[ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Found device /dev/ttyS0. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 89.816237][ T8762] sshd (8762) used greatest stack depth: 4768 bytes left Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2020/07/06 08:48:28 fuzzer started 2020/07/06 08:48:28 dialing manager at 10.128.0.26:39377 2020/07/06 08:48:29 syscalls: 3004 2020/07/06 08:48:29 code coverage: enabled 2020/07/06 08:48:29 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/06 08:48:29 extra coverage: enabled 2020/07/06 08:48:29 setuid sandbox: enabled 2020/07/06 08:48:29 namespace sandbox: enabled 2020/07/06 08:48:29 Android sandbox: enabled 2020/07/06 08:48:29 fault injection: enabled 2020/07/06 08:48:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/06 08:48:29 net packet injection: enabled 2020/07/06 08:48:29 net device setup: enabled 2020/07/06 08:48:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/06 08:48:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/06 08:48:29 USB emulation: /dev/raw-gadget does not exist 08:51:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) [ 275.830327][ T32] audit: type=1400 audit(1594025479.691:8): avc: denied { execmem } for pid=8811 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 276.164433][ T8812] IPVS: ftp: loaded support on port[0] = 21 [ 276.463032][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 276.687693][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.695671][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.705280][ T8812] device bridge_slave_0 entered promiscuous mode [ 276.727372][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.734770][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.744860][ T8812] device bridge_slave_1 entered promiscuous mode [ 276.801556][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.817708][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.872857][ T8812] team0: Port device team_slave_0 added [ 276.886193][ T8812] team0: Port device team_slave_1 added [ 276.936513][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.943588][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.970018][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.991595][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.001121][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.027326][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.233112][ T8812] device hsr_slave_0 entered promiscuous mode [ 277.286314][ T8812] device hsr_slave_1 entered promiscuous mode [ 277.778044][ T8812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.954340][ T8812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.104754][ T8812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.283897][ T8812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.709864][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.745450][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.754889][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.780466][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.798127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.808199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.817767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.825083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.907837][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.917520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.927491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.937062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.944391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.953400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.964467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.975514][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.986178][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.996735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.007502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.019253][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.029008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.038745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.048655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.065848][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.075696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.129933][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.137771][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.169029][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.228104][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.238413][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.299072][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.309425][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.336025][ T8812] device veth0_vlan entered promiscuous mode [ 279.347861][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.357169][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.388812][ T8812] device veth1_vlan entered promiscuous mode [ 279.459704][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.469590][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.479632][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.489774][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.520587][ T8812] device veth0_macvtap entered promiscuous mode [ 279.543651][ T8812] device veth1_macvtap entered promiscuous mode [ 279.570420][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.580204][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.618383][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.627497][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.637710][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.665869][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.690312][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.700458][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.236193][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:51:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x10000009, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010004000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x151040, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0/file0\x00') r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r3, &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x18) renameat2(r1, 0x0, r4, &(0x7f0000000140)='./file0\x00', 0x6) [ 280.895979][ C1] hrtimer: interrupt took 43009 ns 08:51:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x10000009, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010004000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x151040, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0/file0\x00') r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r3, &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x18) renameat2(r1, 0x0, r4, &(0x7f0000000140)='./file0\x00', 0x6) 08:51:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x10000009, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010004000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x151040, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0/file0\x00') r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r3, &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x18) renameat2(r1, 0x0, r4, &(0x7f0000000140)='./file0\x00', 0x6) 08:51:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x10000009, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010004000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x151040, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0/file0\x00') r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r3, &(0x7f0000000340)='./file1\x00', 0x0) renameat(r3, &(0x7f0000000080)='./file1\x00', r3, &(0x7f00000000c0)='./file0/file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x18) renameat2(r1, 0x0, r4, &(0x7f0000000140)='./file0\x00', 0x6) 08:51:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000002800010100"/20, @ANYRES32, @ANYBLOB="80"], 0x48}}, 0x0) 08:51:26 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000400000000000e000000070001006677"], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 282.203964][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.364994][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:51:26 executing program 0: r0 = socket(0x2, 0x2000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={&(0x7f000000d000)=[0x7, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000d4ef02000000ffff000000ff0000ff001a00"}}) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fedffc)=0x28) 08:51:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='exfat\x00', 0x0) 08:51:26 executing program 1: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r0 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000100)=""/240) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf15d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd099}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$uinput_user_dev(r2, &(0x7f0000000440)={'syz1\x00', {0x40, 0x6, 0x6, 0xffd7}, 0xe, [0x0, 0x6, 0x9, 0x2, 0x1, 0x7, 0x8, 0x200, 0x5, 0x9, 0x78ef, 0x9, 0x886, 0x4, 0xffff, 0xfff, 0x8, 0x16, 0x401, 0x3ff, 0x4d9b5188, 0x8001, 0x8, 0x1c, 0x5, 0x9, 0x6, 0x7, 0x1, 0x1, 0x8, 0x100, 0x0, 0x4, 0x7, 0x2, 0x4, 0x5, 0x7, 0x100, 0x0, 0x6, 0x8, 0x10000, 0x2, 0x5, 0x10000, 0x1f, 0x400, 0x1, 0x7, 0x0, 0x80000001, 0x7f, 0x7ff, 0x1000, 0x2, 0x3f, 0x0, 0x0, 0x1ff, 0x7f, 0x1f, 0x3], [0xe454, 0x2, 0xff, 0x1, 0xfffffff7, 0x9, 0x7ff, 0x8001, 0x56c2, 0x3, 0x6, 0x1, 0xffffffa3, 0x401, 0x2, 0x4, 0x7f, 0x0, 0x3ac6, 0x5, 0xfffffff7, 0x9, 0xfffffff9, 0x6, 0x0, 0xffffffe0, 0x200, 0xfff, 0x5, 0x40, 0x10000, 0x9, 0x2, 0x6, 0x9, 0x392f, 0x9, 0x2, 0x0, 0x3, 0x0, 0xd6, 0x9, 0x0, 0x5, 0x5, 0x0, 0x4, 0x3f, 0xfffffffc, 0x7fff, 0x0, 0x1, 0x80000000, 0x6, 0x2, 0x7, 0x3f, 0x4, 0x6, 0x7d, 0x7, 0x9, 0x101], [0x1, 0x0, 0x4, 0x200, 0x8, 0x4e, 0xf8e, 0x5, 0x4, 0x10001, 0x81, 0x3f, 0x20, 0x7ff, 0x80, 0x8001, 0x0, 0x40, 0x193c, 0x2, 0x8000, 0x4, 0x3, 0x7, 0x1, 0x3c48, 0xfff, 0x3, 0x40, 0xffff, 0x6, 0x4, 0x6, 0x0, 0xfa, 0x10001, 0xfffffbff, 0x800, 0xb66, 0x5, 0x3000, 0x0, 0x0, 0x400, 0x6, 0x3ff, 0x8001, 0x100, 0x1, 0x101, 0x7, 0x80000000, 0x2, 0x6, 0x5, 0x8, 0xff8000, 0xdd5, 0x9, 0x31, 0x2, 0x8000, 0x8000, 0xff], [0x2, 0x0, 0x7fffffff, 0x400, 0xfffffffa, 0xffffffff, 0x9, 0x7, 0x1, 0x3, 0x5, 0x9, 0x81, 0x4416, 0x8, 0x6, 0x6, 0xf5, 0x80000001, 0x2, 0x4, 0x8, 0x7, 0x3, 0x1000, 0x3aec, 0x10001, 0x4, 0x8, 0xd4, 0x6, 0xbec, 0x7fff, 0x2, 0x229, 0x9, 0x230, 0x6, 0x94c, 0x77d3776c, 0x400, 0x800, 0x100, 0x4, 0x200, 0x3bf7, 0x1, 0xc6b9, 0x500, 0xe2, 0x5, 0xfffffffd, 0x0, 0x400, 0x3, 0x40, 0x0, 0xf54, 0x6, 0x3, 0xc0, 0x401, 0x8, 0x6]}, 0x45c) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)={0x5, 0xe8, 0x1, 0xbc7, 0x5, [{0x2000000000000000, 0x0, 0x9}, {0x4, 0x2, 0x1f, [], 0x1200}, {0x80, 0x400000000, 0xfffffffeffffffff, [], 0x1702}, {0x10001, 0x400, 0x5, [], 0x280}, {0x8, 0x2, 0x2, [], 0x402}]}) ioctl$RTC_PIE_OFF(r0, 0x7006) accept4$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000a40)=0x1c, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40000) openat$sequencer2(0xffffff9c, &(0x7f0000000b80)='/dev/sequencer2\x00', 0x401, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) read(r3, &(0x7f0000000bc0)=""/56, 0x38) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, 0x1406, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040014}, 0x40) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x31, 0x1a}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000059c0)={'wg0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000005b00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a00)={0xc0, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc7, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6fe}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xcd}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xd9}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x14}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x6b}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1f}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5e}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 08:51:26 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = eventfd2(0x7, 0x800) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202ed566696c6530206e65742f6465765f736e6db2b6b1837bd51e703600202120200a9b5f6e9be257aec46c00000000"], 0x31) sendto$inet(r0, &(0x7f0000000000)="cd2d8e391bd8eef58f4f372aa7641d9a99a86d0aa54a910cde0e716cebd73637a55cec5de2391e4c7671de63b29c588851231c969390a1293ad93f6ffd2c581b0b740cec6be46a823c4c564d3238032501886f92f1f5da5ef7abce51028883d0383ff0cb42031881a3d5532854dc6abe14dcf94ecd5a82a10c8e2e43da6487", 0x7f, 0x200081d1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0245628, &(0x7f0000000140)={0x0, 0xf2, 0x2b, [], &(0x7f0000000100)=0x81}) ftruncate(r2, 0x40) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000180)=0x1ff, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280), 0x4) [ 283.219221][ T9105] IPVS: ftp: loaded support on port[0] = 21 08:51:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x802, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$packet(r1, &(0x7f00000000c0)="c8d1307083e5823af5edcd2b5b72b9b8be1d0f3b6178c8b3842baf7d57e7c2c96d5813dc9707736c9dfdc6e0494e2827ca6580c336105964090d6b47226cf00d71661c0a69feb86f617cce011f6b428f0baa5f1ad6096a07549eb9fbd94ba164e65ad5b283f43c0dd8a546938e0c946f6823edb4d9f89daddb3256a89208a7c0b7cc50435fffb66c31f949360b7ebe2983de10ccff8b5b295248c74412ad0b9ebdb7035f15ae57308cb2cf43521234748f163d8be76488ffb01881fb4dff211f", 0xc0, 0x84, 0x0, 0x0) [ 283.547876][ T9201] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 283.595534][ T9105] chnl_net:caif_netlink_parms(): no params data found 08:51:27 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400080, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7f, 0x9, 0x0, 0x3, 0x7a, 0x80, 0xd5, 0x4, 0x3f, 0x81, 0x3, 0x6, 0xe0, 0x1}, 0xe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup3(r0, r1, 0x0) [ 283.867246][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.874844][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.884424][ T9105] device bridge_slave_0 entered promiscuous mode [ 283.930716][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.938471][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.948968][ T9105] device bridge_slave_1 entered promiscuous mode [ 284.062845][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.086964][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.148377][ T9105] team0: Port device team_slave_0 added [ 284.163463][ T9105] team0: Port device team_slave_1 added [ 284.220209][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.227381][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.253581][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.270966][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.278257][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.305782][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 08:51:28 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = gettid() r2 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d06, &(0x7f0000000140)) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000000)) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x25) [ 284.464632][ T9105] device hsr_slave_0 entered promiscuous mode [ 284.505106][ T9105] device hsr_slave_1 entered promiscuous mode [ 284.545818][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.553434][ T9105] Cannot create hsr debugfs directory [ 284.597677][ T9277] QAT: Invalid ioctl [ 284.603378][ T9277] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0: is not valid (left unmapped). [ 284.614387][ T32] audit: type=1400 audit(1594025488.461:9): avc: denied { mac_admin } for pid=9275 comm="syz-executor.0" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 08:51:28 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = gettid() r2 = open(&(0x7f0000000180)='./file0\x00', 0x400, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d06, &(0x7f0000000140)) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000000)) write$selinux_attr(r0, &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x25) [ 285.025290][ T9320] QAT: Invalid ioctl [ 285.047658][ T9105] netdevsim netdevsim1 netdevsim0: renamed from eth0 08:51:28 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000680)=ANY=[], 0xffffffffffffff65) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0xf) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r8, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) r9 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) [ 285.125748][ T9105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.175401][ T9105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.225771][ T9105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.331675][ T9333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.382975][ T9333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.548940][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.579948][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.590271][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.611066][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.632140][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.642352][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.653140][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.660500][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.747698][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.757434][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.767413][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.776870][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.784199][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.793214][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.804246][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.815204][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.825796][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.836292][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.846812][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.857139][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.866947][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.876580][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.886305][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.906318][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.917531][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.989362][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.997730][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.029003][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.088807][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.099045][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.160362][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.170649][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.202221][ T9105] device veth0_vlan entered promiscuous mode 08:51:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x2, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x10c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}]}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x10004084) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xb6e, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r1, 0xc39}}, 0x10) r3 = socket(0x23, 0x805, 0x0) accept4$netrom(r3, 0x0, 0x0, 0x0) [ 286.251387][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.260894][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.312893][ T9105] device veth1_vlan entered promiscuous mode [ 286.426797][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.436990][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.446818][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.457355][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.480311][ T9105] device veth0_macvtap entered promiscuous mode [ 286.502510][ T9105] device veth1_macvtap entered promiscuous mode [ 286.557560][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 286.568314][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.582939][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.592195][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 08:51:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='::A:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x20010, 0x0) chdir(&(0x7f0000000000)='./file0\x00') [ 286.601788][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.611314][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.621380][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.681343][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 286.692641][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.706786][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.722475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.733024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:51:30 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(0xffffffffffffffff, 0x81fc) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1, 0x100000400000003a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="0080", 0x2}], 0x1}}], 0x1, 0x2402e4e4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r2, 0x0, 0x4ff60, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000440)={0x14, 0x11, 0x1, {0xf, 0x2, 0x8}}, 0x14) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x41) 08:51:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x401000000001, 0xfffffffe) close(r1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1127062, 0x0) syz_open_procfs(0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0xfffffffffffffe38) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x7, 0xc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x20000008000, 0x40}, 0x0, 0x33}, 0x0, 0x3, 0xffffffffffffffff, 0x8) sendfile(r1, r2, 0x0, 0x8000fffffffa) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e25, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000000) r5 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) [ 287.857411][ T32] audit: type=1800 audit(1594025491.721:10): pid=9378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15734 res=0 08:51:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000001c0)="c3", 0x1, r4) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000400)=0x8) r8 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r8, r3}, &(0x7f0000000240)=""/230, 0xe6, &(0x7f0000000040)={&(0x7f0000000080)={'sha512\x00'}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 287.964072][ T32] audit: type=1800 audit(1594025491.801:11): pid=9380 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15734 res=0 08:51:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="01003a1e2410"}) openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x60000, 0x0) [ 288.130133][ T9384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:51:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000440)={0x81, 0xca41, 0x3, 0x10000, 0x5, 0x3f, 0x3ff}) dup(0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1230}, 0x1, 0x0, 0x0, 0x81}, 0x4000) setuid(r2) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x3, &(0x7f0000000300)=[{&(0x7f00000001c0)="fd441c48e8b2d4cbd2d56c2e85f4835214150c536467558d757e32fb7da6e63b84860cbbdafdadf8db185d5e186cea9ffd164e59c651c166", 0x38, 0x81}, {&(0x7f0000000200)="90ae63b212188c31331aa0b55301ecb7ab0860bf0587f4b04d7c6b854fe13315c0ad3a90ae6a45212aad877eeff741c6cba140b6dc5a7549569db01bc5", 0x3d, 0x200}, {&(0x7f0000000240)="ae9edbc9fc84b45f17e2eb009d9625d58c7fff5a321cdd601ea9839fc64f3641a797b4dc5fc592f533e1c4f0c239111b4689b3f07e6f25aa4bc6e0acfd8dd4db8391c39008b6c9ef3c380e67b5150c5a37690a4a2661ec760380009435599bfd1d9a9ddbe63be2de8ec4048453ceba1d3e9953c4a8a0d2f9f6d3ce124a79a36baa21832553a5c855eacdb30d6adf43bf13ce6bee8afce9582140b7f5", 0x9c, 0x2}], 0x81020, &(0x7f0000000380)=ANY=[@ANYBLOB='usrquota,swalloc,inode64,sysvgroups,allocsize=kt,grpid,smackfstransmute=check=strict,fowner<', @ANYRESDEC=r2, @ANYBLOB='<\x00']) open(&(0x7f0000000340)='./file0/file0\x00', 0xf0, 0x0) 08:51:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x12603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x210000, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x401, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x33}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0xedc0) 08:51:33 executing program 1: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x84) r1 = openat$vcs(0xffffff9c, 0x0, 0x40080, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x7, {{0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00', 0x6}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) socket$inet6(0xa, 0x0, 0x20049) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) 08:51:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x12603, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x210000, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x401, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x33}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0xedc0) [ 289.568773][ T9418] IPVS: ftp: loaded support on port[0] = 21 [ 289.734125][ T9439] IPVS: ftp: loaded support on port[0] = 21 08:51:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010008506001000"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004000000f293b1f6ef59ed5c26845620d363b9bd1ca296c5ec09bf9c53374ce7c2bec128f6880766a781b7d853b9ebeb313acb15ace50c0b73db0bc941804eb14518c36313e396e9927ba0b89421ec59aaf25e12261abe52dca25634bc42a7b40866debe41cdca73c05918cc311a0d1d972fdb06d30e9fc11418e0ecb9c8ee651960ffd9acdaa4bc4ef90b2dc0b05b13a3c29a3d"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}}, 0x0) [ 289.986734][ T9468] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 