50b86c41b825b18e3181cd0ed2fbd853362a855a9a00af61adf03a1173996f3e4aed2cadf7d2aa186ef94844dece596369c395dd23cd1fb3966d81c4f42707504ade6bd8928b9f50f06c1983e9fb048332fc8e739fe46658dba1aae4b65aa081b2fb85b1fa9abbcfe9fb6301e4e252eff2e3fb95df6ec663cbfccd85e0e59dd0a981445dee03511b84fc9666f052a82374bc65fae400b129b91c0e8af2b232de74a11fde5ef8e18651a50d914902cbe09deb6721086ee1acded62327b4de7211647b36b540790019e08abcc6b8252b51fa8aec0335531b6e7bef1a5efd3191fa9924304b96f9d0757f029b4ec2133c417daad3e333083247bac94f2feeda15a3805d8ea85d2f9ad42772af0b356d8c2dedd5ffbec073f093033220ca97a3de85ec16380b57dc6d9763f9136666ed0db61cbc98f2b6109e4b6e9a3f1df07c8260ae69129ba83b39ae7aa70ead69efadd82bb5378a967a28371a7057096fa85c02309315a292e74de50b1beb4debe9b694cd0ce7c1f792e87e5b3cb187543fa34c98d51951d16164b85658c822ddbe021d4a025317df2d08b6aefa8ae5f71dfc3002cc5b7ac24169fc975229a92473c361a14d75fe2d2475deee0c4349a4337e1c70cc4e9b7a05509a591de72fb1775da265b355869c55d37f410751fdcbe3c801a7ddfe2ffa6eccf3d00bdfb52ac468f919aca27159ef3281f04329d1516f9724cc70c39e0db429e9e1f4f7075f46848d1e1e9b1a0639358f3180329c4de8031cda71cc5bb6ed2273c0bdce0b5954abeb1fe97cef4f7cff915382b11c53ec976818996227f23aa4020165bcfe2a19ee695e442fc3fe415ffcf8cfc51d9ad95cfd9098f7f0b0480959b9e87f2a0548fb922db6edafa24249fbd5462d5ee75a280082f9b9df94a2aa5777a3818f56aea20c0f2db23d1ff014fb26d71dbd49e40e4dfbb6dbe6a27f7df922c77e73e0fba02f2d9140fa5e2999449e4236e003c4f5755d27ff7098e9f45eda520e272bf72270ff6c612e0a41681c9627a3c7154e470724a910438aed71577bd76e424f73073cbe0cd7e230ab97860fde95d2675da2dd9b388a01693a768327fdd572d31c5034103491cb0def6108bf041babe6d257e80955d3dc940653161aee47ebc2783afda6c67501afd25b9e63da1bcb3deb4e440f503513e820f27e93eed074308f2e1513ec7c953025815ecb5195aad840bc6ec7eded8df29915866ea8dafb8a27064ad28f56b763a0db0c8cd9b216cde3cde8a865c1448b0fdaadf5e9ad934cf41045bc1aeb6ff033ed19f1b6c0710cd80e517522c95a78589f8fa2348586acf7bd3a0233417260cbb698697ad1ed1b3cfed1c24233d3e2ac0ea460899022caba58c28244e9f70381674f9b8bd96367cf43ba4519bd328f6ff9bf745f498086186b920977c1ef7192a4205206bd655f4ca3090919879a2399a82fd83987b9462bbf442b1036b726df1964906b467aa55139c0015ecf0bd15e89bb26a634cd224374bd9b5edb70316785941d6ceb12ce8a7ae1dba5f56f707cc52ba9438f4590a6e467f1b2c28e031aa1e2c1bcbf21e3c7b4fb85d68b8a4a5a0f6253c258f5f15ccdda8c6207f3c628294707a14527e48e43e0bc9feb0da586149bc95be50c6b78ceedd2255511c18aa02e2fa6060080e45d29de1f42deaa9435ee7eadb5ea8afa416c95a5e5c79bd754985f6851205f09f44dd2f924f1ba69247080e9a4d63617cf2c87aff1d5152ca8e4ea8de7777cf2badabb3b247e99aed8def21d1b301109db52e8f856dd23a46a1f96911c936594666749e55e646eee8cc6e7d07a9e61007bd09b4914e6c4bcdd46720f198b7d3ba11c6c2b81cfa11a3ef3b79e937271c8c2382d628dda4c3a7a20e2c96e491b694a9967aca2655ea2bf016c8cae3a85d5c638eeb387251b0802d5093e15f7a233847fa07bb42bc9799ec8df962e933e33fcc42f16a29879ab62ce676f6d3fc74845d62f603e9cfa193e43354e8c07a01e8ceaa731a09bdf00247876e42722f7b9bdde3d08393e32b308341cff1a3690aff970155bb472032bf3013f13588d2b476908598332d861b05ec3403963db486554c7dd29b188929676b14a32ff71b90400789149f37de5f0d99dce9821346c8d3776f4a7ab14b186c7ca95b38e27081f5a5175b152cf35c3340d531c17c98b22ce699b8a57be2f2586f540b9be96da60d23d13ce1df692d3613dcf0331e345d5fd2360552284510869da7e9101fa41b4830852eb951d4946f9ee802c4af46287fc5410289b13f802c2120829f20d8729dfd051754dabbfc338db0e91f75b236178af90d633da0be3de2e342611d4e477f4fd23fe2273f6036688759b3c90833c05e0350bd0700380ae5cb020605b911a00678f9da11117a52ccdbb062ab7c8dc21ae91ff973c58d495caf1dc21fefd45aa7e46a0e6ffcc138e46c3980849eaf821f66a6176f9018af765648661486a8b461066c936570ea7313f0c2f3f6aea88f2d29de75bb507861e0843d498a218cab61696368655a8e77546784a9e1922498bf0f65b79eda78a5b9375a53d76d28070a162c07b1228539606dfe58ff5aeaa8c5aed04a433233ab74ccbb77baed600b0b95f84d3bc3329e75cf799c113031d076c00a8c8b9c2b36590809dc0b088c8ee453a6e8c0a0284c9aae282c7540e02f97a1a655b12689d0aaaeb281d7597c47de4db12a6d5f449d795cdc799829ca7b02260b0d96fae71244951e4e557faced56c8dd8702e12c3811ae85f5be5315853ee1a17c3bc191a7a350cd1fdcdeb4c5cc12a452b60b5f79d75611f705f32f90ada95e8395fab2ee2f5b631d7d0922fcf5156a9fd70123fce2db4f18d0166f675ee4207641657331fa82433513624a76630dbd7258e6810bb3b085e0a2952113acc714ba989809ce8b559d0d8c9608b52e5732933da9e054d9ccdd98185dc27474dca14480ea89e05e039de5649faae221ea4e1828a23fdd886e4edebe83c0e77a4600a998542faf47c0f86c1c9325e6e7d1d5278fd7cf6c1b9ac97664bd257318acf922dbb30897a0a63a119a2b4e03f0d49375ceee5cadbd9ae1d0b634a94e8de3afd97f7dd5e235526cfc1da3720af020df6ce22b5a760a4759cd847def622e69528ec6830d5d58a44db6de20e1029a46468c2828052f588c7042d212e63fcec985e1f36449325d19c72f454d727f72dd8b85c306312b75791f2c15a0d9810055c271901f1c19b7e4d144d1f1c675d058be3197bbb8301dbae4feb1a124656f73072137e62fedaac172a5d086ffd90816d574a759d0fe3ac4e621ac2c28282bc47ea223464966bb2222e21eb112337ae16016c57b5dade110f784941d1ec81c005ff968a1041061c5a7d9003b2f3240ddbe760426cb8406cc7ae9fe413be4f64d897401f88d88a365fea0e39cb43f9944a4ba4550fc69059eff397c74c413a2d12ed6b80299d16a69129cbe263fa4d47630db9ca21c4ba1befe8e2c5f73f8cafaad6af90d61b37e042354c610fcd3b5d552133eeecfa80b80c0b2f7be4088b430ac07a2b1f8afce1b0e479c4e5ac48d7ff3f3314801b29f39835f591fc874957deb2270aa1885b083c764abb28e2049dddcd552cc573db84dda8fa7e776f56771c4ea0339536b90dadac1cd6666e08803d5bd3c975ff733ccc88898f0279d72669a6b7f6a47f0499dd2633acf191d4d866455b357432c31fa4b03088e1871179b67b17c38bd582034560af6ee9381c5c972b8efe9acb7c0e7a65a7e215ecbf96588570e1de556e9a3d9f77006f65a3c38e0c72df25d6745710e06feb601390c4a9935a4cf414a6c938463d91756f5fde0e94778e7d0123fb947c1107f0da9fae52fc92fcc41541caa1b1b1142465bcaa0223d32c8697d4e478a8801fb940580bef82dd63776704e45925aee45b2415d47b67af5ff5fa64abfebc47c459cd8b82d596371072a47150c2590f2cb1ab89574dadd4dcb1012cd1a515bd28b24bc99ac6", 0xff0}, {&(0x7f0000000500)}], 0x3, 0x0, 0x0, 0x40000}}], 0x1, 0x20040000) 19:17:59 executing program 2: pipe2(&(0x7f0000000c40)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000840)) [ 330.159619][ T7233] sctp: [Deprecated]: syz-executor.2 (pid 7233) Use of int in max_burst socket option deprecated. [ 330.159619][ T7233] Use struct sctp_assoc_value instead 19:17:59 executing program 3: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f0000000c40), 0x0) 19:17:59 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0) 19:17:59 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:17:59 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:17:59 executing program 2: pipe2(&(0x7f0000000c40), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:17:59 executing program 4: pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 19:17:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 19:18:00 executing program 4: bpf$BPF_LINK_UPDATE(0x19, 0x0, 0x0) 19:18:00 executing program 0: io_setup(0x100, &(0x7f0000000100)) 19:18:00 executing program 2: mq_open(0x0, 0x0, 0x0, &(0x7f0000001040)) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) 19:18:00 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r0}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x1005088, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4030ae7b, &(0x7f0000000140)) 