290.122136][ T9468] 8021q: adding VLAN 0 to HW filter on device bond1 08:51:34 executing program 0: r0 = inotify_init() ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={{0x2, 0x0, @reserved="791d16bac2ef9fe2da059f97504eb85e60ac612760e3ad7673cb26a5d0a9ee47"}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000000)=0x8, 0x4) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 08:51:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x2c) ioctl$CAPI_SET_FLAGS(0xffffffffffffffff, 0x80044324, &(0x7f00000000c0)=0x1) socket$key(0xf, 0x3, 0x2) openat$vcsa(0xffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0xc0002, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r1 = socket(0x6, 0x4, 0x80000008) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1, 0xdd, 0x7ff, 0xfffffffc, 0x55f], 0x5, 0x800, r0, r1}) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x4, 0x67) getsockname$packet(r2, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4000000000000000140012800bda7340373cff1c0e37f7e3d1ec6b5e347e51812e290357082fe2b942481d49958c68b90000000000000000000000001eb79cd81839f3f07bf78a12001fcfe33c078035bc25d86edb7bb5e6029266b348063ed7f1fd236096c930a7b8d5cd54e7f5f186b9154ed3f750966254bdb8391b457c85e22c4c6aebe8e06516e94e70ec088de7b94623fe04b7e63b212ca2834412c658cb9ea27863be477da13cfdc61a8a2e3be37845dc2e8df4f814ab80e6d63763b39fffed92278e6fa603738972397e3e751dc6f645e5aaafe5b4401519f2279bb26913ac9e68d0c02a990aae299918a2540a9f25", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x44050) [ 290.908299][ T9510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 290.977270][ T9512] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:51:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc004240a, &(0x7f0000000100)={0x3, 0x0, [0x0, 0x0, 0x0]}) [ 291.156329][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.165848][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.321537][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.331016][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 08:51:35 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000272000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffd) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x400}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 08:51:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000000c0)=0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x40}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0086438, &(0x7f0000000080)={0x8001, r5}) 08:51:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 291.846229][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.276802][ T9534] bond0: (slave bond_slave_0): Releasing backup interface [ 292.585568][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 08:51:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x3, 0x4, {0xa, 0x4e20, 0x7, @loopback, 0x5}}}, 0x32) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x572, 0x24002) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'U+', 0x200}, 0x16, 0x3) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'syz_tun\x00', {0xacb}, 0x40}) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x101200, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x6) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x4, &(0x7f00000000c0)=[{&(0x7f0000000000)="0400000900000404090a02006d80027400f9", 0x12}, {&(0x7f00000001c0)="1998584d0c04b69646d34d36a8126bbb8fadaf9f06cebf43abc277db2bc00e3a86a229b7117aef2f69bffc84c3f471a668b47c6b17f240f666247154a0e1e23e99837f4f96c1460cd8d0d1eb0cd7a8f67911b7192af5c3b7", 0x58, 0x6f8e869a}, {&(0x7f0000000240)="bdfc2a0f8880191daa24509c6adc9ef37f78f1a229ccf16b0c0d7c7fe5116d032bef9229d7a0343af47612ded8f49cceebe6088c34d2c3e28941a47e3ffbffa9535c6113a89cffb1467bb823290e273564448ca28f8d46037a8f25a860a53ea77b9da3dc5de59a16", 0x68}, {&(0x7f00000002c0)="c65c4ef8c8019849019bbe2e1ed91606790178cb5ab89a34c8bcd69cb924cb0c1808375d20f7f3ef1228236896503810d93a9c6ea8b1eee75c33afb2b3db85b771d965ec089bc93f09dae6addbfbc5e3fc01e2efe0085a132b37e017aad005cb20b6ed8ab34627d92fa83b918025b52f54ae90000a7d06bd31dc93b58956571013785041f49d9007c99319ba250eee763e4360ffdf18b749a928db328141cb418b80c8cfe607bf1336d01659318d28e349b0dc1d8f14fbfeee53f3eeb5e8ecbd3371bf8f99eed87bd3ccd1ef99cb16953d0bd54be3e4e0b6838ee09f5a2864de35cb", 0xe2, 0x4}], 0x0, 0x0) 08:51:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d05, &(0x7f00000001c0)=0x1e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0xc011, r1, 0x0) read(r0, &(0x7f0000000080)=""/237, 0xed) [ 292.910406][ T9577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.978557][ T9577] FAT-fs (loop0): invalid media value (0x01) [ 292.985455][ T9577] FAT-fs (loop0): Can't find a valid FAT filesystem [ 293.219887][ T9577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.258027][ T9579] FAT-fs (loop0): invalid media value (0x01) 08:51:37 executing program 1: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) keyctl$set_reqkey_keyring(0xe, 0x3) clone(0xa4808d80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) [ 293.264679][ T9579] FAT-fs (loop0): Can't find a valid FAT filesystem 08:51:37 executing program 0: r0 = socket$kcm(0x10, 0x8000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000d40)=""/4096, 0xf60}], 0x1}, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x7e, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xce, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x3, 0xe, 0x6, 0x833}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x10, &(0x7f0000000040)={&(0x7f0000001d40)=""/4096, 0x1000, r3}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000507fdffff1f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0256040000000000240012800b0001006970766c616e73001400ebdf06000100020000000606000000000000000000040000000000000008000a00f3dad6a28150f2c8476951a4e5ae7b38d8946319efe5778ec3e8d97f01e62d183cd25942950c1c789bf673ee7d7e197b418629d70a5513b12e1dda4148261976b9b4085405c3846ffee85c270f7d80054b86d61e9d362727a1f3ddd77ba47ef21d28a7ffcfe1a2b694321dee87a2592da6c414826ebf9dc78545059ef6dd73f2f8661b74a6afa8a5a89934c8be8f732c5fc9b068c26f32a76f4674", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x705, 0x1ffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45602}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) [ 293.725188][ T9602] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 08:51:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x2, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010000108000000000000000000000000c9a5914e6e464aa23043ab2e948f8bed17f8632531f125f8202e3ad17c5ac30914ff153683982d55c2587596b6b84c9d044eb3012b83cc1b676588920c4d44162c0eb49b5edf99c9060a5c231cbc5d7392a85f71a3db0357140c24cccddd39af242199ea943a4ba04d12fa890a26ef40bc5e10651c33399c63fdbe8b75ffee51b217f5d10b426079292c3ea22308de35c2433bec86f63110e8ea80b86d6d006d273bd89b35012bc518dbfb462ef880199e6d5c8dcfd1b59f34d0c52bf356b75aeb1e77592fd2a4d4da77d2649205dba7ab2f46896525a83cff3e85685848592950f4a9827f28c3a20207c181bd1807465bd0d68b7161de6f7b6f66665e5f434fc63ba675dd6677abbcd798bfc01a19424b3aa8f4fc614b34394392d1f258b3415e44894b041c2917d3dac4536fa2e29b1d776d024a321a2493caa83addbcdfdef5498250bd34431c049b4414b5000f83df838a2632b59cca83554d6d4bdf3b531655106e8b32dfcd451470055224fb8febdf5f0febed73b4bb2565d8403523b3c433fd977fbd91aa", @ANYRES32=r10, @ANYBLOB="e61001000000000018001680140001801000060001000080000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08002e0003000000140012800c0001006d6163767461700004000280"], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000005a0002002cbd7000ffdbdf250008000200", @ANYRES32=0x0, @ANYBLOB="0800010002000000080001000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080001000300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="000000e986d6f69c77a3b8422acd50e7ffa380e03f70ab7549e08775c176153d716d8e18431f939586c4c597c1bd7bf708de20c5bd4566d0bf6645501e9ba862f3751b95f06e52c9508fea469d68f68f1a4f13d2837acf4efa2630ee77078b4ecdb307f0912f020000001a8e51db2f69f710788eb8106e00f9a3bdcce92abc748e93631398b1c27859a2e26fe9b659886bb85cbd8de4ea304bd9"], 0x64}}, 0x0) 08:51:37 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x387, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6300000010000000000163ee340b7679500000000000000000104003c5831039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c000100000000ad8e5ecc326d0200ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4) [ 294.069256][ T9609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.127377][ T9611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.175218][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.185494][ T9613] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.195157][ T9613] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.306957][ T9611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.346641][ T9609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.374750][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 08:51:38 executing program 1: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x84, 0x0) write$P9_ROPEN(r0, &(0x7f0000000140)={0x18}, 0x18) 08:51:38 executing program 0: openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xc68a41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009800128070000100767469008c000280080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="090006000000000008000400ac1e000108000400e000000208000500ffffffff09003b2c807ee52c0000f3001300", @ANYRES32=0x0, @ANYBLOB="08000300000000000800060000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800060000000000080003000000000008000400e000000208000500ffffffff08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0xc8}}, 0x0) [ 294.728862][ T32] audit: type=1804 audit(1594025498.591:12): pid=9622 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir211440261/syzkaller.Kwjt2B/12/bus" dev="sda1" ino=15742 res=1 08:51:38 executing program 1: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b3fcff000b000100666c6f776572"], 0x4c}}, 0x0) 08:51:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYBLOB="6b7479bc4cc25bda107fe86656fad07df43576582ff98483510cc1accda920d3f2d1e7742779de2436b0071be6a063b23a0fa3b40a69641c7087a4ec3b1095bf62e5810ea48a4581a8928a551688d1bd8ab442dbfed13344bc8fe5b6cc2568ee405df2bee307071726b511a516b634dfdacd58f27dddcb8f3dd340c013", @ANYBLOB]) 08:51:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@in={0xa, 0x4e20, @private}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x10, 0x1, 0x25, 0x3}}], 0x10}}, {{&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="f625ebd967f7d610370e9dccf273e94bc5cfa54feeed2cbd3950b8cdc0a17fd5cb1dd0fff2e0c526b867ff739f1dde8eb40991c62ea133a76d02a5f7c267ced601fdeffc84f856320caa672d6591c9426d5c1ef1dd5ab6be0569e4e1382bafa0203647d78ef01c29dc624681bac68a64404c7a38d48afeae20ca5d34c55c59620009cc0085438eb4a510c075ae2d3d03db4810fb96f6975986d6e7947e2206faead963a5e25312ea6c38568e71b3", 0xae}, {&(0x7f0000000280)="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", 0xff}], 0x2, &(0x7f0000001e80)=[@txtime={{0x14, 0x1, 0x3d, 0x6}}, @txtime={{0x14, 0x1, 0x3d, 0x400}}], 0x28}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)="6ae3a58268769d26736b2a51b60fbb01107dd469e8c348e4812c1994b9663d192a6d5905aa319c368ce26c72eca11f63ae9517b52aba7b7598c39ada6b38d235aeb877caa7342423efd7e5aba8adce47c34f9b71cf2d7cd83dc4d2b97b973893534243ea", 0x64}, {&(0x7f0000000400)="bc18c4431885da04da3789daae3912308200394e37fe1f9c2dc071fc515d9d9f2a375a286d9cddb5d735737811875d1de2f2b8975888a0dbd5c1f76ac26d59dd32a61f10401f3ad8184e86bb9b6f733228d004bb2244f5adba43fea1aaf60fdd97d39396264e7d6fa517c0002ddf00c158edaa2a01ab662dfc8b2627b5e2f8af131f59674fc2e937bbe2b380ef869b3117c9d34fb068077ad300761c0dd7cf07a0b98517665e57cfec853540da48c5d0ff277d372bd7fa", 0xb7}, {&(0x7f00000004c0)="213d491715004bbfca3d152baffd96a00155ed83cd389720654611543fb409cfe6eca626de73de74e73a4ca07560c045109dc7f2adb08273c80933bca2a38df00fc45ccd0e884b8d8745772d8212f6c830b370abf2f0b7624198a4ddfb8b15dff0a76185bfdcc2e2c0c389266694356f349f537f505535bb74ab2217c08b8c03384851cdcd7bb65c24126d89f2c68c720ceabaaec924d755db2fe5d7bb18715764c33a71565d77", 0xa7}, {&(0x7f0000001ec0)="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", 0x1002}, {&(0x7f0000001580)="06a329b5fdaaffb9747adbddd95174ce9e1429743fd3869bb7de408a8946", 0x1e}, {&(0x7f00000015c0)="d426b8706ab2788f70368c826d", 0xd}, {&(0x7f0000001600)="8609b1548af2661cd219935b13e2a4c5939f9f0d1f544ed3087d7b93026bba95e3d3d93d5942b04d3484bf587cdf1bb657174c6bd1ae630167f7d50d0f4362230cc7e7e424303a78da9e5a2a4d8e0525ac5ea95b2db8b04a065473d8c56c163a6c8723ec807ad9ae86e12c29e05c1631d994801fc2ad76ee7922d3f5ef103c0876e6aa70d7850cdf1440fce37c65d1e4780a2d2918a39b50874b83bf7be88dac48f6ec6398bd1dda6f73113d25406d27d0816e58e186a4", 0xb7}], 0x7}}, {{&(0x7f0000001700)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001780)="5c2ba6af90f03163692cb5847b0751041aaeeef9f34a6c25cc274d238ccfc3acd5deb5a2474cfa2db3475a3e24b289e50a72cf557da1eeac3fe24b5e3f70b693ba5e8c815d151b0d678510aaf3459cd9dbfa755c10d8565e8df0c30d951b0933b7a3d9871c10611b0b5166f0311435e5feeee8ce64003b50328b25023870e984e528e979675714f2ead9cc3a5445b23cb723660bc866124e6839ed9ce48bf6c2287083bf9c739efd7481c029f1969e2c4130c632baa386f16de2f02917309ba24b6814c8c5c0", 0xc6}, {&(0x7f0000001880)="5a8a24c25644b1929639fbd4113bf1adcad3bb6cbcfb8289bc8b9f7009090922531d9e113020167c2e3f5a19fa8d56392c6a97f3d5a1f0c736dc30535c6acd9564e4b9cb5aa61c0223474e9fa60eb3aefca0e37569816030dc7d29d02a065c0e3d9a4390b97b093304040c78b75d722c8fdb3c400825f91731cfeedc6296e18d7702c053882949aaa481c8d909fe467d8bd231a9821a22a1bebc74af781d75653019790a3f1ac3a7327eb6616e852fb9207bda2f049bd09cdd2e7258aa40f15e07b1de73a2226113565e75fbd4673faa71", 0xd1}, {&(0x7f0000001980)="de381858893cfa66db48b714fcd98ca903df459531edff529edf5892575599674bd94f7975b4858b3782a2a7c5fa3d95e8defea4b35fead5d4042a93de227208e7867f296d35932522a040175a287d169a75accd9010ff7735751f448fda418a91abf9c4030f6b83fa57a48812c1eab6b58318df4158b026436da6d50c4a8f2aa3e0b3fc176343311c0bdf972706cd", 0x8f}, {&(0x7f0000001a40)="1db1b72700e94b139309573487", 0xd}, {&(0x7f0000001a80)="98e3a277164a9df7ca99fd114a95228fc9cd70083685f1427b6d54e8c371244f8574515411b90b6d6772330f4d38fa8735d08fb7b0be1c9eea9cb254a648cdebefa15dd4c6025c9b3977135ea08db8e9a5436c33ab14465780d3aa65f14e2936ddc0a0d7bc8a17e2cfc5bb1bd6c32bb71313cee64cd2", 0x76}, {&(0x7f0000001b00)="a7d7096ea8b33797e86eb90a0fb4b9ebaaf94886ae9c30d73d62441986c788b52dcdc832ad7f6dc3278d2dc641eac7ef035f1876b8bb233da29078fdfa3771097a04f60c080d5c9e1d504fac731633eaa004b8ccd829bded298a35ca0e0aebc587783cd81b5258cf80f3091e70eeb33f0160300de56f547349361238556c0eb9aa6be2738a091197d93c579709f25435e627f645b7c73ff2c722fd9110d8f430f703940420371256ffaaa15b93f0bed8df510eb41e184052a9bb9ff3b7c7be1b64121785b7ba5bb7114eb988dbc479ad2837f6e55fc3", 0xd6}, {&(0x7f0000001c00)="a66a4c7d60cec8c853509fa8b2b101d7125a0f0eaa27e4f7d66ab87a7872e0814168b1c5885d5f5b97ecc458de4e58d2d04296c5f032a007c05114aec276dec966241b7895e4720b25d4778a4a6dcdb56bd49cc4c6b8e6bcdeac3bd4d0e181198502289ba92a7160e6dca754f0d37cc7df8adfd843ee85055391a010e752f1cf0a4fa24a526fc641f59d1f17b1783763de10c10291ac938a82b5d2c0f951fc83e0dedff27518461d23d239f46bee7ee07ec9375bf6ac2513d2e8f90e00b6de27ea3bcfcd7f1199c4c16980d763c004f6d68e818c677d7d43b8ee4bbaa34ff197585ac79e019794e52ae13857fecb3d690dffd010", 0xf4}, {&(0x7f0000001d00)="436bdf2414c5d70c6e384ea2d3ee5882055cbe9d0ed65cbac16bbcb4ea752a68c6da9ee6c1387c7f71df49e00050259539e099dbddc9fee732d55322bc33f0cf926be525bfdf131fe88a8101b263dbce525b6799e19a", 0x56}], 0x8, &(0x7f0000001dc0)=[@mark={{0x10, 0x1, 0x24, 0x62b7c060}}, @mark={{0x10, 0x1, 0x24, 0x8001}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10}}], 0x40}}], 0x4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = syz_open_procfs(r1, &(0x7f00000007c0)='net/ip_tables_matches\x00') getdents64(r2, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000001c0)={0x49, 0x13, 0x2, 0x6, "b97b4eb552bea9fcc2cdb61a5fe18dc9cfb9c4e228374be5696b6626944f641a"}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000005c0)=""/45, &(0x7f0000000600)=0x2d) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000000a0a010300000000000000000300000708210c050000e3b6e2dab4768b33a3777b1cefc5402677808a32cf9e0b7f62589d302429e60903553c267133d2c198bd37f3f2e0020ab863e215330467644a3c6830aea82ec250fa7610b3f4b12c2a1e6bcd681d7f6c43faa5cfb1e4ae"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040040) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000580)={0x3, {0x4, 0x81, 0x9, 0x0, 0x80000001, 0xffff}}) 08:51:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1c7, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x1000]) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150007008178a8001600a40001000a00000003ac030000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5125ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$sock_netdev_private(r3, 0x89fc, &(0x7f00000000c0)="fd77f0d15c7272de825e0fb2e6ff1f3ea7843f6a105057488afb732892db51e625f7125aa8ad84df20be8ff37a14fcfb77c8a2cef0aec24dc652a270e164dba804bba931ef84b36e30629bd1ca052db83bfd7812d16e65d8b959bdffce92daec8f3e79635af7a9cec75e63b9c32746482be0f658744b391c352deb08f1dddb78fe0d7ceaf1181039f27f9713d3f04212a25327153484d7549b7a26a3036cb71a71815a78b6") [ 295.189712][ T9636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 295.219486][ T9635] fuse: Bad value for 'fd' 08:51:39 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net\x00') getdents64(r0, &(0x7f0000000b80)=""/4089, 0xff9) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000300)=""/204) r1 = openat$zero(0xffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x800000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000180)={0x40, 0x1f, 0x7b, 0x0, 0x568c, 0x0, 0x3, 0x4, 0x5, 0x1, 0x1, 0xff, 0x0, 0x3959d4b6, 0x7ff, 0x1, 0x20, 0x9, 0x2, [], 0x1, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, r3}}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x18, 0x1, 0x2, {r5, 0xee01, r7}}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 295.392494][ T9645] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.400531][ T9645] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 295.466654][ T9645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:39 executing program 2: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) r0 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2040, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x2) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000004c0)={0x3, 0x1, 0x20, 0x18, 0x7a, &(0x7f00000000c0)}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000500)=0x6924c5) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0xe08, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000680)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000006c0)={0x0, 0x3}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000740)={r2, 0x401, 0xf22}, &(0x7f0000000780)=0x8) r3 = dup(0xffffffffffffffff) bind$vsock_stream(r3, &(0x7f00000007c0)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsa(&(0x7f0000000800)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40047705, &(0x7f0000000840)={0x3, 0x9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f00000009c0)=0xe4) lchown(&(0x7f0000000880)='./file0\x00', r5, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a00)={{0x3, 0x0, @identifier="9a74c900a5bed2cc3cfd651feb4d1a54"}, 0x41, 0x0, [], "5787e812a408cf6763dca8a9998473df0ede551114264d3a58e14050da0375f820e011613149df0400461ab7d02f5e2eeb1d6ca24baef2d538f7135251dc79c399"}) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000ac0)='.-%.{\x00', &(0x7f0000000b00)) r7 = openat$mice(0xffffff9c, &(0x7f0000000b40)='/dev/input/mice\x00', 0x2000) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000cc0)={@mcast1}, 0x14) [ 295.847751][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.973977][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.985343][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.428228][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.446250][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.456191][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.572196][ T9645] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 296.605707][ T9656] IPVS: ftp: loaded support on port[0] = 21 [ 296.623162][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x110001) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x186) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0x8001) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000130a0300000000e3ffffa4ffff220004"], 0x14}}, 0x0) [ 297.163570][ T9656] chnl_net:caif_netlink_parms(): no params data found 08:51:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000000, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xffffffffffffff19, 0x0, 0x7, 0x9, 0x8, 0x0, 0x7, 0x20008, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x8808, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x5) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 297.597864][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.605483][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.616671][ T9656] device bridge_slave_0 entered promiscuous mode [ 297.647375][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.654823][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.664899][ T9656] device bridge_slave_1 entered promiscuous mode 08:51:41 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x29, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x81) 08:51:41 executing program 0: getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={r0, 0x6, 0x1ff}, &(0x7f0000000500)=0x8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x401, 0x3, 0x40}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001b00)={0x48, r4, 0x300, 0x8, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x48}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'memory.events\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x845}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40c0001) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r1, &(0x7f0000002200)=ANY=[], 0x191) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) [ 297.787710][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.828601][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.835453][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz-executor.0 [ 297.900907][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9811 comm=syz-executor.0 [ 297.943412][ T9656] team0: Port device team_slave_0 added [ 297.984340][ T9656] team0: Port device team_slave_1 added 08:51:41 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) get_robust_list(0x0, 0x0, &(0x7f0000000140)) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/894], 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000000)) 08:51:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8001, 0x0) accept4$llc(r1, 0x0, &(0x7f0000000140), 0x80000) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000100)={0x6, 0x1}) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x1410, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x8040) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r6 = fcntl$dupfd(r2, 0x406, r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c8de10250"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f00000001c0)={0x1, [[0x1f, 0x6, 0xad16, 0x0, 0x81, 0xffffff26, 0x6], [0xff, 0xb3, 0x8, 0x48000, 0x91a, 0x401, 0x3], [0x6, 0x7ff, 0x7fff, 0xffffff39, 0x1, 0x80000000, 0x17519b76, 0x800]], [], [{0x2, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x3b, 0x0, 0x1, 0x1, 0x1}, {0x10001, 0xffffff14, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x10000, 0x1, 0x1}, {0x5, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x1}, {0xce, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffe0, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1, 0x1}, {0x8001, 0x9f84, 0x1, 0x0, 0x1}, {0x9, 0x12d4, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1, 0x1}], [], 0x9}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) [ 298.100348][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.107794][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.134003][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.210061][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.217513][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.243952][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.272495][ T9836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.343568][ T9836] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 298.352072][ T9836] __nla_validate_parse: 8 callbacks suppressed [ 298.352099][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.385322][ T9836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.401890][ T9836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.411957][ T9836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.622169][ T9656] device hsr_slave_0 entered promiscuous mode [ 298.685542][ T9656] device hsr_slave_1 entered promiscuous mode [ 298.715683][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.723349][ T9656] Cannot create hsr debugfs directory [ 298.730300][ T9852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:42 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xffc1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev={0xfe, 0x80, [], 0x44}, @in=@remote, 0x4e23, 0x2, 0x4e22, 0x1, 0x2, 0xa0, 0x80, 0x5c, r5, r7}, {0x4, 0x1000, 0x3ff, 0x2b712af8, 0x3, 0x8, 0xfffffffffffffffa, 0x40000000000101}, {0x9, 0x7, 0x2, 0x8}, 0x7f, 0x6e6bb5, 0x0, 0x1, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, [], 0x1}, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x3500, 0x3, 0x2, 0x2, 0x1, 0x0, 0x9}}, 0xe4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f000059aff8)={r8}, &(0x7f00000001c0)=0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) [ 299.158566][ T9889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:43 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) [ 299.336839][ T9656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.376765][ T9656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.421434][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.448000][ T9656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.506965][ T9656] netdevsim netdevsim2 netdevsim3: renamed from eth3 08:51:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000980a00008014a0d7e97aad00118010000600014000a0000000000000000008000d"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x1a0, 0x10, 0x7ff, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x178, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x80}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b32ed7bfe3f2e06d185436dc1dab6e24"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "64fcd6b1ea1f9262505c5d412c053927"}, @IFLA_PORT_VF={0x8, 0x1, 0x21}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "050fe8f67b9ce99477d2ce72a6bc8f7d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "adc2c38a9e13a982e123717bdb5bf08b"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b3d507312299778cd92c853c180abee"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x200}, @IFLA_PORT_PROFILE={0x6, 0x2, ',\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "805e77a3343843cefad9b99e4dc439ff"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "05ea46fe528cce1d23122cf7f83e1d7e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, '&\']\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x94}]}, 0x1a0}}, 0x22000801) [ 299.613483][ T9913] ntfs: (device loop1): parse_options(): Unrecognized mount option . 08:51:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xc12, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x4, 0x7) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="010001352f0000000073b26315"], 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0245628, &(0x7f0000000080)={0x0, 0x4, 0x3, [], &(0x7f0000000040)=0x8d}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}}], 0x3fffffffffffd33, 0x0, 0x0) [ 299.934179][ T9923] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 300.061052][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.083359][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.146523][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.155707][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.169887][ T9928] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 300.207661][ T9928] bond2 (uninitialized): Released all slaves [ 300.219740][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.243857][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.286120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.296116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.305624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.312841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.379931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.389818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.399645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.409126][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.416420][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 08:51:44 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x3b) shutdown(r0, 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004200}, 0xc, &(0x7f00000001c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="081500923643e62a2095fbe7e0d160402d00", @ANYRES16=r1, @ANYBLOB="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"], 0x1508}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6f) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xd, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r5, 0x6}, &(0x7f00000000c0)=0x8) [ 300.425517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.436407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.447286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.457847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.569337][ T9656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.580546][ T9656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.645077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.655125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.665916][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.677310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.687205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.697633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.707351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.790466][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.899287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.911187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.919079][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.926949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.936959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.034294][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.044874][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.090009][ T9656] device veth0_vlan entered promiscuous mode [ 301.106482][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.116041][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.163354][ T9656] device veth1_vlan entered promiscuous mode [ 301.280143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.290748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.313610][ T9656] device veth0_macvtap entered promiscuous mode [ 301.338659][ T9656] device veth1_macvtap entered promiscuous mode [ 301.394718][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.405898][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.415942][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.426544][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.440920][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.451361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.461654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.471433][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.481703][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.551314][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.563558][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.573735][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.584324][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.598524][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.608883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.619301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:51:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) sendmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x388a}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/159) 08:51:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x0, 0xfbb4, 0x0, 0x0, 0x0, "98cc8ffac2d9798000"}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x880020867cdd2103}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000000f04000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 08:51:46 executing program 0: r0 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$TCGETS2(r2, 0x541a, &(0x7f0000000480)) [ 302.699365][ T9998] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.708733][ T9998] EXT4-fs (loop1): filesystem is read-only [ 302.750068][ T9998] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 302.760847][ T9998] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 302.770800][ T9998] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 302.780592][ T9998] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24389!=0) 08:51:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x12c}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0245628, &(0x7f0000000140)={0x0, 0x269, 0x2, [], &(0x7f0000000100)=0xe0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000001c0)={0x7f00, 0x3, 0x8, 0x0, 0xffffff80, 0x7}) r2 = openat$mice(0xffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x2d641) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000240), 0x4) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000000c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000280)={{0x0, 0x0, @descriptor="fab86b76f5142ede"}}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000180)=0xbb89) [ 303.022815][ T9998] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:51:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x0, 0xfbb4, 0x0, 0x0, 0x0, "98cc8ffac2d9798000"}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x880020867cdd2103}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000000f04000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 08:51:47 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) close(r2) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0xfff9) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4040, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) 08:51:47 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000080)=@usbdevfs_connect={0x6}) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c26236925000400fe7f", 0x22}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 303.548097][T10023] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.557288][T10023] EXT4-fs (loop1): filesystem is read-only [ 303.585764][T10023] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 303.595649][T10023] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 303.605631][T10023] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 303.615483][T10023] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24389!=0) [ 303.637182][T10023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 08:51:47 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffffffffffd39) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20040810}, 0x8002) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) r4 = socket(0x10, 0x803, 0x2) r5 = creat(&(0x7f0000000200)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000180)=[0x0], 0x1}) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000040)={0x18}, 0x18) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x15) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002bc0)=@newlink={0x98, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20fd}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2c}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x1}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xf8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_EVENT={0x8, 0x2c, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xeb8c}, @IFLA_MTU={0x8, 0x4, 0x20}]}, 0x98}}, 0x0) [ 303.942538][T10032] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 303.950871][T10032] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 08:51:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="726f6f74636f6e746578743d757365725f752c646566636f6e746578743d866f6f742c22"]) [ 304.260654][T10040] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 304.269050][T10040] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 08:51:48 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0x9, 0x152e, 0x7fff, 0x80000000}) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[r6, r7]}, 0x2) sendfile(r1, r4, 0x0, 0x8400fffffffb) [ 304.402671][T10044] overlayfs: unrecognized mount option """ or missing value 08:51:48 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U-', 0x6}, 0x16, 0x1) syz_read_part_table(0x9000005, 0x15555555555557ea, &(0x7f0000000380)=[{&(0x7f0000000000)="0200ee7e08ff01000000ff070400004c000000a440f03562e3493cfffffffffffff025930a6ce62fe5d570a505a45c96d40f1d097af541e3304adfc97ec418f8f67d7490d3203eb9f48292668a9b59220e76908f596404b19809c9a9fd5154ff108e57ea61d8795ff613698e72431a478fddb41ebf57460317c2019d079d763cb0c28ad3952a26730c9487f7a1edead3303c5ffa01b5e2541c8b869cbda352b87c7d80fbb130fe4bc5337247d473d14043ee06ade52a6f61e303a09ae26c38f44a", 0xc1, 0x1c2}, {&(0x7f0000000100)="a0e07d2f89e5c96b62d053950780518017b0cfac14d850e5c109aa79e420204126428491f90649860753960bd51619fc353ffc06b7697d49f5c94d9ab1c5a11810d71dd4c81ce191f8dcaa080e1c98eee3673f25b6a748b6be88e95df62f04c8671c5fd3c3f56e84245bc2b12e7552c8563591cbb47ab387cd0a43db6614dda5504e48a31deb2531e72fb78db05799efabf79e7a3cc0658d9150a3809bed093125ae944707cc1eda8adbd9de1b25124e9d8722b4511769efc655b60ed79ebf22d1c7eadbc51d009e3aaed6ac8b9600a9ffe6d6f4d7e92cf0dbc62554b9d098a79880a7215471aca9719a54", 0x0, 0x55}, {&(0x7f0000000200)="e043c459ebbe339a92b027d22fadada0c82e9bce54116e56ebab75e4b7bcdd71372eb65fce858a8ef57ca18dcc78a25700894c0830093244562daa08d4239eb7700d205f72f6f610db2be1b38323b06ce1cb823531039190c2c26a", 0x0, 0xffffffff}, {&(0x7f0000000280)="4c05fe62a71485985c80f703c765381b4e083f11caa22c10c3a5442b2819c8ec9c69b4a8a181e4300314a2a4509915520fbe13edaa67b4a2ddf2caef934a642aed66000d3d5011d02f6926210cb7eb4518b6e4adec811def0796539aec6463f2eaa8e453d45d0843997c51a1796a0f5f6d3be6892e1558b3a4642d75771e3f0e14cb3e2f118f4899b2c88fd3452ce93d7e33b1872d322f8fba010f19646eb93b8726", 0x0, 0x1ff}]) 08:51:48 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffff81000000e100e2ff87770072003007005500000000000000008000da55aa", 0x40, 0x1c0}]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) [ 304.560622][ T32] audit: type=1804 audit(1594025508.421:13): pid=10050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.655077][ T32] audit: type=1804 audit(1594025508.451:14): pid=10050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.679499][ T32] audit: type=1804 audit(1594025508.451:15): pid=10050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.703935][ T32] audit: type=1804 audit(1594025508.461:16): pid=10050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.897845][ T32] audit: type=1804 audit(1594025508.711:17): pid=10056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.922667][ T32] audit: type=1804 audit(1594025508.721:18): pid=10056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir054360319/syzkaller.WwHGN4/3/bus" dev="sda1" ino=15774 res=1 [ 304.977241][T10060] loop0: p1 p2 p3 p4[EZD] [ 304.981746][T10060] loop0: partition table partially beyond EOD, truncated [ 304.990186][T10060] loop0: p1 start 10 is beyond EOD, truncated [ 304.996417][T10060] loop0: p2 start 25 is beyond EOD, truncated [ 305.002558][T10060] loop0: p3 start 4293001441 is beyond EOD, truncated [ 305.009449][T10060] loop0: p4 size 3657465856 extends beyond EOD, truncated 08:51:49 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000040)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000000100)={r1, 0x2}) prctl$PR_SET_DUMPABLE(0x4, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xb4, 0x0, 0x3f, "659f7eeabd3954bc0dceeeac70135d4a", "4396a671c476ebbac552055543b1184301043d5ae9156e28189fe3425cc5259a968960888c313a0f3689174e01c447d3e59b17e973713caad2e80b27fceea8b3e64307f36db6de8a5c8f0e5dadbe897f4f3e8133a4d9350cc1ab8472dec08536403e413c2b593981358e74cd7d26a053856e8f4de7699deb481956a0d87af8071b13c719eebb25922f3f2a688f55b8277c8a139e0427387b7c38380c22db40"}, 0xb4, 0x3) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:51:49 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r6 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xd0401, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000240)) [ 305.445110][T10072] ref_ctr_offset mismatch. inode: 0x3d9e offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x0 [ 305.554743][T10077] ref_ctr_offset mismatch. inode: 0x3d9e offset: 0x0 ref_ctr_offset(old): 0xfffffff6 ref_ctr_offset(new): 0x0 08:51:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000002090001006866736300000040080002dcb266086f346a9fac114ffe2eb85ccc5f177357e564a25229d3faad0b6f9ca72ff05a77009b8d0f64efac234edb3f0c5c4fce397d33e6c6a16bb69ac89bc0c19d15582d2772018000000000000026e7795bc73118f2bbf4996c42b34036b015c3c736a4900000000000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @empty}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}]}, 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 08:51:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_GET_NO_NEW_PRIVS(0x27) 08:51:49 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r6 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xd0401, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000240)) [ 305.839488][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.919954][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:51:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c800000000010904000000000000000000000000240001801400018008004100ff4f3bf666ffffff08000200ac1414000c00028005000100000000004c001080080002400000007f08000140000000030800024000000001080008007fffff9fb21b8981bfe99f1c0800024100000006080001400000997e88a80240000003e308000240000000083c0002802c00018014000300fc62d10000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000"], 0xc8}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000080)='./file1\x00'}, 0x2f) 08:51:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x800, &(0x7f0000000180)=0x0) openat$fuse(0xffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0200ffff0000", 0x6}]) io_cancel(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000240)="57bd6352d513109d169e3184bc90b11d77776bb554ca845c1b64303db6cf5c8d7ab8d40a9a5b0ec896fd10122e6f172c9156056717dcbfb16b0cc782fd46c9adfc5139c350412fd7470ea28e04fc18ca15452412525fd276349c1e9f338bfbd59102d63d2625dd806702f271eb4c980de43420d69b550af6824662d48616d611faffbf26d32cf61f093ea1e68294104fb215565232b3cf122f380f4cd9d6e15e1ec6d09719940f63ccb7411fb59015928e8eddfd888bf271e49eb1a9fcab5e06fca4360195e8c98379537e7da3a6161bbfc73ccda0afafb980f710b9bbe90fb4a7462288f07ee86de8a7179bdcfa139c253ad5e2363eee73", 0xf8, 0x2, 0x0, 0x2}, &(0x7f0000000380)) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtaction={0x84, 0x30, 0x1, 0x10, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4c0002, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x597b3fb4379a8628) 08:51:50 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r6 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xd0401, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000240)) [ 306.270904][T10103] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.280540][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.290265][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.299643][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:51:50 executing program 2: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0xc00) fcntl$setlease(r0, 0x400, 0x2) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="726f6f746b6f6e746578743d73746166665f7565f007e7a9cfe3751f8468842c00f22d07560ff8264be2a10400446e107960793c0301c8e792b741aa192020a89c4aa93a25f9221fff2f7e9876aeeff3000028"]) 08:51:50 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r6 = openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xd0401, 0x0) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000240)) 08:51:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) io_setup(0x13, &(0x7f0000000240)=0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = socket(0xa, 0xa, 0x7ff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) io_submit(0x0, 0x6, &(0x7f0000000680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000000280)="0cb8724cf1bed9cfa79faffeeecff92bb790aa0d1b066ab79bc2519e03e8f9fbec94a8e3fb67cd9f4a370e10f19092008aad2252bc44d852bc13e970a1fa98c0edd6a8598662d75d844f7aafac4116fee5268216bf14e3530b891d0904ee268aa3bdb9535a104639c3bbe82b6798f75bd9adda6b47680c0a0aa15b5aa9928518fda9af33b5bd4b4eddae300097a553d62b1db7e91334ff697facb21df47297e5005991e6de74e9eda80370b718ed53edcf7c597d845f5585c8d588d1d1b8bdaa1f41acdbee292f7c61a17c9ac9179a4f57f1ce1886e6de4ddbae", 0xda, 0x80}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000140)="2543e085c3c08a71a69a4d8086c661006bab470e3741ae4855265cfc83a3eb4345b3046e189afcc624335a0aa395b396d8402393049b35a91c3dde8f73cfb10375db8f9033609f2940b5224dd164b2452d0120f75b5dfed63d9f019f08f5dea4b953165596a0acee91a81d1340", 0x6d, 0x6, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0xa438, r0, &(0x7f0000000380)="9882070c103eb6faf977ddf2a3ffe7dc6c8a0c42aea273a25a0e3cbf186d4533ed9a89a1961c2781aa669f54287fe9b5099964b18bd4a7c426c784a0181ac8cbb8abdf0c033115e9a383500397c097764721ebd8a93e3fbdc3b1f5451e5f83640b254630064f08da630d4433bd9f82526414b095a6673a093f8728e73374ed64fba9806990ce618370f1f8eed03d2b5f6b9a7bda1b46371d9c40fbb8f06d131db5d94ae9f7", 0xa5, 0x10001, 0x0, 0x1, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x800, r4, &(0x7f0000000440)="5c9cbf6ddd8f001d089961c05dc3edb41dc384d73f04b849f58f5db5f61b", 0x1e, 0x7adf, 0x0, 0x0, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xff, r0, &(0x7f00000004c0)="94ae011a47accd88bafc31b64b0d92430c0340826670590dd1b9dd6153452deb3e588269241fdb3d3fad8731693c7da37084b461bc6ecbd2ef135c4d17ae76b598c65370c7c67dc19fd9e531285ffd15ab21fc3e75eb324878fc9fbad6daa88711c143164b6bf867e7fee8b5", 0x6c, 0x0, 0x0, 0x2, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x0, r7, &(0x7f0000000580)="7ef937647e25a43f21cd4683cbf68ff057a08c698941aec6a828ebc3441eee8f4ceddf491c8e649e8bcadcb9a3c097461d10ad2311b4933a164d0ee4dbee4f3f6b536cc84ea0cdf931d5fd2568dc344f0b56ddb83d68d4c66802181b21fb5ba4f869ed337ce0e704908dc5c1deab72dc1c5411d9bbe5ad798a509dcc766ac24cb413364761922276faa21d275efb478a03140b06c8082703667463c342b2bee69900e8a81f1a2939f037f5ca1a308b19ba24ec", 0xb3, 0x8, 0x0, 0x3}]) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff31}]) 08:51:50 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) openat$nvram(0xffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0xd0401, 0x0) 08:51:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) syz_mount_image$reiserfs(&(0x7f0000000400)='reiserfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)={[{@nolargeio='nolargeio', 0x3d}]}) 08:51:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp\x00') ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000000c0)={0x81, 0x5}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x368, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) [ 307.186938][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.195401][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.204141][T10137] device bridge0 entered promiscuous mode 08:51:51 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 307.935118][T10139] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.949163][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.960170][T10139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.974117][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.983159][T10139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.999255][T10139] device bridge0 left promiscuous mode 08:51:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r5, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 308.132460][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.140218][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.148757][T10137] device bridge0 entered promiscuous mode [ 308.158413][T10138] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue 08:51:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', {0x7, 0x0, @empty}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x21442, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$inet6_udp(0xa, 0x2, 0x0) openat$mice(0xffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x400040) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000001c0)=0x19, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e20, @loopback}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000140)={0x80000000, 0x3f}) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) 08:51:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 08:51:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001, 0x0, 0x20}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000100)={0x101, 0x6, 0x5, 0xe0d}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) getdents64(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, [], r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getdents(r3, &(0x7f0000000240)=""/86, 0x56) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'bond0\x00', {0x2, 0x4e22, @loopback}}) 08:51:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x0, 0x1, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @loopback}, 0x36, r2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000200), 0x0) r5 = socket$inet(0x11, 0x3, 0xa8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9b02e6d4404d0861, &(0x7f0000000040)=0x2172, 0x4) sendmsg(0xffffffffffffffff, &(0x7f000087dfc8)={0x0, 0x0, 0x0}, 0x60400d0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000180)={{0x0, 0x0, @identifier="0d9272f2e893cc39d3d5cf650155d0ae"}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x0, 0x0) sendto$unix(r6, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c) [ 309.252168][T10175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:53 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 309.668855][T10179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:53 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:53 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/223, 0x0}) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES64=r5, @ANYRES32=r4]) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r8}) 08:51:53 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x281) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x3, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = openat$nullb(0xffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x440, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f00000002c0)="baa1f1675f239cc46c96bc065cb5ae75bb54496bffb4185da3f6943e254788d35e8a8639962d9a1963466cc71c66e373276e23ed6b2a459aa2d94ee9bef19e0e06d5f704d5a328a699b0c8ee75da30a647de20c6f895771f4e87e3256576e5c3a01d35033314a77c7b5c776b322803f16d796d83e7324de6905d7908e59d0883aa82af9f2cca0254df1a67543ce077f48148797d21e5", 