19:18:00 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), 0xffffffffffffffff) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1]}, 0x80) 19:18:00 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) 19:18:00 executing program 0: prctl$PR_SET_CHILD_SUBREAPER(0x21, 0x0) 19:18:00 executing program 4: select(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x2}, 0x0, 0x0) 19:18:00 executing program 2: select(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x2}, 0x0, &(0x7f0000000140)={0x77359400}) 19:18:00 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 3: socket$inet6_sctp(0xa, 0xe, 0x84) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)={0x0, 0x0, 0x18}, 0x10) 19:18:00 executing program 0: getresuid(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 19:18:00 executing program 2: bpf$BPF_LINK_UPDATE(0x1b, 0x0, 0x0) 19:18:00 executing program 1: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e00)='y', &(0x7f0000002e00)}, 0x48) 19:18:00 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x817, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000a80)=""/232, 0xe8}], 0x6, &(0x7f0000000b80)=""/141, 0x8d}, 0x664436a2}, {{&(0x7f0000000c40)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000640)}, {&(0x7f0000000cc0)=""/95, 0x5f}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f0000000e80)=""/86, 0x56}, {&(0x7f0000000f00)=""/234, 0xea}, {&(0x7f0000001000)=""/227, 0xe3}, {&(0x7f0000001100)=""/41, 0x29}], 0x9, &(0x7f0000002380)=""/189, 0xbd}, 0xea}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001140)=""/30, 0x1e}, {&(0x7f0000002440)=""/238, 0xee}, {&(0x7f0000002540)=""/224, 0xe0}, {&(0x7f0000001180)=""/58, 0x3a}, {&(0x7f0000002640)=""/198, 0xc6}, {&(0x7f0000001200)=""/5, 0x5}, {&(0x7f0000002740)=""/114, 0x72}, {&(0x7f00000027c0)=""/184, 0xb8}], 0x8, &(0x7f0000002900)=""/240, 0xf0}, 0x2}], 0x3, 0x10000, &(0x7f0000002ac0)={r0, r1+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}, {0x0, 0x0, 0x1700}, {0x0, 0x0, 0x6700000}, {0x0}, {0x0}, {&(0x7f0000000580)="111fc0d901000000803a0900803a0900", 0x10, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000", 0x12}, {0x0}], 0x0, &(0x7f0000013b00)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x20040000) 19:18:00 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:18:00 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:00 executing program 1: io_setup(0x100, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) 19:18:00 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) clock_gettime(0x0, &(0x7f0000000140)) 19:18:00 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 19:18:00 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6c7, &(0x7f0000000000), 0x20a154cc) 19:18:01 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000006d00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000006b00)=@framed, &(0x7f0000006b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:01 executing program 4: io_uring_setup(0x67e8, &(0x7f0000000600)={0x0, 0x4ed5, 0x2, 0x0, 0x319}) 19:18:01 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:01 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x10d400, 0x0) 19:18:01 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x8, 0x200, 0x0, 0x200, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'wlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv4=@empty, [], @ipv4=@multicast2}}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x9, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 19:18:01 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0x2c, 0x0) 19:18:01 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000580)="8800170000000040ff0000080000000008007809140b2a3a08020000010000010c0053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000a00000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119", 0x71, 0xb800}], 0x0, &(0x7f0000000040)) 19:18:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 19:18:01 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 3: pipe2(&(0x7f0000000c40)={0xffffffffffffffff}, 0x0) io_uring_setup(0x5e7c, &(0x7f0000000300)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 19:18:01 executing program 0: pipe2(&(0x7f0000000c40), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:18:01 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(r0, 0x1005088, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r0}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001100)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 332.571827][ T7345] xt_CT: No such helper "netbios-ns" 19:18:01 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:01 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:01 executing program 3: pipe2(&(0x7f0000000c40)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 19:18:02 executing program 2: io_uring_setup(0x6e92, &(0x7f0000000340)) io_uring_setup(0x67e8, &(0x7f0000000600)) 19:18:02 executing program 4: io_setup(0x7, &(0x7f0000006800)) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 3: io_uring_setup(0x6e92, &(0x7f0000000340)) io_uring_setup(0x67e8, &(0x7f0000000600)={0x0, 0x0, 0x2}) 19:18:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan4\x00'}) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x8010aebc, &(0x7f0000000140)) 19:18:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6cb, &(0x7f0000000000), 0x20a154cc) 19:18:02 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_USER(r0, 0x0, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 19:18:02 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:02 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14547e, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file0\x00') 19:18:02 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:02 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00'}, 0x10) 19:18:02 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)}, 0x48) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 333.154414][ T28] audit: type=1800 audit(1652469482.452:65): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1174 res=0 errno=0 19:18:02 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_lsm={0x1d, 0xd, &(0x7f0000001a40)=@framed={{}, [@map_fd, @kfunc, @initr0, @alu, @jmp, @alu, @jmp, @alu]}, &(0x7f0000001ac0)='GPL\x00', 0xe35, 0xbe, &(0x7f0000001b00)=""/190, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:02 executing program 3: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs\x00', 0x1ff) 19:18:02 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:02 executing program 2: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7f}, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 19:18:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0x2, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000006d00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000006b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 4: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x10, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file0\x00') 19:18:02 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0xf, 0x0) 19:18:02 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 19:18:02 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) 19:18:02 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:02 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:02 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001a40)=@framed, &(0x7f0000001ac0)='GPL\x00', 0x0, 0xbe, &(0x7f0000001b00)=""/190, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x8, 0x200, 0x0, 0x200, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'wlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv4=@empty, [], @ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x4e22}}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x9, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 19:18:03 executing program 2: io_setup(0x6, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[0x0]) 19:18:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) unshare(0x8060200) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x865410, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) 19:18:03 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "40d880", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0x8, 0x200, 0x0, 0x200, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'wlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev, [], @ipv4=@private, [], @ipv4=@empty, [], @ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x4e22}}}, @common=@inet=@ecn={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x9, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 19:18:03 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 333.984762][ T7477] xt_CT: No such helper "netbios-ns" 19:18:03 executing program 3: clock_gettime(0x0, &(0x7f0000001240)) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008", 0x5d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f00", 0x10}, {&(0x7f0000010e00), 0x0, 0x1500}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000013b00)) 19:18:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:03 executing program 0: inotify_init() socket$inet_tcp(0x2, 0x1, 0x0) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 0: inotify_init() socket$inet_tcp(0x2, 0x1, 0x0) 19:18:03 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0}) 19:18:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}, {0x6}]}) 19:18:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 334.216425][ T7501] xt_CT: No such helper "netbios-ns" 19:18:03 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000380)=@framed={{}, [@alu]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xd, &(0x7f0000000440)=""/13, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000380)=@framed={{}, [@alu]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 334.296418][ T28] audit: type=1326 audit(1652469483.592:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4244890e9 code=0x0 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:03 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000800)) 19:18:03 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "ac1d3dbb2e142fd5642d2bc9d3f07aab5eb6d65765e3e0c02feb963b286ddb9100841ee993dc7bb0e6b77657176ec6e70ee3ed110d11afee210e4925b9a5f52e"}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 19:18:03 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') rename(0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 19:18:04 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "ac1d3dbb2e142fd5642d2bc9d3f07aab5eb6d65765e3e0c02feb963b286ddb9100841ee993dc7bb0e6b77657176ec6e70ee3ed110d11afee210e4925b9a5f52e"}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 19:18:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:04 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 19:18:04 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 4: syz_io_uring_setup(0x6b78, &(0x7f000001db40), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f000001dbc0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 19:18:04 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 19:18:04 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x17}, 0x10) 19:18:04 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:04 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) io_setup(0x6, &(0x7f00000004c0)) 19:18:04 executing program 4: io_setup(0x6, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 19:18:04 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001e00)='y', &(0x7f0000002e00)='V'}, 0x48) 19:18:04 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 0: io_uring_setup(0x0, &(0x7f0000000340)) 19:18:04 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:04 executing program 3: bpf$BPF_LINK_UPDATE(0x21, 0x0, 0x0) 19:18:04 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xd, &(0x7f0000000440)=""/13, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:04 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 3: prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) 19:18:04 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:04 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:04 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x80) 19:18:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6c6, &(0x7f0000000000), 0x20a154cc) 19:18:05 executing program 4: r0 = io_uring_setup(0x6e92, &(0x7f0000000340)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) 19:18:05 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:05 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x0}, 0x48) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 3: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7f}, &(0x7f0000000240)={0x2}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 19:18:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:05 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') setxattr$incfs_id(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 19:18:05 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000300)=""/88, 0x58, 0x0) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f0000000380)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x30}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x2}, @map_val]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xd, &(0x7f0000000440)=""/13, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xe, 0x7fffffff, 0x5029488a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1]}, 0x80) 19:18:05 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002e00)='V'}, 0x48) 19:18:05 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd_index}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) listxattr(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 19:18:05 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000c40), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:18:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:05 