0x96, 0x100}, {&(0x7f0000000380)="14944a512da00f5f2ce67ff2bd060420cdcba37565012e23397fca894085a40d133975703054c4b99a07ad547471ba65fe3505b7b5cab82ca5e5e96aa4e362653cb939c21a6e5255de6fc2c0eb9d7671bb30c6380ebd7b61da43ac89ab626f6debb71ce93880a692cd761a062295e676b1b9a1", 0x73, 0x4}, {&(0x7f0000000400)="9b3527535b9cb5c24ea398880d", 0xd, 0x10000}], 0x41464, &(0x7f0000000500)={[{@quota_on='quota=on'}, {@quota_quantum={'quota_quantum', 0x3d, 0xe2d}}, {@rgrplvb='rgrplvb'}, {@acl='acl'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@meta='meta'}], [{@appraise='appraise'}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<', r5}}, {@audit='audit'}, {@hash='hash'}, {@appraise_type='appraise_type=imasig'}]}) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3f) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f00000001c0)=0x6957) 08:51:53 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) socket(0x11, 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 310.234996][T10194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:54 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:54 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) socket(0x0, 0x0, 0x0) [ 310.577148][T10196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:54 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/223, 0x0}) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES64=r5, @ANYRES32=r4]) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r8}) 08:51:54 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 311.181931][T10225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:51:55 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:55 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="0800000010000500000000000000080000000000917686da32224424ab793f813e3068504e1e7b1f83bb51d2cae5879b0429b4cc9fa420b5e10d8c733478507d02e2110fc7feb5b5645af58213c338ac740c88a3d60caa42a4", @ANYRES32=0x0, @ANYBLOB="65350600050000001c0012800c0001006d6163766c616e000c00028008000100080000000a000500040000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 08:51:55 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:55 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x2000a0, 0x1b, 0x0, &(0x7f0000000080)="140e007c331865419d3ef48fcf00"/27, 0x0, 0x4800}, 0x40) 08:51:55 executing program 3: r0 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8800, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xc, {0x7ff, 0x80, 0x7, 0x24}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40c00, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x803, 0x1, {0x0, 0xea60}, {}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1a, 0x0, 0x0, 0x0, "c8f19d6a5e56977101365fa438c23a0f36acd05994c5dbfeafbd32d3deb787effae46c26af8fe1363f95d18263ed4f7afd360edfffc9ffe73421bc46c6abf115"}}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000240)='macvtap0\x00') r4 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x3, 0x8, 0x607, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}]}]}, 0x44}}, 0x8014) write$FUSE_LSEEK(r4, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x4, {0x4}}, 0x18) r5 = openat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x80082, 0x0, 0x16}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000005c0)={&(0x7f00000004c0)="2a64aaf4e52ee279587b40e30c8313f41f88a8eedbe136ac2e1247cf7cb5b8aead4bb8aa61c8f6c44ac084300c8ea54909d4607994e2e065fd900c9f29cdbec074b27f2dc0c9ffc911ba785b79b6397232ab258e127dabf119f13bc6f7939bed61ef631f91200ee9df5d000e1d3445181cce42c4e3e9a107a4b210ed3cf7513c4c9cd448d4b548d88261970a00d0bb1950881aacaeebe2d271ff8037abafad2387d6d25a7908b6d5b460873cbc8a0601cb88c951b79606a4bc9e0cfdf9afe873bcfc8d11fe874e0cacce9c9859e8e54379b25f825da9953338754a3431067f48af861351c6e28a025edb7dec9ae37aa0e2984b9c34b670725b", 0xf9, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000600)={r6}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@private2, 0x4e20, 0x4, 0x4e23, 0x3, 0x2, 0x20, 0x0, 0x33}, {0xa6, 0x1081, 0x1f, 0x10001, 0x8, 0x80000001, 0x3ff, 0xab05}, {0x3000000, 0x8, 0x8000, 0x8}, 0x8, 0x6e6bb2, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x4d6, 0x33}, 0xa, @in6=@ipv4={[], [], @local}, 0x3500, 0x1, 0x2, 0x3, 0xfff, 0xffff, 0x1f}}, 0xe4) 08:51:55 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:56 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 313.053531][T10261] IPVS: ftp: loaded support on port[0] = 21 [ 313.623278][T10261] chnl_net:caif_netlink_parms(): no params data found 08:51:57 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) socket(0x0, 0x0, 0x0) 08:51:57 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40000, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e657665190010000280040006000800010001000000"], 0x40}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 08:51:57 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:58 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$ttyS3(0xffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x824400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffee9, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000906010100000000000000000000000005000100060000800c00078008000940fe0000040900020073797a30"], 0x1}}, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x0, 0x0, 0x0, 0x7ff, 0x4, 'I\'&n'}, 0xd, 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="95c18b0e175069602a3a31aadf2c44abba8ecc5caea2ddc87ed1c88321d18343a1456ca76fac4213b32e66d356e1677b4ac0925854ccc8565432") splice(r0, 0x0, r2, 0x0, 0x45fe5, 0x0) [ 314.136319][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.144603][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.154303][T10261] device bridge_slave_0 entered promiscuous mode [ 314.235804][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.243078][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.253564][T10261] device bridge_slave_1 entered promiscuous mode [ 314.448546][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 08:51:58 executing program 0: r0 = syz_open_dev$vivid(0x0, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 314.500115][T10412] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.554902][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.735462][T10261] team0: Port device team_slave_0 added [ 314.765534][T10261] team0: Port device team_slave_1 added [ 314.830870][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.839024][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.865140][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 08:51:58 executing program 0: r0 = syz_open_dev$vivid(0x0, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 314.885324][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.892397][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.919635][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 08:51:59 executing program 0: r0 = syz_open_dev$vivid(0x0, 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:51:59 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500005c00000000000190780a010102ac1414ae05009078ac1e0001460000000000000000880000000000000000000086060000006c00000000ac14140000000000000000ef79e3ef7366ee9e010000000007009ec02fba5784951ad7fd7fb38a8994db45f182606d53d2bbf99094b1b679b4bbe2fa039892bcc5a473d3511479e3f620973be1250ef840f502b61a3176919ba00122440367aa66e4a0f71029fbaaf6a2d84135dc9d3b00ebd78922fd93e98b6a00e3b46d9c2e37fb748421e91c7f46d357c8d5bf5f9907"], 0x0) [ 315.323938][T10261] device hsr_slave_0 entered promiscuous mode [ 315.355804][T10261] device hsr_slave_1 entered promiscuous mode [ 315.394135][T10261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.402188][T10261] Cannot create hsr debugfs directory [ 316.031534][T10261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.084103][T10261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.155126][T10261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.224031][T10261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.686935][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.748650][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.758457][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.786723][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.823075][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.835944][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.846104][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.853628][ T9055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.920557][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.931206][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.942996][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.953300][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.960998][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.970947][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.982526][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.995435][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.006631][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.070995][T10261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.083020][T10261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.166306][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.179991][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.190881][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.202340][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.214665][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.224786][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.235731][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.245578][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.256061][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.264225][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.380205][T10261] device veth0_vlan entered promiscuous mode [ 317.411233][T10261] device veth1_vlan entered promiscuous mode [ 317.426024][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.435730][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.446612][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.458338][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.468420][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.479437][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.561087][T10261] device veth0_macvtap entered promiscuous mode [ 317.584991][T10261] device veth1_macvtap entered promiscuous mode [ 317.611967][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.625218][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.634792][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.645087][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.655170][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.665513][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.705079][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.716081][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.726350][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.737222][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.747551][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 317.758158][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.772846][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.786306][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.796165][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.806737][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.889838][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.902630][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.913173][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.924484][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.934892][T10261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 317.946644][T10261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.961274][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.974279][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.985206][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.902689][T10529] Unknown ioctl -1072409029 [ 318.917306][T10529] Unknown ioctl 21665 [ 318.986578][T10529] Unknown ioctl -1072409029 [ 318.992965][T10534] Unknown ioctl 21665 08:52:02 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) openat$hwrng(0xffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2001, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140d, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x38}}, 0x4040) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES64=r4, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700000000000a000540340000"], 0x50}}, 0x0) 08:52:03 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffffffff0321a143f797ece6e90d5e7e000e6e00"], 0x20}, 0x1, 0x0, 0x0, 0x8048094}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x9cd0172a37ffba60, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004843}, 0x800) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$pidfd(0xffffff9c, &(0x7f0000000240)='/proc/self\x00', 0x401800, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000040)=0xccb2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000093f617e8c37caff18973", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b705300010067656e657665701f886502805c116e82e750df855d381b450ea66b5524295d6df811971cde8a1041b3a5ccdbc3834d6c62d9f5508c0bf3b964a28fc2b3f116e54fac1be9", @ANYRES64=r6, @ANYBLOB="93b76336ec6adb36a880ec98dd488399831322bf8d22a2aa5024052dc44e01a1b41c9e2f2e682ca8f338c7155ba13f6768db111d12dc8d222c00000000000000000400"/79], 0x3c}}, 0x0) 08:52:03 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xd) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xd, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xa400, 0xec}, 0x8) [ 319.239752][T10540] IPVS: ftp: loaded support on port[0] = 21 [ 319.287502][T10539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.343633][T10545] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 08:52:03 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 319.601310][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.646112][T10539] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 08:52:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f297c8839d6ac46306275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2766696c65302c6d657761636f70793d6f6e2c00"]) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) 08:52:03 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:03 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x1000000, 0x0) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xb, 0x24}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f00000008c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000840)=[{&(0x7f00000003c0)="7f7eb75c867b6f186b2685b097e89381a8a184e73cd1c123871b9cd2b5e3100f1e736c45ac192d7eab129e34c96cef35fa39edf37a8080e7a8c9c9750545651e6d91d2b1a1fcaa723cd5dccbf53ca56d38e21125b05b3d9a2a8ab345902a2558a698c45e60e505850d8964e358f4e23264213364dd0ed00e8abcd12b8903c1103ffdde242384f80b526ef5927401da7894f17680de896fdccd2f8cd3ef9188cc3ce3ade0b11f53142ea5e302061b27345eabf9bfec81ae524e46ac457aff081aff503693c7c79126109b4ff976fc9979c29fe6b19af0e436341f5369ca10136c820127e22159a03441040153ab", 0xed, 0x5}, {&(0x7f00000004c0)="453528a140295c4bb2595f849888fbdfe4ac39ca0fcdf55f6df325f6e5df95c09a96b0a54dfae0ebb5981ce43e8a63502b02b3e7c0a0fad6f0463f5f6601ed18e3a98b04d167903d99eaafd1fc370e8bf6", 0x51, 0x6}, {&(0x7f0000000540)="52c31a147fcc35ab9f113378b73f88e8ee1e9092d6c1ca3f0e2552679f9cfc4eef0b2f4da50bb8e82727a080920db44cbfc2778ed3a2ccfce8c9c4636f9722a0bf6fb210eb179b7d5033a7804a84a6c13b030ab839e94fc772229f3ce3a3cee19d58997948b3a0cf85290f30e932b184a80070cf1563633facb73fafeb00aab4442d903c6be7d686fb3f1ea83e95f56a90d7bb", 0x93, 0x3}, {&(0x7f0000000600)="daf83c9680fa6abafa143b4fad28d91c8daade14d6ab31911d5b2417ff48583e1f8b238f7a1f350ab06d8834e65eef42d277f1dc09894ed85d69455c7e6ac4877a9cc8e01c37141fe7b69212d2a552b40aaf853a6e71aebc88c181ed51c2721281d0ae5fdf8f55f5ac7da0ebd5a36230cccaa5a0108ff82eb099923728bb", 0x7e, 0x3}, {&(0x7f0000000680)="1fd082a039345aa90610d049da823c6fb232001b4dc11150640155a64b9231427eb8aff772c7c095477d69b16c2c390c27e5248d1fa2bec93d79fba6e35527509bfde070429b4b0e0023afbdcac797e95f0cc2b140110c1200b58aaf1dba4d1609798b32d4f049c8414d7cc5ca6cbc2c33b7063dd0394a0bfa0bf44b70173427696c6b4f4f8fb8c09b9dcc5ba728c86a708bf38636f8e92f5e472d30bc4fc217ddc659c67c071dd6ecc906916dd1d0d5f41e3d24b0bdbfc8ae258169e21341d58086e8511f092b0e195ba9beafbc1c4ae648288c6ab8b9f5f3fef2e94cb4878d1abda38289f6553f96f79ab4c2fa0aaa", 0xf0, 0xe9}, {&(0x7f0000000780)="509cfadc979a007d821d25967928f7c252d6b477997e29a5b8ec66dec397aad509c3b7097b7d1360f9715f814eae2a340d8c5a77b3226fdb696880f4a9d64c8ce34d781e95e4cc5feb00390debd769684eac735e23de0f3eba8e734704658a1d2576175d66c3e5d86a3b10564bc9f43928560a422b6e99d6ccf01a0577bd46b00a11e034618e5deba2691629e7d4c75c2eb27496f5bdf5626d76248838df7f33be3d093f4af6aa07c9246ccfe998b9b587575e19ef0046c0dd", 0xb9, 0x81}], 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='barrier=flush,replayonly,data=journal,nouser_xattr,jqfmt=vfsold,euid>', @ANYBLOB="0600000000000000a69272a91903650483aadc", @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB=',\x00']) getdents(r1, &(0x7f00000000c0)=""/38, 0x26) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x214000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000200)={0x3, 'hsr0\x00', {}, 0x1ff}) getdents64(r7, &(0x7f0000000280)=""/203, 0xcb) [ 320.261114][T10580] overlayfs: unrecognized mount option "mewacopy=on" or missing value 08:52:04 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 320.327643][T10580] overlayfs: missing 'lowerdir' [ 320.333617][T10584] overlayfs: unrecognized mount option "mewacopy=on" or missing value 08:52:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0xfffffffffffffef4}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000004010004000000000000000058265ac600fbff06000000002b03d4cb35e4a707ffffffff02000a00"/62]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:04 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe4) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000013c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000340), 0x250c08, &(0x7f0000000280)={[], [{@euid_lt={'euid<', r0}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, '{'}}, {@uid_lt={'uid<', r1}}, {@obj_user={'obj_user', 0x3d, '\\'}}]}) 08:52:04 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 320.869847][T10593] kvm [10591]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702111 08:52:05 executing program 3: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 321.277333][T10593] kvm [10591]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x0 08:52:05 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 321.686167][T10544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.732973][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.881107][T10540] IPVS: ftp: loaded support on port[0] = 21 [ 321.984872][T10627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.182796][T10540] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x4, 0x4) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x8fc8, 0x1000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 08:52:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001340)={r1, &(0x7f0000000300)="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", &(0x7f0000001300)=@tcp6=r2, 0x4}, 0x1c) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000240)={0xa0}, 0xa0) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=0x32) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000080)={0x2, 0x75, 0x1}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[], 0x52) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000200)=0x10000) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:52:06 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 322.468847][ T319] tipc: TX() has been purged, node left! 08:52:06 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 322.755546][T10658] mmap: syz-executor.1 (10658) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:52:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xf0}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0xfffffffffffffd9a) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 08:52:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:07 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) 08:52:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r3, @ANYBLOB="00000080000000000000000008000d00"/26], 0x40}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x5, 0x9, 0x3f, 0xbb8, 0xffff}) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x92, "802efa88fd760956dfab387146f9038350e6aba78462394944fbd06ee2b045fda34ebb5c6589259ecc78e0922ec8e78820d78054786c72c69eb1ea13195458fa119b683852c2e3c51f535744870ed03bc84addcf7edfd1fa761f40242ecaab69f0189f4e067fb0a7cd8a1bd15a4c1ba9df63f46c6867b96f2b485f03c44c23158b0065e5186935f87dcbca170bec4574e4c2"}, &(0x7f0000000100)=0x9a) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000240)={r5, 0x1f, 0x7, [0x1f, 0x8001, 0x400, 0x6, 0x2280, 0x200, 0x400]}, &(0x7f0000000280)=0x16) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local}) [ 323.962234][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:08 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd38d, 0x523100) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="24000000070a07051dfffd946ff20c002020000005000240021d85680300aba20400ff7e574e0e99d9768db28c3130fa8dbe63c5feb4b20cd4e7bb25fba209009bb1803765855d5f17d5a451377bee0c93cf883a38c46b984d96b76bd71863587edfe1c5b5839db6230a1b0146159e3289c839415eaa8b560252b0bd394d18d586c79900f5df247a39de6d9c18819e9d8153eae6119e8cd07815548e66b04dcd7e983914591962b028f1dca688bd3be39f4cd9a2e02434da54eaa8c1576296b8e41ccfed255ff64a8df7590f8af489cc84cc461c02", 0xd5}], 0x1}, 0x0) 08:52:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="010009fc5c7614fd9a85920c52d51cd87bc3f7f3abe64e77b3a74491005e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xd, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={r5, 0xf2, "5a64e768a0ecc4b23ef5e57e6c8391c3a11e0c1839e0a8f76ee405a4a5b242a740abb8c4ba4d91192bde059097c80a913da714acaf607946d0b5d46c4fefd99ecf498a3a2f486f6288f59de8e94f50b105f0dd603fa95a7b98a135f3e0c24d187fbd8adf105f2a2f5fb0dbc9a8f08a97ce938c22847634063b4289f8d5211478e33e74e64af0db21f0ec9fcbd3f110a346456e9ca7beb2c700e28b3aede4351597e3c6cee44c84ef9fb3137cffbf843323629f2716c90e87e3a9306b59b26efec9a2d459b0e9c13533ea8e66dfcbad7a9f26c39e33976f166a52c61e40810a9759a46aab515b0fab8425ba120397c3086571"}, &(0x7f0000000140)=0xfa) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r6, &(0x7f0000000200)=0x4) [ 324.468675][T10684] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.517369][ T32] audit: type=1400 audit(1594025528.381:19): avc: denied { associate } for pid=10692 comm="syz-executor.2" name="cgroup.controllers" scontext=system_u:object_r:proc_net_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=1 08:52:08 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:08 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd38d, 0x523100) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="24000000070a07051dfffd946ff20c002020000005000240021d85680300aba20400ff7e574e0e99d9768db28c3130fa8dbe63c5feb4b20cd4e7bb25fba209009bb1803765855d5f17d5a451377bee0c93cf883a38c46b984d96b76bd71863587edfe1c5b5839db6230a1b0146159e3289c839415eaa8b560252b0bd394d18d586c79900f5df247a39de6d9c18819e9d8153eae6119e8cd07815548e66b04dcd7e983914591962b028f1dca688bd3be39f4cd9a2e02434da54eaa8c1576296b8e41ccfed255ff64a8df7590f8af489cc84cc461c02", 0xd5}], 0x1}, 0x0) 08:52:08 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000075a52cbd2a93280012000a00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c000000f5f385d4df764ef39fbb3b4a656da66d9f03baae8233d5592fbd04df12e99355cc9c9194ef07de2f485b5276aa04a81ebeffbfa54cd7dfa3b7118a3b51a8749fa003009caebb44b0bf80c1e5a34ed5b799a1499b6206ad90b469385f2bc573109ad98fc055ff0b5f052942a3c5a896c708e2d1456c5b21b2df61e839460aa4830be1aa46503f35cf25", @ANYRES16=r7, @ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0x400804d}, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x298, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2b031b92, @mcast2, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1cdc92fc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15000}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f6d594fae8e36711b38afb475a7be6fdbb58d2aeb77a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x653}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "56ab35b062d47c53fee503addd05283727dd97d2"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a00030018000000fbc000"/20, @ANYRES32=r3, @ANYRESHEX], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 08:52:08 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) [ 325.074940][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:09 executing program 3: socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x01\xc3\x81\xe1\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 08:52:09 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd38d, 0x523100) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="24000000070a07051dfffd946ff20c002020000005000240021d85680300aba20400ff7e574e0e99d9768db28c3130fa8dbe63c5feb4b20cd4e7bb25fba209009bb1803765855d5f17d5a451377bee0c93cf883a38c46b984d96b76bd71863587edfe1c5b5839db6230a1b0146159e3289c839415eaa8b560252b0bd394d18d586c79900f5df247a39de6d9c18819e9d8153eae6119e8cd07815548e66b04dcd7e983914591962b028f1dca688bd3be39f4cd9a2e02434da54eaa8c1576296b8e41ccfed255ff64a8df7590f8af489cc84cc461c02", 0xd5}], 0x1}, 0x0) [ 325.191149][T10709] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r5], 0x1c}, 0x1, 0x0, 0x0, 0x22040005}, 0x4005) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x6) 08:52:09 