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x6b78, &(0x7f000001db40), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f000001dbc0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 19:18:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x0) 19:18:05 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 19:18:05 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) io_setup(0x0, &(0x7f0000006800)) 19:18:05 executing program 4: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 19:18:05 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000600)) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/233, 0xe9}, {&(0x7f0000000a80)=""/232, 0xe8}], 0x5, &(0x7f0000000b80)=""/141, 0x8d}}, {{&(0x7f0000000c40)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000640)}, {&(0x7f0000000cc0)=""/95, 0x5f}, {&(0x7f0000000d40)=""/113, 0x71}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f0000000e80)=""/86, 0x56}, {&(0x7f0000000f00)=""/234, 0xea}, {0x0}], 0x8, &(0x7f0000002380)=""/189, 0xbd}, 0xea}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/240, 0xf0}, 0x2}], 0x3, 0x10000, &(0x7f0000002ac0)={0x0, r0+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000), 0x0, 0x1600}, {0x0, 0x0, 0x1700}, {0x0, 0x0, 0x6700000}, {0x0}, {0x0}, {0x0, 0x0, 0xc000}, {0x0}], 0x0, &(0x7f0000013b00)) socket(0x0, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x801) socket$inet6_udplite(0xa, 0x2, 0x88) 19:18:05 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x19, 0x0) 19:18:06 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000380)=@framed={{}, [@alu, @map_idx_val, @map_fd, @map_val, @call]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000380)=@framed={{}, [@alu, @map_idx_val, @map_fd, @map_val, @exit]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:06 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x16, 0x0) 19:18:06 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 19:18:06 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x19, 0x1, &(0x7f0000000700)=@raw=[@func], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:06 executing program 4: prctl$PR_SET_TIMERSLACK(0x1d, 0x7) 19:18:06 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') listxattr(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) 19:18:06 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:06 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:06 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640), 0x10) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 3: prctl$PR_SET_CHILD_SUBREAPER(0x1b, 0x0) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000380)=@framed={{}, [@alu, @map_idx_val, @map_fd, @map_val, @exit, @call]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: io_setup(0x7, &(0x7f0000006800)=0x0) io_cancel(r0, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 3: syz_io_uring_complete(0x0) io_setup(0x7, &(0x7f0000006800)=0x0) io_cancel(r0, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={0x0, &(0x7f0000006980)=""/165, 0x0, 0xa5}, 0x20) 19:18:07 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 4: syz_io_uring_complete(0x0) io_setup(0x7, &(0x7f0000006800)) 19:18:07 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x753700efd74d866f}, 0x14) 19:18:07 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: syz_io_uring_complete(0x0) io_setup(0x7, &(0x7f0000006800)) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/224, 0xe0}], 0x1, 0x68, 0x0) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000280)) 19:18:07 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000b0f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0}, {0x0, 0x0, 0x6700000}, {0x0}], 0x0, &(0x7f0000013b00)) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='o', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:07 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000280)) 19:18:07 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:07 executing program 4: io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xaf0e, 0x4) 19:18:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 3: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000500)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) [ 338.775273][ T7834] sctp: [Deprecated]: syz-executor.4 (pid 7834) Use of int in max_burst socket option deprecated. [ 338.775273][ T7834] Use struct sctp_assoc_value instead 19:18:08 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 3: bpf$BPF_LINK_UPDATE(0x4, &(0x7f0000000080), 0x10) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 4: r0 = syz_io_uring_setup(0xe32, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00000d9000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x2}, 0x2) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000070c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 338.927969][ T28] audit: type=1326 audit(1652469488.222:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4244890e9 code=0x0 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 3: pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x2}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={0x0}) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 4: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x8, 0x10, 0x0}, 0x80) 19:18:08 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:18:08 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={0x0}}, 0x0) 19:18:08 executing program 4: bpf$BPF_LINK_UPDATE(0x15, &(0x7f0000000080), 0x10) 19:18:08 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) 19:18:08 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x180000000000000}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='check=strict']) chdir(&(0x7f0000000040)='./file0\x00') creat(0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00') mknod(0x0, 0x0, 0x4) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x0, 0x1, &(0x7f0000000700)=@raw=[@func], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x6cc, &(0x7f0000000000), 0x20a154cc) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) 19:18:08 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) 19:18:08 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x40000) pipe2(&(0x7f0000000c40), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0x10}, 0x90) sendto$inet6(r0, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) 19:18:08 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:08 executing program 4: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7f}, 0x0, 0x0, 0x0) 19:18:09 executing program 3: bpf$BPF_LINK_UPDATE(0xd, &(0x7f0000000080), 0x10) 19:18:09 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 2: io_setup(0x6, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 19:18:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 3: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 19:18:09 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 2: prctl$PR_SET_CHILD_SUBREAPER(0x23, 0x0) 19:18:09 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000c80), 0x20001, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:09 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000005080)={0x0, 0x0, 0x0}, 0x0) 19:18:09 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:09 executing program 2: getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000000) socket$inet6_sctp(0xa, 0x5, 0x84) 19:18:09 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 19:18:09 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 3: pipe(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f0000002440)={0x2, 0x0, @multicast2}, 0x10) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={0x0}, 0x10) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 2: socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001980)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 19:18:10 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000005200), 0xffffffffffffffff) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000003100)=0x6, 0x4) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 19:18:10 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[{0x10}, {0x10, 0xff, 0x100}, {0x90, 0x119, 0x7fff, "b1638cc053957f0062bab4bea056119a8e238aa60be2648d62360c9017d8863a2f774627a1f70105886f62085e1c260be9a724a70cacb3d20a185769fafd16e36b8b0a837df6f5bee1d9e17d4585042bb490c1914562066925a6ea89c78ba152d4a4d32351f6eddf94e0d53252de1df946f371d7e743d15601edbb91feb3"}], 0xb0}, 0x94) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000005080)={&(0x7f0000003d80)=@hci, 0x80, &(0x7f0000004f80)=[{0x0}, {0x0}], 0x2}, 0x2121) 19:18:10 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x77359400}) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)=@delqdisc={0x24}, 0x24}}, 0x0) 19:18:10 executing program 1: r0 = syz_io_uring_setup(0x73d7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:10 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:10 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000200)=@raw=[@initr0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0x301}, 0x14}}, 0x0) 19:18:10 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 19:18:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)={0x0, 0x0, 0x18}, 0x10) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) 19:18:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) 19:18:11 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x59, &(0x7f0000001740)=""/89, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) listen(r0, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 19:18:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x1}, 0x48) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 19:18:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 19:18:11 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0}}, 0x0) 19:18:11 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) 19:18:12 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 19:18:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 3: socketpair(0x0, 0x80000, 0x0, 0x0) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x1, 0x1}, 0x48) 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 3: socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) socketpair(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x6, &(0x7f0000001680)=@framed={{}, [@call, @initr0]}, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001980)) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) [ 343.077002][ T28] audit: type=1804 audit(1652469492.372:68): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/308/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x1, &(0x7f0000000680)=@raw=[@ldst], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter, 0x48) 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x4, &(0x7f0000001680)=@framed={{}, [@call]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'syztnl1\x00', 0x0}) [ 343.467123][ T28] audit: type=1804 audit(1652469492.762:69): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/309/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 19:18:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:12 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:12 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:12 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 3: socket(0x3, 0x0, 0x84000000) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) [ 343.923368][ T28] audit: type=1804 audit(1652469493.212:70): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/310/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000008c0)) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0xab, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000580)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 344.413309][ T28] audit: type=1804 audit(1652469493.702:71): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/311/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 19:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x7000013) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:18:13 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:18:13 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:13 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000c40)) [ 344.712675][ T28] audit: type=1804 audit(1652469494.002:72): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/312/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 19:18:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x7000013) 19:18:14 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: socket(0x28, 0x0, 0x1) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x0, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xee, &(0x7f00000000c0)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x0, 0xde2f}, 0x10}, 0x80) 19:18:14 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 345.108926][ T28] audit: type=1804 audit(1652469494.402:73): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/313/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x7000013) 19:18:14 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:18:14 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 345.468554][ T28] audit: type=1804 audit(1652469494.762:74): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/314/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 19:18:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:14 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000b40)) 19:18:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:14 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}}, 0x0) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00'}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 3: socketpair(0x2, 0x0, 0xfffffffd, &(0x7f0000001280)) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 345.847286][ T28] audit: type=1804 audit(1652469495.142:75): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/315/cgroup.controllers" dev="sda1" ino=1140 res=1 errno=0 