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) 08:52:09 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd38d, 0x523100) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="24000000070a07051dfffd946ff20c002020000005000240021d85680300aba20400ff7e574e0e99d9768db28c3130fa8dbe63c5feb4b20cd4e7bb25fba209009bb1803765855d5f17d5a451377bee0c93cf883a38c46b984d96b76bd71863587edfe1c5b5839db6230a1b0146159e3289c839415eaa8b560252b0bd394d18d586c79900f5df247a39de6d9c18819e9d8153eae6119e8cd07815548e66b04dcd7e983914591962b028f1dca688bd3be39f4cd9a2e02434da54eaa8c1576296b8e41ccfed255ff64a8df7590f8af489cc84cc461c02", 0xd5}], 0x1}, 0x0) [ 325.717147][T10725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x94, 0x0, 0x0, 0x1ffffc}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000080)={0x1, 'syz0\x00'}) write$binfmt_elf64(r2, 0x0, 0xfffffd88) 08:52:09 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) [ 325.921865][T10727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.975704][ T319] tipc: TX() has been purged, node left! 08:52:09 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd38d, 0x523100) 08:52:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000500)=0x3, 0x4) select(0x40, &(0x7f00000003c0)={0x80000001, 0x948e392, 0x101d, 0x3, 0x9, 0x2, 0xffff, 0x764b}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x16, 0x3, 0x4f, 0xbf, 0x2}, &(0x7f0000000440)={0x100000000000000a, 0x100, 0x6, 0x9, 0x200, 0x9, 0x2, 0x3}, &(0x7f00000004c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESOCT=r0], 0x3}, 0x1, 0x0, 0x0, 0x28944}, 0x0) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) r4 = socket$inet6(0xa, 0x5, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(r4, r5, &(0x7f0000000240)=0x1ff, 0x200dc) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000640)={0x1003, 0x10001, 0x127, &(0x7f0000000780)="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"}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000380)=0x3c) socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x34, 0x4000000000dc) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'netpci0\x00', 0x1}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001000010800000000000e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 08:52:10 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:10 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) socket$inet(0x10, 0x3, 0xc) [ 326.553336][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:10 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x25}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)={0xb0, 0x0, 0x7, [{{0x5, 0x3, 0x2, 0xc393, 0x4, 0xa0, {0x2, 0x0, 0x5, 0x7, 0x1ff, 0x4, 0x4208, 0xffc000, 0x2, 0x5, 0x3, r5, r6, 0x3f, 0x5}}, {0x1, 0x54c3, 0x4, 0x7, 'tbf\x00'}}]}, 0xb0) 08:52:10 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="744f6b0000000000009ca9e074cdbb1a7df830db6e25d4036eed129459e909219b5012924d307bab853135275eabfb7268ebf633b3cefd9fc334c8fb8848c05a4616f8a86df559cec826993d1df3f01ab8f4849f837bad6e41c364a6ca104c098a087757407e521f37cdfa07f9659bcd01666beb5cee1df4234df9438e67306d951db2ff7d070b8208ae0775f3e4fcde64bb486a15bc31d8230d54ca04cd6d240ee79ae3f72494ffff2bf7920bbd81dbdd34a6a6cc792059e4d0e81d329d95d5"], 0x14}}, 0x0) 08:52:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x8000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x7, 0x4}, {0xff, 0x20}, 0x7f, 0x1, 0x6}) io_setup(0x70b, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) io_submit(r2, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13a9010000000000, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xd01000}]) 08:52:11 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 327.246091][T10761] lo: Caught tx_queue_len zero misconfig 08:52:11 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) 08:52:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000033c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)=@can, 0x80, 0x0}}], 0x2, 0x0) time(&(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000980)=""/131, 0x83}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f00000032c0)=[{{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000a80)=""/162, 0xa2}, {&(0x7f0000000580)}, {&(0x7f0000000b40)=""/223, 0xdf}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/147, 0x93}], 0x6, &(0x7f0000000dc0)=""/157, 0x9d}, 0xcb}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000e80)=""/131, 0x83}, {&(0x7f0000000f40)=""/81, 0x51}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)=""/245, 0xf5}, {&(0x7f0000002100)=""/135, 0x87}, {&(0x7f00000021c0)=""/145, 0x91}, {&(0x7f0000002280)=""/37, 0x25}], 0x7, &(0x7f0000002300)=""/147, 0x93}, 0x6}, {{0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/11, 0xb}, 0x4e}, {{&(0x7f0000002440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002900)=[{&(0x7f00000024c0)=""/167, 0xa7}, {&(0x7f0000002580)=""/152, 0x98}, {&(0x7f0000002640)=""/214, 0xd6}, {&(0x7f0000002740)=""/77, 0x4d}, {&(0x7f00000027c0)=""/73, 0x49}, {&(0x7f0000002840)=""/146, 0x92}], 0x6}, 0x3}, {{&(0x7f0000002940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/181, 0xb5}], 0x1, &(0x7f0000002ac0)=""/219, 0xdb}, 0x47}, {{&(0x7f0000002bc0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c40)=""/45, 0x2d}, {&(0x7f0000002c80)=""/85, 0x55}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/193, 0xc1}, {&(0x7f0000002e40)=""/1, 0x1}, {&(0x7f0000002e80)=""/106, 0x6a}], 0x6, &(0x7f0000002f40)=""/212, 0xd4}, 0x8001}, {{&(0x7f0000003040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000030c0)=""/138, 0x8a}, {&(0x7f0000003180)=""/147, 0x93}], 0x2, &(0x7f0000003280)=""/54, 0x36}, 0xb80}], 0x7, 0x2020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/106, 0x185}, {&(0x7f0000000280)=""/85, 0x216}, {&(0x7f0000000fc0)=""/4096, 0x145}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f00000000c0)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/12, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:52:11 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:12 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) 08:52:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000100)=0x9, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ftruncate(r2, 0x40) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000040)=0xffffffc9) 08:52:12 executing program 3: openat$vicodec1(0xffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ftruncate(0xffffffffffffffff, 0x4) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="81dd"], 0xb) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40047703, 0x2) 08:52:12 executing program 0: r0 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x5ba061f65196abed, 0x100, 0xd}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 328.524352][ T32] audit: type=1804 audit(1594025532.381:20): pid=10790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir059565908/syzkaller.fwoa24/9/bus" dev="sda1" ino=15880 res=1 08:52:12 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) 08:52:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) fcntl$setflags(r7, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00010000000000e80900010000007363000000064e6bbb0000000033bb1cec8e42b7fbcaf1b8ce8b94d3"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) [ 328.641715][T10790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:12 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000060001000900000000000000000008000d0000000000"], 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000040)={0x2, 'veth1_macvtap\x00', {}, 0x3ff}) ioctl$VT_RESIZEX(r2, 0x5607, 0x0) r8 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 328.867472][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 328.902904][ T32] audit: type=1804 audit(1594025532.761:21): pid=10790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir059565908/syzkaller.fwoa24/9/bus" dev="sda1" ino=15880 res=1 [ 328.948404][T10799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:12 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') [ 328.951723][ T32] audit: type=1804 audit(1594025532.801:22): pid=10790 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir059565908/syzkaller.fwoa24/9/bus" dev="sda1" ino=15880 res=1 [ 329.005015][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.015355][T10790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="016f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x87}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) [ 329.192080][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.211675][T10801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.231163][T10807] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:13 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = dup2(r0, r5) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:13 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x200c02, 0x0) 08:52:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="000000feedfd4c001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x46) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 329.463100][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.517855][T10816] device veth0_to_batadv entered promiscuous mode [ 329.563163][T10817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:13 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) ptrace$peek(0x2, r1, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x5, 0x7fffffff, 0x502f, 0x4, 0xa, 0x1, 0x0, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80ffff) [ 329.710831][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.804337][T10820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.835272][T10857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10857 comm=syz-executor.1 08:52:13 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) [ 329.876406][T10826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.890007][T10826] bond0: (slave bond3): Enslaving as an active interface with an up link 08:52:13 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x8, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0x1}) [ 330.092960][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.128561][T10826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10826 comm=syz-executor.1 08:52:14 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0x5, 0x8, {0x0, 0x204}, {0x5f, 0x2}, @ramp={0x0, 0x0, {0x20, 0x401}}}) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rt_acct\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc0fc4110, &(0x7f0000000280)={0x4, [0x32b, 0x1ff, 0x9], [{0x6, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x10001, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x40, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x2c0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x6, 0xed, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x4, 0x1, 0x1, 0x1}, {0x1a, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0xffffffc1, 0x1, 0x1, 0x1}], 0x7}) write$evdev(r0, &(0x7f0000000040), 0x373) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000380)=""/268) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) r5 = getpgid(r4) ioprio_get$pid(0x1, r5) 08:52:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') write$cgroup_int(r0, &(0x7f0000000200)=0x20004000004, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000240)=""/118, 0x76) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r7 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'lo\x00', {0x3}, 0x1ff}) bind(r7, &(0x7f0000000080)=@generic={0x1f, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x65a) recvfrom$l2tp(r6, &(0x7f00000002c0)=""/128, 0x80, 0x2080, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) 08:52:14 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x4000, 0x0) r2 = dup2(r0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) fcntl$setflags(r3, 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0xfe, 0x0, 0x0, 0x20, "cc686d56"}, 0x0, 0x3, @planes=0x0}) 08:52:14 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1, 0x8, 0x3f, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x7fff, 0xd1a, 0x5, 0x9, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x8, 0x0, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000140)=0x10001, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40086410, &(0x7f0000000280)={0x89, &(0x7f00000001c0)="6d44e28c9e5108b1d5080757133c01833c229e88bdb5c69d4b84d03dab2e21cea8430005cd2ce36ae2c1e489daa2e5856562595080f4a120c33558cb52efff7440443cd5b5035b59e1933eeff2cf7ea52f9da68f4166db95dd6e9287f5037559ee6157560cf94ba5bbef32e78f2573daa50fa0d07c674bba92ee3e36e633b7f2cdf9a28782be729e3e"}) r7 = openat$vsock(0xffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x101000, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000300)={r8}) syz_open_dev$ptys(0xc, 0x3, 0x1) r9 = openat$dlm_plock(0xffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x400200, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb11}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2d5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4044000}, 0x80c1) r11 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', 0x8301, 0x4) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r12, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44810}, 0xc1) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) 08:52:14 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:14 executing program 1: socket(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x164c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IE={0x7ab, 0x2a, "bbdf51210cd7d351ac0225febb8010c084171a8a6d4e75b89fee9182ab25d0798804dddd8c5fdc635359f9e23221394659abe9ba709025d57fe3ad37688bc0fdfa9402d28fa4aee65362896b2a21e2682ac8ac957f43628acd3bc7c8c2fe4142bbc56c9f868c5aaa948f3b07e2e47995a55704f9580c73bd1ae044fe2cde42a60dc3aa0f64c9e924f6c7eb1a34204efbaf9de5cf99fe85c3f79f34bca158fa28fe3d310a8817618ab325c0e09e3405ccaab138a847ad93c7181ef980e6bdf1a7129f753abc9cf8ed36d06f046c618f73706b90f97281cf2f2562f0ef111405f0a4a8d7124e71fa9ba3c3311d28819ea760a555f8ee8b8fac95b638607a7bb2a848fcf2c4135a3295f9998c8ff63fb5766a0e661978a614a38e7d9eb7f3e5395bc5ec95f1ffaa727be42ca8accb46bbdd7343e64850cd3cb10e67d58bdebb61500ae16788002d3bc808ee11df3e0a2798ce34bd1ab10152a0a6289ade613ef886183ae50103d78abe6c1ec0cf839e08bff8cc069df8256ae223bac62110846f547949f6d742f4c700ecde324d09d3a7ed08eec5219aedf63be6a9c5427c9adb92b0bbfa61890b5326b40468c2e08970291f3189caeb0eca60eb811d17b1cb37837cd98d71092495a98b7554f0caaa00da2af23d51d02c393bba5321d2376c76fdcd3c1be6a62e283b04881c086401609c7ed94ec26f585534c66b2d49042ef44a94c9940e00eec6801428ca09b734509af9f8817f5f3a4b8c1939dbceab2f29df1da90173a81927ecc7040f599325e47f9f8647db4393fe65850edd19d633043e1a617bc4c616096a2c1df32bf7e6c53489900d93b313c1182d9c8f8c42eb97e3772055caf28553fea3cc27555e71fe7c9d32c4534f79902aacfea16bf4531790c4d5aa92fdd489be3c1d9df9434acac9006203666768c947e399169ad8c9d1a2810bc054c548d44a9d7014f0645f03055b5c517aa4ec9620627bcc2bc122cb2cef8cd10f5646b85ef02788fffb2a60dcdb80d3e67d7ce2af8ad07480cf0c510d9dd502a11aba512f02a56e56f38668259ab20bb4e42cf120da3844be615f295ed9b0e3d6d9d1e20959874ccc7e0afb9efbcc71dcbb93b5df9e0da9b1c6a8db623a6e333d1c5828825d883d482f3ba3994aaea374f577484d4eb7f4216d991689277799964c3e2fa128b62c069b75db65e36f5a694f55c29e21657d6da6aa8e0d307c5521ede6a9bab2b92c85cbf76202f2de39ce700629e17c41831a3a98cdc4693324c4fdc1f4745654ab6cb2af318bd3aa1dfa603986972512a87bb4a49bd4aa67eb0493a230d135f57954a4ff619fd63e25715617e97a72374e762e5ce61b3f405e54522faa033e224a4fc9c9e1c4f9f52ac934c128db19b64898836b7fda26d15815da457cce8ebc1d7d5476fa59fc63f69d8f11f538d9c7e8ebf0ce1818e0951495c03752a52443fb2547d2884990637acfe5a432ce8a769ffd97b58d7778893e7b00503d4154f3fe745bc782065577c0046a5593e2d67f5a74b4a53870d6659449a21db24dd56bc05922ce359462753908eea272f50d550031358fbf6f2e787d5a5816d5d7c7ec6e34a2f7448806b1fcb55c3973c2f38e88d7b5f5d77fabf452e2e798f2f0e68c9a17401f186c4ab10e6757fb277982346e819fb6ee4bed4f6ee31069a3b2b4193da06279d82465b8fb9f1754bb5e6dc581bc403ce3d9c02c0918f7a9168c46998dade72dd9844e0493adcde2595601df8d3fa3e15aa59aa488279dbd7f65f9b7b08ce34d347f3d2938bf7ea38c6068a457f64625197b64bcb7bce5645b92a8eeb84c4bf4d47375310fb9815658b421f06ebc4713fe77d56172d1159e0322f512769a27f89269f84b6fbcf7e300c711c973cd81acd520db5719dbbebb84968845d54dfa1ccbd323e11a7976943d8d851a2921b94c2c0f44464c13d9d1abcb7d59217f3b302eba3b9f5439ee0df574e5709d35dd7d597ff739ef180d85bbd14a31d6b713588f222e4f68475930e641a8dbad08b057a83fe4e4475ba5879d5030af3a09f67a1bd2bb47b9be38d308c5173286e44af08709a1badae886c10e6e179a4b4cb4a23ed5b8fafa7a1e208b92cecab4c846b4f242b872c9916fc256b0abac4c3feed46c2e50b89ee8602355a477a13264317e22dfe7292dcb62af75c255e2f8fcf5a8c5f0ba8a2e0ed3cfdececaf764e6a8320f14b3d38661e82b5997d76c40388628d8f86dff2ba7923e7a1dd93eabfa06a6d2b83b50614a0174b28e842f46c7447b06d184d2f5a9ecb3f35e5d7031c61c1335ab693776dab1c83a61d1803f71f34295bd72bf1532b70b9f36421c56b934c9a8a7437a1b55892b4f4a67e3e5f9fc6083aff6b73d5a6da0679250a5a68b5d4bc96587c3990a640c7dbbac6934cfd6e6eb0ab51dec35fe187caba531e07098b5e94a4a39a211d40eaacfb1866628db8f798dbb9d6f3622fa8302fca07200418b22eac90bdce2121111711e68e1f5e75e213df4c7d9218c963cd9e5192eebf6dd20597dbf9caf5204d60abdb54295de0aa38797e2c8451f1e0de287d69f3939d982851cc3a225b8e95c256757a44b1482b75d194780534342825b7764abe319e0ce729cf627c86511a373d489cb8f483a260fe27310e0ed8dd41b32dc258ced5df66a8d3c8eda0d47469c4c15bd7cbaf086aadd79f1f8310a7d5b52403c8684f2b96b1fe5902ad0bb2e9549b9b77eb1c732a1f2b236133889f36113dab166a6d1815f071092fc16f236"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_IE_RIC={0x6a9, 0xb2, "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"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IE_ASSOC_RESP={0x7b6, 0x80, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x164c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20049014) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x60}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x7fb}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x8a9, 0x1}, &(0x7f0000000040)=0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) [ 330.908001][T10886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'bond0\x00', @ifru_flags=0x200}) socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000180)=0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="740800000000000000000000004000000000000050cad9101af4085cb60418d6440001004c0001000f00010059756e6e656c5f6b657900003400028014000500000000000000000000000000000000001c000200010400000000000000000000000000000000010000000400060000000700000000000000000031551fc0cf0e08f01fdd789ceddeaf1ea2b7919e605ff4ed0de3a1"], 0x64}}, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x70a00, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000240)={0x1f, 0xbdf7}) 08:52:15 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x208000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) [ 331.201892][T10896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:15 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 331.585882][T10918] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 331.714841][T10925] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved 08:52:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) tee(r1, r1, 0x8, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000240)={@local, @empty, @val={@val={0x9100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "eb62dc", 0x37, 0x6, 0xff, @private0={0xfc, 0x0, [], 0x1}, @remote, {[@srh={0x2f, 0x1, 0x4, 0x1, 0xfe, 0x40, 0x2, [@private0={0xfc, 0x0, [], 0x1}]}], @payload_conn={{{0x1f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x3, 0x2, 0x20f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x5, 0x7, 0x0, 0x4e20, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x3f, 0x0, 0x200}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mq_open(0x0, 0x0, 0x82, &(0x7f00000001c0)={0x5, 0x887, 0xfffffff8, 0x4}) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000000)="b5", 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x46802) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 08:52:15 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0xfffffffd, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:15 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100)=0xfffff001) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x110004, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000BS0000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc23074cf03711b0b18673f7f008081000001b5b8a727a001c20bd4d7cf0baeb953b83755a087f4c00a0913941d154f805c9f84a44d512ae6f8f65ba8dc30e30e532d113897cb523485f34460c9fa1513fac949a5a3d02b45", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x2, @empty}], 0x1c) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000040)) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) [ 332.189565][ T32] audit: type=1804 audit(1594025536.051:23): pid=10930 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211440261/syzkaller.Kwjt2B/53/bus" dev="sda1" ino=15895 res=1 [ 332.294855][ T32] audit: type=1804 audit(1594025536.101:24): pid=10934 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211440261/syzkaller.Kwjt2B/53/bus" dev="sda1" ino=15895 res=1 [ 332.302825][T10932] IPVS: ftp: loaded support on port[0] = 21 08:52:16 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f6275732c000f00304d6f242efb9f786658c691a18d29712b4ccee08c61079c87e6ee0dab9f68d8789cab57cdfa7ab6f66717c76bd7f87c3ca354b8235449fb4bb8e7ad4e7774187129ce63bdaba7e5cb9121f5fcc88b6190f3d343eaf36eba7245f5f4050425862ef5c5e23ad6d293fbf13c116524b295264b403d582016f4de6021398b7ce8120766630a9b734d61bd3a539a31220d9a5a5bbd9bef86a97cec3a0fc473d7967f0e52c51a2b9cbb02f3f09e3ca8"]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) [ 332.423131][T10939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:16 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 332.688830][T10939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.905793][T10969] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 333.030758][T10967] overlayfs: filesystem on './bus' not supported as upperdir [ 333.040070][T10969] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 333.054829][T10969] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 333.182506][T10969] overlayfs: maximum fs stacking depth exceeded [ 333.587026][T10932] chnl_net:caif_netlink_parms(): no params data found [ 333.827977][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.836452][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.846239][T10932] device bridge_slave_0 entered promiscuous mode [ 333.878314][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.886910][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.896631][T10932] device bridge_slave_1 entered promiscuous mode [ 333.965468][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.987392][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.045055][T10932] team0: Port device team_slave_0 added [ 334.058168][T10932] team0: Port device team_slave_1 added [ 334.112097][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.119312][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.145522][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.168532][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.177972][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.204178][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.313803][T10932] device hsr_slave_0 entered promiscuous mode [ 334.345721][T10932] device hsr_slave_1 entered promiscuous mode [ 334.424099][T10932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.431731][T10932] Cannot create hsr debugfs directory [ 334.778298][T10932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.815422][T10932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.867032][T10932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.915467][T10932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.227786][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.272713][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.282048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.310646][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.348710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.359194][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.368814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.376122][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.408538][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.417872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.428030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.437610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.444964][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.469879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.493127][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.536500][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.548381][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.559119][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.570124][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.608909][T10932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.619556][T10932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.636288][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.646921][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.656803][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.667337][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.677287][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.707190][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.766248][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.774050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.807647][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.001009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.011934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.092681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.102741][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.133023][T10932] device