19:18:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00'}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) syz_genetlink_get_family_id$team(&(0x7f0000000180), r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/195, 0xc3}, {&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f0000001440)=""/189, 0xbd}], 0x5, &(0x7f0000001580)=""/30, 0x1e}, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000001640)={0xfffffff8, 0x9, 0x0, @empty, 'veth1_to_batadv\x00'}) getpeername$packet(r3, 0x0, &(0x7f0000001800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x7, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x89}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xcc6}]}, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x59, &(0x7f0000001740)=""/89, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001880)={0x1, 0xc, 0x80000000, 0x6}, 0x10}, 0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000002fc0)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x1}}, 0x18) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00'}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) [ 346.183247][ T28] audit: type=1804 audit(1652469495.472:76): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/316/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 19:18:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) 19:18:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x0, 0x3, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x59, &(0x7f0000001740)=""/89, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 3: syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@broadcast, @link_local={0x0, 0x80, 0xc2, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce540b259808000000000000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5af031a"}, {0x0, 0x1, "ff12ef04ffff800000000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d93090d625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d6309c20547c06b18901b0aeff04cdb95f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c023cfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc000005dc000005dc6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26fb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517eb4cdce9674a1fda018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) [ 346.520689][ T28] audit: type=1804 audit(1652469495.812:77): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/317/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 19:18:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7000013) 19:18:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) 19:18:15 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 19:18:15 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) 19:18:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x0, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7000013) 19:18:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x44}}, 0x0) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 346.836866][ T28] audit: type=1804 audit(1652469496.132:78): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/318/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x20}}, 0x0) 19:18:16 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002c80)=[{0x28, 0x0, 0x0, "32c4ea39a761897ae67c0417e68a1588cf"}], 0x28}, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7000013) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1}, 0x48) [ 347.107488][ T28] audit: type=1804 audit(1652469496.392:79): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/319/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f00000000c0)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001800)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x6, &(0x7f0000001680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}]}, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x59, &(0x7f0000001740)=""/89, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0xa, 0x5}, 0x8, 0x10, 0x0}, 0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000001980)) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880), 0x10}, 0x80) 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) [ 347.396792][ T28] audit: type=1804 audit(1652469496.692:80): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/320/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7000013) 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 3: pipe(&(0x7f00000008c0)) 19:18:16 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) 19:18:16 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:16 executing program 4: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) 19:18:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000600)={'syztnl2\x00', 0x0}) 19:18:16 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7000013) 19:18:17 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002bc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002c80)=[{0x10}], 0x10}, 0x0) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840), 0x8, 0x10, 0x0}, 0x80) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3d, 0x0, &(0x7f00000016c0)) 19:18:17 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x8}, &(0x7f0000000040)=0x20) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7000013) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1}, 0x48) 19:18:17 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) socketpair(0x23, 0x0, 0x0, &(0x7f0000000080)) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000c40)) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:17 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x0, 0x18}, 0xc) 19:18:17 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x5, &(0x7f0000001680)=@framed={{}, [@map_idx_val]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:17 executing program 0: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:18:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xaa, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 19:18:17 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:18 executing program 0: socketpair(0x0, 0x100f, 0x0, 0x0) 19:18:18 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:18 executing program 3: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001640)={0xfffffff8, 0x0, 0x0, @empty, 'veth1_to_batadv\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x4, &(0x7f0000001680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:18 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[{0x10}], 0x10}, 0x0) 19:18:18 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x2, &(0x7f0000000900)=@raw=[@btf_id], &(0x7f0000000940)='GPL\x00', 0x63, 0xfd, &(0x7f0000000980)=""/253, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:18 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000001280)) 19:18:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 19:18:18 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:18 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:18 executing program 3: getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) 19:18:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:19 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000000)=0xc) 19:18:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001e00)={&(0x7f0000001d40), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 19:18:19 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="95", 0x1}], 0x1, &(0x7f0000000340)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 19:18:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) [ 349.770686][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 349.770704][ T28] audit: type=1804 audit(1652469499.062:82): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/325/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 19:18:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='#'], 0x30}}, 0x0) 19:18:19 executing program 0: pipe(&(0x7f0000000c40)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 19:18:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) 19:18:19 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000039c0)=@delqdisc={0x24}, 0x24}}, 0x0) 19:18:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB='#'], 0x30}}, 0x0) 19:18:19 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) socketpair(0x23, 0x0, 0xab, &(0x7f0000000080)) 19:18:19 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 350.533122][ T28] audit: type=1804 audit(1652469499.822:83): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/326/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 19:18:19 executing program 0: socketpair(0x22, 0x0, 0x2000, &(0x7f0000001280)) 19:18:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x811) 19:18:19 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000039c0)=@delqdisc={0x24}, 0x24}}, 0x0) 19:18:20 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002400)='ns/uts\x00') 19:18:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x3, &(0x7f0000001680)=@framed, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x4, &(0x7f0000001680)=@framed={{}, [@call]}, &(0x7f0000001700)='syzkaller\x00', 0x8, 0x59, &(0x7f0000001740)=""/89, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f00000013c0)) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 3: getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) 19:18:20 executing program 4: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 19:18:20 executing program 0: sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket(0x1, 0x0, 0x80000000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(r1) 19:18:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 19:18:20 executing program 4: pipe(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, 0x0, 0x0) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000039c0)=@delqdisc={0x24}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x14}, 0x14}}, 0x0) 19:18:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa000000}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xad, &(0x7f00000000c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:18:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x7ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:18:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x18, 0x4) 19:18:20 executing program 4: socketpair(0x22, 0x3, 0x0, &(0x7f0000001280)) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000600)={'syztnl2\x00', 0x0}) 19:18:20 executing program 3: r0 = socket(0x2, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x72) 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, 0x0, 0x0) 19:18:20 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 351.532288][ T28] audit: type=1804 audit(1652469500.822:84): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/330/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 19:18:20 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r3, r2, 0x0, 0x7000013) 19:18:21 executing program 0: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x41a329adc02c2888) 19:18:21 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) 19:18:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={0x0, 0x20}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 19:18:21 executing program 3: pipe(&(0x7f0000000c40)) 19:18:21 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 4: pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 19:18:21 executing program 0: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x7f}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8]}, 0x8}) 19:18:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) [ 351.972823][ T28] audit: type=1804 audit(1652469501.262:85): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2828204965/syzkaller.ZToKdq/331/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 19:18:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x7000013) 19:18:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000fe"]) 19:18:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="97e313946f20cb4bffff1100000008000300", @ANYRES32=r4], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x11c000f00) 19:18:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 19:18:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}], 0x20) 19:18:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x7000013) 19:18:21 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@alu={0x7, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xad, &(0x7f00000000c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 352.284825][ T28] audit: type=1804 audit(1652469501.582:86): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir485023492/syzkaller.dPmF8n/357/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 19:18:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000080003"], 0x34}}, 0x0) sendfile(r2, r1, 0x0, 0x7000013) 19:18:21 executing program 5: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x40040}, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff42}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000147000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 19:18:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f00000000c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 352.326300][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x31, 0x5, 0x6, 0x4, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8, 0x3, 0x3}}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b1100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:21 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x626000, 0x1000}, 0x20) 19:18:21 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffff}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) [ 352.628012][ T8867] ------------[ cut here ]------------ [ 352.628022][ T8867] WARNING: CPU: 1 PID: 8867 at mm/hugetlb.c:6250 follow_hugetlb_page+0x1326/0x1c80 [ 352.643714][ T8867] Modules linked in: [ 352.647696][ T8867] CPU: 1 PID: 8867 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0 [ 352.658359][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.668991][ T8867] RIP: 0010:follow_hugetlb_page+0x1326/0x1c80 [ 352.675196][ T8867] Code: 89 44 24 70 e8 2b 1d b7 ff 48 8b 44 24 70 48 85 c0 0f 84 f1 07 00 00 e8 88 1a b7 ff 48 83 ed 01 e9 09 fb ff ff e8 7a 1a b7 ff <0f> 0b 48 8b 7c 24 30 bb f4 ff ff ff e8 69 74 b8 07 4c 8b a4 24 b8 [ 352.694954][ T8867] RSP: 0018:ffffc9000aeef8a0 EFLAGS: 00010212 [ 352.701068][ T8867] RAX: 00000000000061d6 RBX: ffff88807a950000 RCX: ffffc90003ab3000 [ 352.709140][ T8867] RDX: 0000000000040000 RSI: ffffffff81c38f76 RDI: 0000000000000003 [ 352.717200][ T8867] RBP: ffffea0001fd0000 R08: 0000000000000000 R09: 0000000000000001 [ 352.725373][ T8867] R10: ffffffff81b128fb R11: 0000000000000000 R12: 0000000000000200 [ 352.733383][ T8867] R13: ffff88807a950000 R14: 0000000000000000 R15: 00000000000001ff [ 352.741454][ T8867] FS: 00007fd4256b3700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 352.750483][ T8867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.757157][ T8867] CR2: 00007feacd39c028 CR3: 000000001e45e000 CR4: 00000000003506e0 [ 352.765241][ T8867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.773245][ T8867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.781311][ T8867] Call Trace: [ 352.784652][ T8867] [ 352.787634][ T8867] __get_user_pages+0x27a/0xfa0 [ 352.792625][ T8867] ? follow_page_mask+0x1530/0x1530 [ 352.797937][ T8867] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 352.804075][ T8867] ? lock_chain_count+0x20/0x20 [ 352.809068][ T8867] __gup_longterm_locked+0x1d5/0xfe0 [ 352.814468][ T8867] ? pin_user_pages_unlocked+0x90/0x90 [ 352.819978][ T8867] ? down_read+0x198/0x440 [ 352.824631][ T8867] ? rwsem_down_read_slowpath+0xb00/0xb00 [ 352.830413][ T8867] pin_user_pages+0x8e/0xe0 [ 352.835046][ T8867] xdp_umem_create+0x660/0x1180 [ 352.840172][ T8867] xsk_setsockopt+0x73e/0x9e0 [ 352.844948][ T8867] ? aa_sk_perm+0x30f/0xaa0 [ 352.849593][ T8867] ? xsk_tx_release+0x3b0/0x3b0 [ 352.854555][ T8867] ? __fget_files+0x286/0x470 [ 352.859320][ T8867] ? aa_af_perm+0x230/0x230 [ 352.863960][ T8867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 352.870394][ T8867] __sys_setsockopt+0x2db/0x6a0 [ 352.875446][ T8867] ? xsk_tx_release+0x3b0/0x3b0 [ 352.880341][ T8867] ? __ia32_sys_recv+0x100/0x100 [ 352.885396][ T8867] ? lock_downgrade+0x6e0/0x6e0 [ 352.890318][ T8867] __x64_sys_setsockopt+0xba/0x150 [ 352.895535][ T8867] ? syscall_enter_from_user_mode+0x21/0x70 [ 352.901484][ T8867] do_syscall_64+0x35/0xb0 [ 352.906100][ T8867] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 352.912039][ T8867] RIP: 0033:0x7fd4244890e9 [ 352.916557][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 352.936243][ T8867] RSP: 002b:00007fd4256b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.944782][ T8867] RAX: ffffffffffffffda RBX: 00007fd42459bf60 RCX: 00007fd4244890e9 [ 352.952790][ T8867] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 352.960876][ T8867] RBP: 00007fd4244e308d R08: 0000000000000020 R09: 0000000000000000 [ 352.968971][ T8867] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 352.977069][ T8867] R13: 00007fff4ee8396f R14: 00007fd4256b3300 R15: 0000000000022000 [ 352.985174][ T8867] [ 352.988225][ T8867] Kernel panic - not syncing: panic_on_warn set ... [ 352.994815][ T8867] CPU: 1 PID: 8867 Comm: syz-executor.4 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0 [ 353.004713][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.014771][ T8867] Call Trace: [ 353.018078][ T8867] [ 353.021035][ T8867] dump_stack_lvl+0xcd/0x134 [ 353.025723][ T8867] panic+0x2d7/0x636 [ 353.029650][ T8867] ? panic_print_sys_info.part.0+0x10b/0x10b [ 353.035650][ T8867] ? __warn.cold+0x1d9/0x2cd [ 353.040253][ T8867] ? follow_hugetlb_page+0x1326/0x1c80 [ 353.045730][ T8867] __warn.cold+0x1ea/0x2cd [ 353.050159][ T8867] ? follow_hugetlb_page+0x1326/0x1c80 [ 353.055635][ T8867] report_bug+0x1bd/0x210 [ 353.060034][ T8867] handle_bug+0x3c/0x60 [ 353.064212][ T8867] exc_invalid_op+0x14/0x40 [ 353.068744][ T8867] asm_exc_invalid_op+0x1b/0x20 [ 353.073605][ T8867] RIP: 0010:follow_hugetlb_page+0x1326/0x1c80 [ 353.079686][ T8867] Code: 89 44 24 70 e8 2b 1d b7 ff 48 8b 44 24 70 48 85 c0 0f 84 f1 07 00 00 e8 88 1a b7 ff 48 83 ed 01 e9 09 fb ff ff e8 7a 1a b7 ff <0f> 0b 48 8b 7c 24 30 bb f4 ff ff ff e8 69 74 b8 07 4c 8b a4 24 b8 [ 353.099300][ T8867] RSP: 0018:ffffc9000aeef8a0 EFLAGS: 00010212 [ 353.105476][ T8867] RAX: 00000000000061d6 RBX: ffff88807a950000 RCX: ffffc90003ab3000 [ 353.113459][ T8867] RDX: 0000000000040000 RSI: ffffffff81c38f76 RDI: 0000000000000003 [ 353.121434][ T8867] RBP: ffffea0001fd0000 R08: 0000000000000000 R09: 0000000000000001 [ 353.129406][ T8867] R10: ffffffff81b128fb R11: 0000000000000000 R12: 0000000000000200 [ 353.137393][ T8867] R13: ffff88807a950000 R14: 0000000000000000 R15: 00000000000001ff [ 353.145382][ T8867] ? try_grab_folio+0x88b/0xb50 [ 353.150262][ T8867] ? follow_hugetlb_page+0x1326/0x1c80 [ 353.155763][ T8867] __get_user_pages+0x27a/0xfa0 [ 353.160639][ T8867] ? follow_page_mask+0x1530/0x1530 [ 353.165849][ T8867] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 353.171859][ T8867] ? lock_chain_count+0x20/0x20 [ 353.176743][ T8867] __gup_longterm_locked+0x1d5/0xfe0 [ 353.182050][ T8867] ? pin_user_pages_unlocked+0x90/0x90 [ 353.187527][ T8867] ? down_read+0x198/0x440 [ 353.191974][ T8867] ? rwsem_down_read_slowpath+0xb00/0xb00 [ 353.197733][ T8867] pin_user_pages+0x8e/0xe0 [ 353.202277][ T8867] xdp_umem_create+0x660/0x1180 [ 353.207162][ T8867] xsk_setsockopt+0x73e/0x9e0 [ 353.211880][ T8867] ? aa_sk_perm+0x30f/0xaa0 [ 353.216405][ T8867] ? xsk_tx_release+0x3b0/0x3b0 [ 353.221274][ T8867] ? __fget_files+0x286/0x470 [ 353.225980][ T8867] ? aa_af_perm+0x230/0x230 [ 353.230513][ T8867] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 353.236773][ T8867] __sys_setsockopt+0x2db/0x6a0 [ 353.241637][ T8867] ? xsk_tx_release+0x3b0/0x3b0 [ 353.246495][ T8867] ? __ia32_sys_recv+0x100/0x100 [ 353.251532][ T8867] ? lock_downgrade+0x6e0/0x6e0 [ 353.256414][ T8867] __x64_sys_setsockopt+0xba/0x150 [ 353.261537][ T8867] ? syscall_enter_from_user_mode+0x21/0x70 [ 353.267436][ T8867] do_syscall_64+0x35/0xb0 [ 353.271869][ T8867] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 353.277774][ T8867] RIP: 0033:0x7fd4244890e9 [ 353.282195][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 353.302068][ T8867] RSP: 002b:00007fd4256b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.310496][ T8867] RAX: ffffffffffffffda RBX: 00007fd42459bf60 RCX: 00007fd4244890e9 [ 353.318570][ T8867] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 353.326541][ T8867] RBP: 00007fd4244e308d R08: 0000000000000020 R09: 0000000000000000 [ 353.334514][ T8867] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 353.342503][ T8867] R13: 00007fff4ee8396f R14: 00007fd4256b3300 R15: 0000000000022000 [ 353.350533][ T8867] [ 353.353922][ T8867] Kernel Offset: disabled [ 353.358616][ T8867] Rebooting in 86400 seconds..