veth0_vlan entered promiscuous mode [ 336.149111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.158661][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.214512][T10932] device veth1_vlan entered promiscuous mode [ 336.301125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.311296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.320959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.330999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.370490][T10932] device veth0_macvtap entered promiscuous mode [ 336.399414][T10932] device veth1_macvtap entered promiscuous mode [ 336.450264][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.460949][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.471758][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.482360][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.492391][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.503010][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.513045][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.523711][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.538143][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.546162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.556652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.565583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.575625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.604976][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.615603][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.625721][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.636335][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.647663][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.658409][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.668400][T10932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.679009][T10932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.693243][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.703400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.714487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.452622][T11184] Unknown ioctl 35298 [ 337.510517][T11184] Unknown ioctl 35298 08:52:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 08:52:21 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xd, &(0x7f0000000040)={r6}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r6, 0x22, "4b23a8bc8eccfdf6ff9f56537f39d7c92faf2f3dfb070f060000007806ed5db8eb57"}, &(0x7f0000000080)=0x2a) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)={r8}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r8, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r8, 0x4, 0xe420, 0xfffffffc, 0x1}, 0x14) 08:52:21 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) syz_mount_image$erofs(0x0, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0, 0x0, 0x800540, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000280)='./bus/file0\x00') open(&(0x7f0000000380)='./file0\x00', 0x501442, 0x0) 08:52:21 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f6275732c000f00304d6f242efb9f786658c691a18d29712b4ccee08c61079c87e6ee0dab9f68d8789cab57cdfa7ab6f66717c76bd7f87c3ca354b8235449fb4bb8e7ad4e7774187129ce63bdaba7e5cb9121f5fcc88b6190f3d343eaf36eba7245f5f4050425862ef5c5e23ad6d293fbf13c116524b295264b403d582016f4de6021398b7ce8120766630a9b734d61bd3a539a31220d9a5a5bbd9bef86a97cec3a0fc473d7967f0e52c51a2b9cbb02f3f09e3ca8"]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) [ 337.809303][T11197] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 08:52:21 executing program 2: prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 338.062016][T11206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 338.187826][T11203] overlayfs: filesystem on './bus' not supported as upperdir 08:52:22 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast1, 0x0}, &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @multicast2}, &(0x7f0000000240)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x2, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf251d0000002400238006000a001f000000060010000600000006000200be00000006001800f7b4000008000300", @ANYRES32=r4, @ANYBLOB="3c00238005001300000000000500110000000000060003006800000006000300ac00000006001800ff00000006001b0008000000050006001f00000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="34002380060003009800000006001800001000000800090029f2000006001b000100000006000200800000000600160017000000240023800500060008000000060019000900000005001d000000000006001b0005000000080001000100000008000300", @ANYRES32=r11, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 08:52:22 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x2, 0x14, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket(0x11, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000108000000000037d51300000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000018001680140001801000060001000080000000000000000008000d0000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000002c0001002cbd7000fbdbdf2500000000329ba2c6812a7345c6b19437e7a08aafd0a95bc4477a2809810df011b28ec8c7e0be3ac744602fa6726b169e747d45c7a3941c6116fd57767d0bc3858419ebc491a4cf25d1aa902451569dc2de015b671608b904b7909aa52a2e728ab24e77b79fc302e11907704d4f1d7a9091b62925a0684772f1a351a2b742cc727d7e5b11d537672e3ec056", @ANYRES32=r2, @ANYBLOB="ffff0000ffff0c000a000400060005001a04000008000b00f7ffffff08000b00020000000d0001006d61746368616c6c0000000004000200"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendto$packet(r1, &(0x7f0000000100)="4225f0914cfb565da51b943c3dd6bcdce0e49c6cba916dcab457dcf9db2d417958ac11d6548aa7b6ea633b86496d8c2f13130aa650ba7a524bcde04be856a1b8f578895086cde25606119d95379c57e0d4489dd49f60b2d853ee484e4c8aeed72d7fc83b08ad8767f3", 0x69, 0x80, &(0x7f0000000000)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @local}, 0x14) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, 0x0, 0x73d000}, 0x20) 08:52:22 executing program 4: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="441300001000050700080000000000e8ff00000030d10a61eea516b9a17de744fda0fbe30dc8ff997c4683e346401b748553160153bd9c1f264d42f47bad5d2d5b5c3ae8cd4c953ddc3e014f7ef5629352e67a28710bda433cfe997219cad9764b8b56bf776362fa53038f8fa31547715e01ac44895c2daad2772e3cec2a93fdcb8815575336ada88536e3eb48574ea7946edd56ef1737a9813fdb02569f256c2ecbc6b3eb56d5a14f75c8a4b5d06ae5e6c48599e96043973ed7c65b5b4c9fc4430e93886239f5b1ff5c486e28f6a3675c0baf966208bee7cd882eefc17c10c4cb36eb", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001e5626f6e64000000001400028005000d000000000005000c0013000000f4517e29a9cec0ca43a92938aca1312401d0bb6c944f68c96d6106fa4ec9d9cb38f67a170d1a6e4a271abccb7b2a47b37f25847ea259b0b7d755c7c9c6a619cd4be316b4d7b56e694ff1d14c6cfc0a2077bdf65df92041101316c07028f7d6b70b43cb9a5e5cac8e1aa9622d7d34827f474f6e3df9c30e627854cf09973bc52c41b4826d0c86b5a4eb753b382a0852d336edcc9a3daf587276e6abb7b7f59f48473949efc208395f7524569a2f8faae6e2cd95981d4bea0ee1f799cf8df3e9e745efffaf006ca700"], 0x44}}, 0x0) 08:52:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000340)="c5baa162a1250bb51a3f6b5c574be66e1de8c82c53dfea14b1a6e5f4470c401158b90dc668b2c93ca9a405a21dc9327230c7ee93ba7d35c688b0e15c425e52688734b0bbd643542f027aaf61d6b31a2758958967b4a87e07d8ec0841ce2d8db684c903f8968822753b18bea8954d28e92300ac9660f60975527838d417c44bd3bc3fa78d118c40f934b22bcbd75a344c1066d9df9066af0f49ee88c3a326e6cc43a879413b8dd063384c1d3e33b0824743679418805c0a01") mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000000)='./file0\x00', 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 08:52:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 338.659037][T11218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.730602][T11221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:22 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002a000511d25a80648c63940d0424fc6004000f000a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 338.942865][T11229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.969146][T11221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.996715][T11231] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.997907][T11228] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 339.024348][T11228] device batadv0 entered promiscuous mode [ 339.034216][T11228] team0: Device macsec1 is up. Set it down before adding it as a team port 08:52:22 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 339.194138][T11228] device batadv0 left promiscuous mode [ 339.215054][T11231] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:23 executing program 4: unshare(0x40000000) r0 = socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x208000, 0x800}, 0x18) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x2e, 0x0, 0x81, 0x0, 0x0, 0x6, 0x68}, 0x8) 08:52:23 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 339.583893][T11245] IPVS: ftp: loaded support on port[0] = 21 08:52:23 executing program 2: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 339.925951][T11222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.942127][T11229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:24 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2e0700ab941330"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x41b8ef0, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time'}}]}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x1f) 08:52:24 executing program 1: socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200003300006af0332ea620c780ffffffff"], 0x2c}}, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b29500000000000000100a000000", @ANYRES32, @ANYBLOB="080008005f526bae1400020000000000000000000000ff"], 0x34}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000000)={0x1, 0x5, 0x9, 0x1, 0x85c8}) 08:52:24 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) openat$ashmem(0xffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80000, 0x0) 08:52:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 340.534783][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x20, &(0x7f0000000140)=0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 08:52:24 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}}) [ 340.812242][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat$zero(0xffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) 08:52:25 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xd43, 0x0, 0xeab, 0x2}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x3}, 0x8) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) set_mempolicy(0x8000, &(0x7f0000000280)=0x5, 0xfffffffd) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) ptrace(0x4208, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_off='xino=off'}]}) [ 341.851386][T11245] IPVS: ftp: loaded support on port[0] = 21 [ 342.864019][ T302] tipc: TX() has been purged, node left! 08:52:26 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9c, 0xa8000) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = openat2(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101801, 0x11, 0xb}, 0x18) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40044146, &(0x7f0000000240)=0xfff) 08:52:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) io_uring_enter(r5, 0x9, 0xe1d8, 0x1, &(0x7f0000000040)={[0x6]}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8384030000000000140012800b2505eb1abdabbc0001006970766c616e00000400028008800500384278c186d08ba5edd352e7091c4b86f13ae9f777f8f770a92fb600d821c66050c024e1ae0914bc09ea831178da09bddf0d1777c89e6a60f60b2b7a1fba560dde1d387cdcddff041ce9ff11f0b8f3b988b67a0f324361f4d7140a94ae89b9ad6d5e171a904749f7f3b08e5e88f1731033a77ed1ad49f212664d7478ffc79b1cbb1d055db6d30f1c4d9981c1772caab878a146df148629a95f8a50060000003ef26fdf786424", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 08:52:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000000c0)={[], [], 0x5c}) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x6, 0x0, 0x7, 0x6, 0x6]}, &(0x7f0000000100)=0xe) 08:52:26 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100c2f570d01ae72feeed055fa7dfad717aad7482044964a116b8d8b19f2c3c1c064b46c2a22a6260a009c95f07be48fefeb5d1d7f133a938247fdb0d83014774113f3945a5b03eddae00181de4536bfaeca71593baf7465a429cd691a49151d3b09aac8faa4094aea04957a95852b831d05706000c99fbf8462fb0832940d7fa7793d2427efcb7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xd, &(0x7f0000000040)={r6}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000002c0)={r6, 0xc0, "6cab5bfdec2b160177c9f99370f48c5279da514ca712718749c1d0e214b53c9d1ef3022c1d7f46a39cbf3b701cddfc11f67bbaecad48fd0806444f27b28bb74b7c5275eba6672e537ea56aae6f0f3346f94e5b3dcafee92378909b8fccab3d665d697004697ec836fc19f0038e1b9dc62a89901ed5e16c324b89612ea6cc717f3951249be6d265835a5dd9b2b2d4a8efaf670164e96545ab4ba13967cfd009a73e388d118ef801e1eba49ff051820bb361c62047d78970bbaabe8594da9f0e2c"}, &(0x7f0000000140)=0xc8) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xb10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x4, 0xe}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 343.139778][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.149517][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 08:52:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) [ 343.249594][T11351] overlayfs: unrecognized mount option "\žwP'ìÎfýy+¿[õÿ›óöÛ" or missing value 08:52:27 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x2004c1, 0x0) r2 = dup2(r0, r1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000080)={'wg2\x00', 0x5}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x7f}, 0x8) 08:52:27 executing program 1: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x8, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0xa8a40) [ 343.465659][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:52:27 executing program 3: socket$xdp(0x2c, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x3}, {0x1d}, {0x6}]}) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) close(r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xd, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r5, 0x1}, 0x8) [ 343.614371][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:52:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) 08:52:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:27 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x4, 0x0, @planes=0x0, 0x0, 0x0, r2}) 08:52:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c00020008002d0002"], 0x3c}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x80002, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="74ef4745d2894efcc0958b114ecf26a2bf3849803cd27d4bd860cf3f9479c771dff07d17c6003235bdd31b58c49f9165931ecaf18279b330a74f331fb703f12a811d361c2000fa4a7290f1c42546167fd033b8711e95c0c1", 0x58) sendmmsg$alg(r1, &(0x7f0000000140), 0x3, 0x0) [ 344.317403][T11386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) 08:52:28 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x8001, 0x69, 0x6a, 0x8, 0x12, "3607659fc9b650ad"}) r3 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:28 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0xbf, {0x8001, 0x26, 0xfffffeff, 0x7f, 0x0, 0x7fff}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001a000511d25a80648c63940d0124fc60100006400a5ccd9009c1a85778153e370a00038003001700d1bd", 0x2e}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = pidfd_getfd(r2, r1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x5) futimesat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r4, r5/1000+60000}}) 08:52:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioperm(0x0, 0x423, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x1, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) openat$vicodec1(0xffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3b, 0x0, "4075d06302cd96124a64dbf063925a80cc6acce492ceab983a3e2938c53ea9276a4a9b8101375ea1b3e4dd7643e537a4b9e62e00258f9a0a01475a336052f45cf3ed9a2fec487ecba3e3b416f7618c88"}, 0xd8) [ 345.370646][T11409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.402592][T11414] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 345.411076][T11414] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 08:52:29 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 345.553154][T11419] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 345.562141][T11419] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 345.742311][T11426] FAULT_INJECTION: forcing a failure. [ 345.742311][T11426] name failslab, interval 1, probability 0, space 0, times 1 [ 345.755320][T11426] CPU: 0 PID: 11426 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 345.764065][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.774202][T11426] Call Trace: [ 345.777600][T11426] dump_stack+0x1c9/0x220 [ 345.782044][T11426] should_fail+0x8b7/0x9e0 [ 345.786570][T11426] __should_failslab+0x1f6/0x290 [ 345.791631][T11426] should_failslab+0x29/0x70 [ 345.796320][T11426] kmem_cache_alloc+0xd0/0xd70 [ 345.801175][T11426] ? kmsan_get_metadata+0x11d/0x180 [ 345.806480][T11426] ? getname_flags+0x12e/0xb00 [ 345.811344][T11426] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 345.817274][T11426] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 345.823440][T11426] ? kmsan_get_metadata+0x11d/0x180 [ 345.828751][T11426] getname_flags+0x12e/0xb00 [ 345.833452][T11426] getname+0x55/0x60 [ 345.837437][T11426] do_sys_openat2+0x7e6/0xe30 [ 345.842229][T11426] __se_compat_sys_openat+0x245/0x2b0 [ 345.847710][T11426] __ia32_compat_sys_openat+0x56/0x70 [ 345.853183][T11426] ? __x32_compat_sys_open+0x70/0x70 [ 345.858571][T11426] do_fast_syscall_32+0x3bf/0x6d0 [ 345.863703][T11426] entry_SYSENTER_compat+0x68/0x77 [ 345.868889][T11426] RIP: 0023:0xf7fb6dd9 [ 345.873059][T11426] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 345.892759][T11426] RSP: 002b:00000000f5db10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 345.901271][T11426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 345.909315][T11426] RDX: 00000000000026e1 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.917372][T11426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.925431][T11426] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 345.933476][T11426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 08:52:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000000)=0x1000) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000019c0)=""/4096, &(0x7f0000000040)=0x1000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700039a00000000000000000000000000000000000000000000000000000200000003000000a0120000000000003011000000000000000000003011000008120000081200000812000008120000081200000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000008113011000000000000000000000000000000000000000030106367726f7570000000000000000000000000000000000000000000000001010000002e2f6367726f75702e6370752f73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000326b32bc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8d90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006800726174656573740000000000000000000000000000000000000000000000626f6e643000000000000000000000006873723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000d80000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028"], 0x1) 08:52:30 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010102}, 0xffffffff, 0x4, 0x8, 0x1}}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) dup(r3) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = openat$autofs(0xffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xa0042, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) getsockname$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = dup2(r0, r6) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)={0x8, 0xa, 0xfffffffffffffe80, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 346.523413][T11433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:30 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x58, 0x40800) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000200)=""/247}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0xc) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x83, &(0x7f00000001c0)={r4}, 0x8) 08:52:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='/dev/vcs#\x00') write$ppp(r3, &(0x7f0000000080)="a01d06335e8202d8c725d654", 0xc) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = accept4$llc(r6, 0x0, &(0x7f0000000180), 0x800) bind(r7, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x7f, 0x2, "edc4f28653599a3b28b0b51968c494b5700683c276b8f1497633a1ca5f7f0755c545b9dfd6592ec085341224c208962322fa7200", 0x2f}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[r1, r4]}, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0) 08:52:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 347.385975][T11455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.435738][T11461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.468237][ T302] tipc: TX() has been purged, node left! [ 347.617160][T11463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @fd}) 08:52:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter}, {0x0, 0x0, 0x0, 0x0, @adapter}]}) 08:52:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000040)={0xa00000, 0x3ff, 0xbe44, r1, 0x0, &(0x7f0000000000)={0x10312, 0x8b1b, [], @value64=0x76f}}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x12}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0604000062d4c466df8f63d0ac81df45169c4986280857c0cf9a9773384572351a33014e81adb5b6d626552cd17199a0743ec558f438c618dce6ccf8b1a6397b0d880a2ba03935c5ae79a0b7874c8c755a8b95bd0a31f25bc0a9d3a5d63bdfa3996eaece6120c6754ddaa84fc9f403e003a3bdf9b183f334", @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf2505000000080006000010000008000600090000001800038014000600fe8000000000000000000000000000bb0800060008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x20004005) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000100)) [ 348.127078][T11476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:32 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x9, 0x800, 0x3, 0x1, 0x5, 0x400, 0x6, 0x8, 0x6, 0x9, 0x3, 0x0, 0x200, 0x4, 0x10, 0x1, {0x8000, 0x674}, 0x0, 0x6}}) [ 348.264443][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:52:32 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 08:52:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0xfffffffa, "0132f026de351abe9ae9add8548b56e285544eca61d8def2e1605ac62b60d42a", 0x401, 0x6, 0x3ff, 0x4, 0x3}) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x5, 0x0, 0x6, 0x8dfb, 0xe0, "a9dfd12014640c080cf430fbd4539fe1d61deaa66967f6818df33e78c41e989b08af47f5608b05618b17a6bde29181860cff24149d6fd19e3ff8b978dc4eaccf2cf5d6d3d69c836bbbc3d5d9010c4a01456a3c37bce08cc4b77a4607ddc342dc40ef267a3835a156371fa78ba7c5db6c2148c220c1b7327c12d28710c0243f7aaca765ae3c13e4ead79b7ae4db309edb2773672db0d650f83f780ed3238428532531dff290d92a79558da8c9a8e621102eba25e4b36215e231353431f333d8845a1c97e543ab748ce59565c4cb282f51a2546e0a06fda3a6e4aa8b3612ed4524"}, 0xe9, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r2, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffe8e}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008040}, 0x4044810) dup(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7fff}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}]}, 0x30}}, 0x44800) 08:52:32 executing program 5: pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="9a822edf82d37248cf63a904c601fa4bb1dd44b8576dee9afe40a1197b9aa7dd16dc6e5f9dff99453b5448d753ea133a2cbdab1de0c401b385da83eaffbd51106282a8276f835776d0a5d49607ebd8bd30de2a6991fee8b1e19156e235e0ee803397e35e1517eee5fff690c4d987", 0x6e}, {&(0x7f0000000080)="79d105816b9326eba99add9fb80758a22e2f5f26f22c2df3af0c3dbba82dc69786dd3175cd928db09626eeb3c1aa232f738051db0c12fd8472126035b0ee045e87e40a2b0bfa8a600c3da5113162927c52ef42ec6256a162276887d40154d9e19860f4aa4da0fd62a6d55171b2abb51f054c27eb6e773ef8b7acfd14c78661d6cf4817a3aa4c16f36396a7a138f27f3452ff528d45ac0c80e36deb50442f7115c2df06b6100a31f1a5ce4ae89e1be1e51918f4f17d7d409676cc3459c91bd9d387886a9f1d01078c55b8516efc8bbec7e2abd21c91f122e50def74d5a679756598f43cf6e23a", 0xe6}, {&(0x7f0000000180)="dcbd8acb58677ecc9a991184e25382d1dc085a335e667ef3d370a661b6435aa776002556991066fc5f6e87dbd810415a44", 0x31}, {&(0x7f00000001c0)="a582e3ddd8d953ad6c930e9d58a93177937b460a4b233806a46644c97a64", 0x1e}, {&(0x7f0000000200)="244e94135ea21eb0e0fd2331ac7406b7f133dbc527676cbf7577c9d519d02b305d7851416e72facc9ae54275ef931b345294d032a21740b8374c0102485cd50eb5d84805ef59d8fa9ec744b5fc6c8689f90f835b0db99186215dce23d2a456313336cd12a7ab6899328402536d3abda05945014dcccfe86d675425caa33bf7cf476bf201afacb74ff161b6d7e8645b27edc9c2f6e2448e93dd3d0b88bca812f8599e39589915a3cb14de86babf1fed1414f79378770f682a0955b736a2bf85170944c385f206ff1ee09324ea57a302107542ed5371703fa7f297a27eca", 0xdd}, {&(0x7f0000000300)="c5cd11193f33888e5eeac444447cfc2e07058b05485dab233c38e23460950a34c4597073dd2120b786f79aacb044e2d510bb31f229769004b0d68de70a343bad9d6b05e04692fa92ab1e11a775d1d884d38ca8b067619e28c04af2803097c0e1cbd87202a76faace68ce73f0b60a06f93e29599ae1fb6cd67e11daa4ebac5a8ae781f38e8718b31ce62e9b74340306e8ae", 0x91}], 0x6, 0x2) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000440)={"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"}) recvfrom$l2tp(r1, &(0x7f0000000840)=""/83, 0x53, 0x40000003, &(0x7f00000008c0)={0x2, 0x0, @dev}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940)='nl80211\x00') getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000801) socket$netlink(0x10, 0x3, 0x4) r5 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000c00)='/proc/capi/capi20ncci\x00', 0x402800, 0x0) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000c40)={0x7f, 0xd0, 0x5}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x1b}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x10800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2d) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000e00)={0x9, 0xe5, 0x2, 0x5497, 0x40}) openat$mice(0xffffff9c, &(0x7f0000000e40)='/dev/input/mice\x00', 0x80000) r7 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000e80)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000f40)={0x980000, 0x7f, 0x7fffffff, r1, 0x0, &(0x7f0000000f00)={0x980918, 0x5, [], @p_u8=&(0x7f0000000ec0)=0x3f}}) capset(&(0x7f0000000f80)={0x19980330}, &(0x7f0000000fc0)={0x4, 0x8, 0x0, 0x4, 0x40, 0x3f}) [ 348.868899][T11507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 08:52:32 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) dup2(r0, r6) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @offset=0x8}) [ 348.994313][T11514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.050698][T11517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000240)={0xffffffff, 0x0, 0x4, 0x1, 0x5, {}, {0x1, 0x8, 0x0, 0x7, 0x6, 0x33, "0231be9c"}, 0x7, 0x4, @userptr=0xff, 0x1390, 0x0, r4}) r5 = openat$dlm_plock(0xffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$PPPIOCSPASS(r5, 0x40087447, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x9, 0x80, 0x94, 0x7ff}, {0x9, 0x9, 0xff, 0x7fffffff}, {0x9, 0x81, 0x2, 0x6}, {0x40, 0x40, 0x4, 0x191}, {0x8, 0xff, 0x8, 0x6}, {0x2, 0x6, 0xa, 0x6}]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_TXQLEN={0x8}]}, 0x2c}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xd1) accept4(r1, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80, 0x180000) 08:52:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 349.329282][T11523] net_ratelimit: 3 callbacks suppressed [ 349.329319][T11523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.399416][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x5}}, 0x24, 0x0) 08:52:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 349.671586][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.719168][T11523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.743835][T11538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.777587][T11532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getdents64(r3, &(0x7f0000002700)=""/4104, 0x1008) 08:52:34 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r4, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x81) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x401, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x0, 0x40, 0x0, 0x0, 0x40, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0xb99f}) r5 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$VIDIOC_G_EDID(r5, 0xc0245628, &(0x7f0000000140)={0x0, 0x1, 0x1f, [], &(0x7f0000000080)}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, r7, r8) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)='\x00') 08:52:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x80000) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U+', 0x6}, 0x16, 0x1) getsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000200), &(0x7f0000000280)=0x4) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x2}, 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) connect$netrom(r1, &(0x7f0000000480)={{0x3, @bcast, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x13) 08:52:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 350.308542][T11548] IPVS: ftp: loaded support on port[0] = 21 [ 350.467486][T11555] QAT: Invalid ioctl 08:52:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) [ 350.649336][T11555] QAT: Invalid ioctl [ 350.681762][T11589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.323438][T11548] chnl_net:caif_netlink_parms(): no params data found [ 351.590708][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.598074][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.607862][T11548] device bridge_slave_0 entered promiscuous mode [ 351.645555][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.652818][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.662610][T11548] device bridge_slave_1 entered promiscuous mode [ 351.748087][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.815450][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.952154][T11548] team0: Port device team_slave_0 added [ 351.966605][T11548] team0: Port device team_slave_1 added [ 352.023197][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.030460][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.057750][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.092677][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.099991][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.126248][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.270301][T11548] device hsr_slave_0 entered promiscuous mode [ 352.304623][T11548] device hsr_slave_1 entered promiscuous mode [ 352.343996][T11548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.351718][T11548] Cannot create hsr debugfs directory [ 352.576766][T11548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.630752][T11548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.692032][T11548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.750722][T11548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.931589][T11548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.957794][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.967620][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.986492][T11548] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.002218][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.011705][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.021263][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.028649][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.042898][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.060914][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.071639][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.080921][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.088210][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.109792][ T9055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.133241][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.160388][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.170744][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.194278][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.202987][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.214224][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.239783][T11548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.250517][T11548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.266752][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.276204][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.286829][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.296684][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.311756][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.346310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.354117][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.378250][T11548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.483130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.492491][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.541889][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.551752][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.563539][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.575230][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.591803][T11548] device veth0_vlan entered promiscuous mode [ 353.612883][T11548] device veth1_vlan entered promiscuous mode [ 353.665132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.675337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.684488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.693896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.709967][T11548] device veth0_macvtap entered promiscuous mode [ 353.730859][T11548] device veth1_macvtap entered promiscuous mode [ 353.768180][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.778799][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.789140][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.799820][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.809985][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.820666][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.831149][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.841750][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.851809][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 353.862396][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.876307][T11548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.885350][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.895266][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.904728][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.914434][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.937437][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.951363][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.961714][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.972276][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.982376][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 353.992967][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.003039][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 354.013761][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.023870][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 354.034542][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.047324][T11548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.062452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.072800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.431923][T11816] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 08:52:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b314b", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:52:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:38 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r5) r8 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:38 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) flock(r0, 0x6) flock(r0, 0x2) 08:52:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0xfffffffb, 0xd1}) [ 354.774795][T11828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.812863][T11826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.839867][T11834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.877600][T11833] FAT-fs (loop1): bogus number of reserved sectors [ 354.885609][T11833] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 354.895159][T11833] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000040)) [ 355.038537][T11842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.065740][T11833] FAT-fs (loop1): bogus number of reserved sectors [ 355.072430][T11833] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 355.082079][T11833] FAT-fs (loop1): Can't find a valid FAT filesystem [ 355.086293][T11828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:39 executing program 3: 08:52:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009) r1 = socket(0x11, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) bind(r2, &(0x7f0000000180)=@generic={0x10, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="1967511c19ccfacdd665556ed4f5b79b1c83dc4d91302bf8a19de6046a0b7b95fa305a1a0688000a089b86213031d2a411ded3ceac4dd7982eccdf2a96f8ea440a6a6566c1a92d232bc3ec6bbf50c264779d8c1f5e16b5d8deec22749c8ce258eaedfac3aa212acbb991d86eacd3e15982ae2da67881fabd5261c486b7a8c69451a60532", 0x84}, {&(0x7f0000000340)="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", 0x1000}], 0x2, 0x4) r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) write$selinux_attr(r5, &(0x7f0000000040)='system_u:object_r:autofs_device_t:s0\x00', 0xffffff23) 08:52:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:39 executing program 5: 08:52:39 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x300, 0x2) sendmsg$nfc_llcp(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x3, 0x97, 0x81, "b0cd2d85ded4061a2ffb7c811678073fc443250e34ce94f790273fa574eb7c73b620037393e429571a3da0cfbc2bae7f8e123e9d8928e8b4fc44a03bd380ae", 0x2f}, 0x58, &(0x7f00000001c0)=[{&(0x7f0000000100)="6980e514945be843e5ee33620acd5a07e6e3fdfe489add6e3bd8d990196e46dbfb5e31c4b7e359cb64e241becda4bab88369af0f5e7d545e141438a4", 0x3c}, {&(0x7f0000000240)="00c29fe15b36ddaa677ce3f6c92846a30f0bd00167f2d43fa5e23ccf4d0139f5d3eec732629c4b1889cc13a3d3af433fd00099f30f74951f92cc706e811bc021d91241563a76f14a47ae96cd1ffb6532711e83c9cd3c405def644b98d371c3eacf9ecd4f5faef74504eeb9ad7d623e0ef221e5b8f9db7b193e9d87dcf6d5b27e65f3b9fc785516796099c3bab98e07ba7044ca749f8c1f8c15bc4027ad6d29035e341928d47009ed69f918dc02208cf4123b19808cd20218987bb63e71f742d5aca891761f25", 0xc6}, {&(0x7f0000000140)="9f39f7108f119a798bf1cf6c455b8dc652895b34846ad1c49d365180339910ea037321317e325f3c27a04097d01396559ea976c543cbc6c30b6ba2b7f1498856c0080058fdaba82031a25b5195156f0974272b1c08", 0x55}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="680000000100000008000000149038e8cf78275c6f3a4fddabebfdc6342b14305e36fa4e00aeb260d38b3692d67a3eaa37911ea47c02e2aa6d2cb0dad3d333c25446c516806b01620086456e5ac349b594d1f60a943e27d7d7c8d127ef12d0dc34d04ff4839c65d00297daa443820000"], 0x68, 0x20000800}, 0x4000) [ 355.520886][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:39 executing program 3: [ 355.710358][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.763366][T11863] FAT-fs (loop1): bogus number of reserved sectors [ 355.771973][T11863] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 355.781652][T11863] FAT-fs (loop1): Can't find a valid FAT filesystem [ 355.884072][T11867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:39 executing program 5: 08:52:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x3, 0x0, @descriptor}}) 08:52:39 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x1, 0x9, 0x1, 0x6, 0x2, @broadcast}, 0x10) 08:52:40 executing program 3: 08:52:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r8 = socket(0x11, 0x2, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 356.311212][T11882] FAT-fs (loop1): bogus number of reserved sectors [ 356.317988][T11882] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 356.327682][T11882] FAT-fs (loop1): Can't find a valid FAT filesystem [ 356.402392][T11891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:40 executing program 5: 08:52:40 executing program 3: socket$inet(0x2, 0x2, 0x2000000088) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) pipe(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000002cc0), 0x1a3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140), 0xc) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0xc0000}) 08:52:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x26e1, 0x0) 08:52:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) socket(0x11, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:40 executing program 5: [ 357.086272][T11910] FAT-fs (loop1): bogus number of reserved sectors [ 357.093106][T11910] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 357.103019][T11910] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:41 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 357.258126][T11914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:41 executing program 5: 08:52:41 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$snddsp(0xffffffffffffffff, &(0x7f0000000440)="c98efd11818b229fb57ff89f1d850e6a59218c918a45da8363b9f9a769b85d3180ef58262c3d6535dcc84e0d1de6c2bd25eeda1f82755f6edc0e1e24faa3a016334e89557d0e1de012d2e870be873a2ab755f4296f9ded3d9e1e4cd0b515ceaab5631c108df62d7867a4887869ceef5831a7a4bc26cb8ece9356b66b9890840857a039ad44519f14a56e186605b43245896a12106028a1eed209fc7692", 0x9d) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r4, 0x0, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r7, r6) r8 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x2, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x74, 0x0, &(0x7f0000000180)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x8, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x400}, @free_buffer={0x40086303, r8}, @request_death], 0x94, 0x0, &(0x7f0000000240)="c772ce7d06af1d0c115bdd8fbfaa3802cb6f5ee70d43630cb2aa77a1a2302d1fad8c8030973f142f26553408661480ecdc387add8133c6f69f134951c9484b988b4180123a1d4b4ce92cb0cd19313a5d86aa6292ee39e5374943a4a1dd404b069b217228882f628e634447753fb78cbc7ded438e2f1608437168737ff22fcc1119e77ad1826bc72d1e5a75ddcc7d2a52746a8095"}) 08:52:41 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 357.765521][ T32] audit: type=1400 audit(1594025561.621:25): avc: denied { set_context_mgr } for pid=11924 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 08:52:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) socket(0x11, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:41 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp_prespec={0x44, 0x4, 0xf4}]}}, @timestamp}}}}, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) bind(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x0, 0x4, 0x4}}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x3e6c80ecaad2bc81, 0x0) r4 = dup2(r0, r3) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0x4}) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) r6 = openat$vcsa(0xffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x488000, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000300)={0x8000, 0x0, 0x7, 0x5, 0x40}) 08:52:42 executing program 3: 08:52:42 executing program 5: 08:52:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, {0x3, 0x2d, 0x4, 0x84, "37eb1022f4f736936e762a0b8b5ea29392ebb5fab9889f22e3bc3278fa86638a4d23e2b49c86f6e2005a46b8bd1871163cffe16913a58b9b77f9065a752eb265cbb91d8ff5606d626f5238126c408ada726006b90bde7223b3925e7fffca46ee17bc2291f97591118ccf6a751be740c03a666356a5996f401f3436fcc50eabd01726edeb"}}, 0x90) 08:52:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:43 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) prctl$PR_GET_DUMPABLE(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x8, 0x3, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "008000"}, 0x0, 0x0, @planes=0x0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000340)={@fixed={[], 0x10}, 0x0, 0x3, 0x9b3, 0x6, 0x47b, "5f2588a0b61d2b6dc395c9495ba365f0c421902c75bd4d0be90473336b2a311638589213179f46b3f6fb452d7a4852c47dd0ca3639d99f3e243702e012a393c6ad5660566085db9001f1a08cf0afaff71af69046fafd78e1036084d968a79a1182f92cb0477fe464eaf326701f741c6bb53916f983fed3621a1d0ddb03c2e6fc"}) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0x9}}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x1, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@bridge_delneigh={0x34, 0x1d, 0xb04, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x8, 0x81}, [@NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_IFINDEX={0x8}, @NDA_MASTER={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20020000}, 0x20000041) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000240)="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", 0xfe) 08:52:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x6) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 08:52:43 executing program 5: 08:52:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000018001680140001801000062001000080000000000000000008000d0000000000"], 0x40}}, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe4) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x8, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, r5, r6) keyctl$get_persistent(0x16, r2, r7) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:43 executing program 3: creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) 08:52:43 executing program 1: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:43 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000040)="b93110603a58abf998fa26896ac73c130b415152245d6713b3b7a32de7a41a2fc66d156186df4929febce45fcd2c76c16d5eeee18028e9e4e1ccf06e6b9e2af902dc6cc9f65242535c8fe051cac23a", 0x4f) 08:52:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="6f50a51d5d0df4fe40261d790dd52c9111ef35511c501a4238da62") [ 359.720846][T11985] 9pnet: Insufficient options for proto=fd [ 359.787557][T11989] 9pnet: Insufficient options for proto=fd 08:52:43 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) 08:52:43 executing program 3: socketpair(0x22, 0x2, 0x3, 0x0) 08:52:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x78, 0xfffffffffffffff5, 0x6, [{0x1, 0xfffffffffffffc01, 0xc, 0xfffffff9, '/dev/video#\x00'}, {0x2, 0x5dc, 0x8, 0x5, '\\/)#\xb5\xff}/'}, {0x0, 0x0, 0x3, 0x9, '-\'+'}]}, 0x78) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0xff, 0x0, 0x0, 0x80, "c66a6db5"}, 0x8006, 0x0, @planes=0x0}) 08:52:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', 0x0, 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)) 08:52:44 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000000c0)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) dup(0xffffffffffffffff) 08:52:44 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xf7, 0x39, 0xff, 0x6, 0x0, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7f}, 0x140, 0x4, 0x80, 0x5, 0x2, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="210000000300000000000000946f39427f429f7000"/33], 0x21) r3 = socket(0x11, 0x2, 0x0) getdents(r1, &(0x7f0000000180)=""/109, 0x6d) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000100)=0x101, 0x4) 08:52:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:44 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) r3 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', 0x0, 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:44 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07763fb63fc6fa9b083ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4600838efb2f636d66a8e9d6b3f04f65c4d6"], 0x8d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="0f01ca0f72d0ef0f01c966b8020000000f23d00f21f866352000000d0f23f8260f090f20d8080000000f22d8260f09dd3e64f6e10f20c06635000000400f22c0", 0x40}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) ioctl$KVM_NMI(r2, 0xae9a) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 08:52:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) creat(&(0x7f0000000080)='./file0\x00', 0x10) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', 0x0, 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:45 executing program 3: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4) 08:52:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000000c0)={0xa00000, 0x9, 0x1000, r1, 0x0, &(0x7f0000000080)={0x990a91, 0x7, [], @p_u32=&(0x7f0000000040)=0x2}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/51) 08:52:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x10000, &(0x7f0000000040)=[r1, r2]}, 0x2) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000240)=""/21, 0x15}], 0x2, 0xbf3) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0xe000, 0x1, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\b\x00'}, 0x20, 0x0, @planes=0x0}) 08:52:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:46 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa5) 08:52:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:46 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 362.419243][T12099] FAT-fs (loop1): bogus number of reserved sectors [ 362.426209][T12099] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 362.435662][T12099] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:46 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x200001, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x200, 0x2) fcntl$setpipe(r3, 0x407, 0x5) r4 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x8, 0x8001, 0x0, 0x2, 0x6, 0x3, 0x98a, 0x1, 0xc0, 0x2, 0x3, 0x80000001, 0x9, 0x6, 0x3, 0x6, {0x401, 0x7}, 0x5, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, r8, r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r12) mount$fuseblk(&(0x7f0000000280)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x2000022, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="2c726faefedb6bb74576de303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x0000000000001000,allow_other,context=system_u,fowner>', @ANYRESDEC=r12, @ANYBLOB=',dont_appraise,\x00']) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x5, 0x0, 0x0, 0x0, 0x3f, 0x0, "5e37819c"}, 0x0, 0x0, @planes=0x0}) 08:52:46 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0xfffffffd, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x220, 0x0, "020056e77e33f8ac00c639665b42d8756a614ad76143efc1", "67cc09ae9b0205a479c6f185817d54bc8c0d884db0b4000000400000c500"}}}}}}, 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) 08:52:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:46 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x8100, 0x100) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}}, 0x20000080) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x4, {0xde, 0x5, 0x3, 0x9}}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x3, 0x40, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:46 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$unix(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 363.063511][T12122] FAT-fs (loop1): bogus number of reserved sectors [ 363.070390][T12122] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 363.079912][T12122] FAT-fs (loop1): Can't find a valid FAT filesystem [ 363.096384][T12125] net_ratelimit: 3 callbacks suppressed [ 363.096490][T12125] sit: Src spoofed 255.255.255.253/2002::200:56e7:7e33:f8ac -> 224.0.0.1/c6:3966:5b42:d875:6a61:4ad7:6143:efc1 08:52:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1ff, @ipv4={[], [], @local}, 0xcbad067b}], 0x1c) 08:52:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 363.169163][T12125] sit: Src spoofed 255.255.255.253/2002::200:56e7:7e33:f8ac -> 224.0.0.1/c6:3966:5b42:d875:6a61:4ad7:6143:efc1 08:52:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) dup3(r1, r0, 0x0) [ 363.508509][T12137] FAT-fs (loop1): bogus number of reserved sectors [ 363.515977][T12137] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 363.525446][T12137] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:47 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x6) 08:52:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000}) 08:52:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_RATE={0x6}]}, 0x88}}, 0x0) 08:52:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:52:48 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040005}, 0x4040001) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f00000000c0)=0x1) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x26e1, 0x0) [ 364.384134][T12168] FAT-fs (loop1): bogus number of reserved sectors [ 364.390928][T12168] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 364.400323][T12168] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:48 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000000)) [ 364.486605][T12173] lo: Caught tx_queue_len zero misconfig 08:52:48 executing program 5: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast2}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 08:52:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 08:52:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:48 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:48 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="20680bbde184a146f461c81a001504220602da7447b95788feb2b7d3774faa9becb735f40c1446653f677b79460e2ff46677a75ed5a02b831118cf2a75af10ee78278e9b9c5686bb4611afdc90f933123046a090ec737e947f4b8551cb1eb4e3ef3dc98a16282d62f5bd3c99b94e89272e27642252801e1222886c5905eefbdc3994e05f3d25c7339a864969493e88dc9bf0a40000000000", @ANYRES16=r3, @ANYBLOB="04002abd7000fedbdf254c0000000600f700fb1f000018002d80080000001f1814110b0000001f18021500021700"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 08:52:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 365.246871][T12201] FAT-fs (loop1): bogus number of reserved sectors [ 365.253582][T12201] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 365.262946][T12201] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x42cb00, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000640)=0xe4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', r2}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x8000, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:49 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) 08:52:49 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) r4 = getpgrp(r3) move_pages(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000080)=[0x81, 0x9, 0x200, 0x8, 0x6, 0x5], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$misdntimer(0xffffff9c, 0xfffffffffffffffe, 0x424002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r3, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082dbd7000fedbdf2507000000080039000500005e6516fe23a4d87b60557c99cb64000500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 365.769400][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.920819][T12229] FAT-fs (loop1): bogus number of reserved sectors [ 365.928326][T12229] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 365.937590][T12229] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:49 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0xa}) 08:52:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)='o') 08:52:50 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/l2cap\x00') signalfd(r2, &(0x7f0000000040)={[0xffff347c, 0x3]}, 0x8) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:50 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) 08:52:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 366.453540][T12250] FAT-fs (loop1): bogus number of reserved sectors [ 366.460485][T12250] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 366.471545][T12250] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:50 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0) 08:52:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 08:52:50 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 08:52:50 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x80000, 0x80, 0x11}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000214100089222e6853e6b8588744951a27bd7000fcdbdf2508ffffffffffffffff0054000100000008004400", @ANYRES32=r2, @ANYBLOB="080001000100000008004400", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x48009) r5 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:52:50 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = syz_open_procfs(r0, &(0x7f0000000140)='cgroup\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) clock_settime(0x1, &(0x7f0000000040)={0x0, 0x989680}) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80081, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x1, 0x5, 0x9}, 'syz1\x00', 0x41}) 08:52:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x13a8, 0xffffffff, 0x0, 0x1218, 0x1218, 0xffffffff, 0xffffffff, 0x1310, 0x1310, 0x1310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x1, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "63f2"}}, @common=@set={{0x40, 'set\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="4033f38df61d"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1408) 08:52:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x1a0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}, 0x8, 0x7}, 0x0) 08:52:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000180)={0x0, 0x30, 0x0, @thr={&(0x7f0000000040)="52d02b71bb44acd74d28038e31474fbb3b123baf9a7731c94e5ac169cc9a8d88313df759128a86823fa01908fa2e0c9ff77ac824278331a8a640c83f294b3eed6a2b18f867bfd2cdf559b002767020d8c147404e5fab5e266d80812717adb5fa13ef19ab7e87fef4c95ea03620", &(0x7f00000000c0)="cdfa963a4a1a4201e6c8487fbdf0581f8c327a59505e34693687ba3cfb243aab31ecbcc0cb942891e3465a3bff4bad5500df886acf9109a0f8c379b9747c5bd692283568889a9a7e7ae319d520b0eadceca737621d2ebf51c280ae89c6d89f72a5420c8bbd9fbf4347212c605b5a2ba0d13b11038fdde653f89dfde62bb9bd14b851261fc19b3d9e9e91d9dc5448ffd8939731ba31eb362ca76555d26e018258997813b27a"}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 367.311214][T12287] FAT-fs (loop1): bogus number of reserved sectors [ 367.318459][T12287] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 367.330736][T12287] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:51 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x115000, 0x0) 08:52:51 executing program 5: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 08:52:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:51 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x103, 0x2, {0x4, 0x3, 0x3ff, 0x4}}) 08:52:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000001, 0x121180) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') r4 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x23c942, 0x108) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000180)=0xffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r3, 0x2f688245c11c0a37, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB="c4feac54227104a9bc2973385c7bd397250128459872677d59b7f82798f89251f39d1a35a0202f276ac9db92662ab9915cf93db7f4475c6558e03409bcf78a3122eb488838260927df7fe7ec446e960017d3087e95d099c5d9dccb616705efbfb38cb84a15541099e601fdb771ebbcf80c"], 0x1c}}, 0x20090) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x82047504}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x1ec, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffc}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x4}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x184, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdd, 0x2, "1f4de7432670ee99d2fdb7cc06494e7d4129b183b6cad50463191639de59a66b2884d87e9cfb212675c9c512eae7cd93910284f939c75ffcf2944bf0bcf0d30233f2912a232c552336f9bbaec100f6d68ffedb2007e46a92edb038e58afb552f3cd06b235b974a472efde1a3dcea9312ef1d9219c4fa8d839c6ba773799d21bc36e40b8b973dab170da42499030dbb772042e076602fe104ca8dc63cf0ba3fd8029a6932e204b90093a4372e118c6bd315c6d0607f65dbf721699d8cc699ad41c0fcc12be27d30fb35792b68600332a71cb4116aaa54faba66"}, @NL80211_BAND_2GHZ={0x9f, 0x0, "a27c8f2ba8f85b68fe8f8ade699bc8780f35042432a8b9afe89536312ba88883770c9aa20e81792027dd1a0baa01e89af48b9dde3f2be20418c0f70885f8b36cf147e9db195f4c8ec6a00d5174253395ef2b5f93c698e144f50b53b3e01841669cf2d0e4a68ae6ec9c8c211c9af51eba5b78f9526d4e1a45039abba809b9fccbfff8911320c4f3d7e5991f85b0f090f9c347c0e3af4b7aeed1b402"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0x6b}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}]}, 0x1ec}}, 0x400d4) 08:52:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) socket$inet_udp(0x2, 0x2, 0x0) 08:52:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) [ 368.165674][T12320] FAT-fs (loop1): bogus number of reserved sectors [ 368.172318][T12320] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 368.183503][T12320] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:52 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x180, 0x18000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000140)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') [ 368.389783][T12332] hub 9-0:1.0: USB hub found 08:52:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 368.427339][T12332] hub 9-0:1.0: 8 ports detected 08:52:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x11, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:52 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/icmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/56) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000040)=0x9) 08:52:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1) write$P9_RREMOVE(r0, &(0x7f0000000100)={0x7}, 0x7) 08:52:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @reserved="88817826b7e2c066b06f0aa675884d8e35ecacf631cb053b60d608767541d95d"}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.845001][T12346] FAT-fs (loop1): bogus number of reserved sectors [ 368.852096][T12346] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 368.863877][T12346] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/138, &(0x7f0000000040)=0x8a) r3 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r3, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000280)="8b9ced744e4b0ba60aec347042effffb8e3d12e6eb94d8913452857eb61f06f0fdc069eccc327396a14f7778c48e3cb3d79b901c64bb") clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x2000, 0x0, {r7, r8/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\b\x00'}, 0x0, 0x0, @fd=r6, 0x10}) 08:52:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:53 executing program 2: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xd, &(0x7f0000000040)={r6}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, 0x9, 0x413, 0x100000, 0x0, 0x66, 0x8, 0x9}, &(0x7f0000000400)=0x9c) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1091ae4f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa26}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x93b}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xde00}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x8010) 08:52:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x11, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:53 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$unix(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) [ 370.547923][T12383] FAT-fs (loop1): bogus number of reserved sectors [ 370.547989][T12383] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 370.565927][T12383] FAT-fs (loop1): Can't find a valid FAT filesystem [ 370.777384][T12380] hub 9-0:1.0: USB hub found [ 370.784237][T12380] hub 9-0:1.0: 8 ports detected 08:52:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x11, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:55 executing program 2: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/144, 0x90}], 0x2, &(0x7f00000003c0)=""/203, 0xcb}, 0x40}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/3, 0x3}], 0x1, &(0x7f0000003440)=""/183, 0xb7}, 0xe8}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/238, 0xee}], 0x1, &(0x7f0000000840)=""/158, 0x9e}, 0x4}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/142, 0x8e}, {&(0x7f0000000a80)=""/252, 0xfc}], 0x3, &(0x7f0000000bc0)=""/76, 0x4c}, 0x100}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/80, 0x50}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/164, 0xa4}, {&(0x7f0000002f00)=""/7, 0x7}, {&(0x7f0000002f40)=""/62, 0x3e}, {&(0x7f0000002f80)=""/194, 0xc2}, {&(0x7f0000003080)=""/152, 0x98}], 0x9, &(0x7f0000003200)=""/228, 0xe4}, 0x1}], 0x5, 0x10100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 08:52:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {0x0, 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:55 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa03000000aabb86dd609b268c00180000fe8000000000000000000000000000bbfe8000000000000000000000000000000002"], 0x0) 08:52:55 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 371.601353][T12417] FAT-fs (loop1): bogus number of reserved sectors [ 371.610761][T12417] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 371.621794][T12417] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_init1(0x81000) 08:52:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x1e, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000000000000000ef0000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f0000000000004000000000000000000000fca69f0d41ff96032f77bd16a7db5ba0d36997b3a842512c6123ba4c9b4fd101000000f9a77fcb7c5edbd9600e0881ff969c061d2b210780a1b767c75024abfb4c8468eb8e95284a27c296fc61958a42e1d3a2f4b4aaf434b3c8"], 0x5c}}, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x8000, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3d5400006cac86ddb2b6f93329d2383911b1b2af984c0ddc12ea0c4c8158305b8235b5f5cd501b70e8eeeb274c8601b039d9740b3103611df901d8bd3080df51203ab666143359f459a2c953422fb0c4fea288e02047fc98b138d231c5b8da8321483c49ecdd8e79cb75778e45b8bbbe6a498c31250587cc8fb941f525dd7917809530131490028f258cbfb93ffa93933485b425191ed94e27b5814380617f26af81d0caad8b5cdb5b14e13eb471da005eb59cd949648ea1619002d6eebbeb021821c83073ac59282d6c26f8c14a6df672f23d141e4765f6e936781b72e82bb175d68c75fe130edb65bee81ebcf9c7cd2fb00a8fd16bf6cfe0", @ANYRES16=r4, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000ffdbdf250300000006001a004e34000014001f00ff010000000000000000000000000001080019000a00009193fc2fde98e450b178a259ad574c0205001300ae000000050005000100000005002100000000000500060011000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004880}, 0x80) fsetxattr(r1, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='!][\x00', 0x4, 0x2) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:55 executing program 3: symlink(0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f24", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:52:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240), 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:55 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000040)=0x1) r4 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @userptr=0x288}) [ 372.380441][T12448] FAT-fs (loop1): bogus number of reserved sectors [ 372.387383][T12448] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 372.398486][T12448] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000040)=0xba17) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:52:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5d"], 0x1a) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:52:56 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x9, 0x9, 0x81, 0x4, 0xfff, 0x308d, 0x2be, 0x10001, 0x0, 0x10ac, 0x7, 0x41, 0x3, 0x3f, 0x8001, 0x6, 0x80, 0x800, 0x9, 0x8, 0x9, 0x800, 0x8, 0x0, 0x10001, 0x7f, 0x8, 0xba32, 0xffffffff, 0x7fc3, 0x1, 0x40]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) open(&(0x7f0000000080)='./file0\x00', 0x1c3800, 0x635a75be19b55c9b) 08:52:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240), 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 373.092900][T12472] FAT-fs (loop1): bogus number of reserved sectors 08:52:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, r4, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c000000f5f385d4df764ef39fbb3b4a656da66d9f03baae8233d5592fbd04df12e99355cc9c9194ef07de2f485b5276aa04a81ebeffbfa54cd7dfa3b7118a3b51a8749fa003009caebb44b0bf80c1e5a34ed5b799a1499b6206ad90b469385f2bc573109ad98fc055ff0b5f052942a3c5a896c708e2d1456c5b21b2df61e839460aa4830be1aa46503f35cf25", @ANYRES16=r4, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x400804d}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "bf1f13724c168b4b6d4df58bd5b601fc32487fc4a06eed18d1c8e887d41c"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd83}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4044094) [ 373.092948][T12472] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 373.092977][T12472] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240), 0x0, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:57 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x2, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4084}, 0x2048810) [ 373.722398][T12495] FAT-fs (loop1): bogus number of reserved sectors [ 373.729314][T12495] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (383 sectors) [ 373.729984][T12494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.740636][T12495] FAT-fs (loop1): Can't find a valid FAT filesystem [ 373.806569][T12498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.861425][T12500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.066781][T12500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.120626][T12498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:52:59 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) 08:52:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:52:59 executing program 5: connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) socket(0x0, 0x2400000001, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x6, 0x4) 08:52:59 executing program 2: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, &(0x7f0000000100)=""/4096) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0xd1, 0xffffffff, 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1\x00', @link_local}) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x9, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) readv(r2, &(0x7f0000002140)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/52, 0x34}], 0x2) 08:52:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:59 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = dup2(r0, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x1, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048001) [ 375.424875][T12515] FAT-fs (loop1): bogus number of reserved sectors [ 375.431719][T12515] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 375.441138][T12515] FAT-fs (loop1): Can't find a valid FAT filesystem 08:52:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) 08:52:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:52:59 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) [ 376.095264][T12541] FAT-fs (loop1): bogus number of reserved sectors [ 376.102126][T12541] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 376.112380][T12541] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) 08:53:00 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1b, 0x4, 0x8007) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000001080000000000000100000000001a52aded9b9c22be2d06807853dc20981fdb678114b15011fff8d053638547498cc81450612d0f74429de345754101", @ANYRES32=r3, @ANYBLOB="00000000000000008c00168014000180100006000100008000000000000000007400018010000a000000000008000000000000000c00030009000000040000001000060000000080ff7fffff020000000c00040002000000460c000010000200ff7f0000070e0000080000000c000400ff0f00000400000010000b00c4e40000ff010000000000000c000700040000000200000008000d0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x9f8f8fc953ed5497}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r0) sendmsg$AUDIT_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000180)={0x18, 0x0, {0x2, @broadcast, 'xfrm0\x00'}}) openat$proc_capi20ncci(0xffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0xc, 0x800, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r8, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000140)={0x1, 0x5, 0x1, 0x0, 0x400, 0x8, 0x3}) 08:53:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) 08:53:00 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) flock(r2, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}]}, 0x3c}}, 0x0) 08:53:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = accept4(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0xab9e, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 376.853463][T12570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12570 comm=syz-executor.0 [ 376.908097][T12575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=12575 comm=syz-executor.0 08:53:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x0) [ 376.998486][T12576] FAT-fs (loop1): bogus number of reserved sectors [ 377.005326][T12576] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 377.014796][T12576] FAT-fs (loop1): Can't find a valid FAT filesystem [ 377.109175][T12575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12575 comm=syz-executor.0 [ 377.161182][T12586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=12586 comm=syz-executor.0 08:53:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) 08:53:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0xff22, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x18}}], 0x1, 0x0) 08:53:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r3, @ANYBLOB="000000000000005fcdd5a4e1502100180006801400018010000600010000800098e400"], 0x40}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='macvtap0\x00', 0x10) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:01 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0x1, {0x8, 0x9, 0xffffffff, 0x7}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x200, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:01 executing program 5: [ 377.546503][T12591] FAT-fs (loop1): bogus number of reserved sectors [ 377.553176][T12591] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 377.562513][T12591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 377.696652][T12603] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 08:53:01 executing program 3: 08:53:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc080aebe, &(0x7f0000000000)) [ 377.817536][T12605] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 08:53:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:01 executing program 5: 08:53:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:01 executing program 0: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x28000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000080)=0xcd1) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @offset=0xa2c4}) 08:53:02 executing program 3: [ 378.262112][T12620] FAT-fs (loop1): bogus number of reserved sectors [ 378.268922][T12620] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 378.278352][T12620] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc080aebe, &(0x7f0000000000)) 08:53:02 executing program 3: 08:53:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:02 executing program 5: 08:53:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c460000000000000000320000000300030000000000000000003800000000000000f2ff0000000020000200000000fbad000d852565000000000000000300000072ffffff0000"], 0x158) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01d0d700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0xd, &(0x7f0000000040)={r6}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r6, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r7, 0x84, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x95e8, @private2, 0x1}, @in6={0xa, 0x4e23, 0x0, @loopback, 0xfff}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x93}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000200)=0xc) 08:53:02 executing program 0: r0 = socket(0x2a, 0x3, 0x6) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40002000100001080000000000000000967c6c6918e54b59a506f524c540b179392c1bee85f1e83261e08d55844083b9d656416e7f9135f2852e68d9b34576d5fb0838da5c0ef8d5e9d11abc08be69ab8fa5cf4eea76daf3d061ac886e", @ANYRES32=r3, @ANYBLOB="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"], 0x40}}, 0x0) r4 = signalfd4(r1, &(0x7f0000000180)={[0x8, 0x8]}, 0x8, 0x80000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x9, 0x10}, 0xc) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0xfffffffffffffceb) r6 = dup2(r4, r5) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x4, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) prctl$PR_SET_UNALIGN(0x6, 0x1) 08:53:02 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc080aebe, &(0x7f0000000000)) [ 378.880562][T12638] FAT-fs (loop1): bogus number of reserved sectors [ 378.887526][T12638] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 378.896952][T12638] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:02 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:03 executing program 5: 08:53:03 executing program 3: 08:53:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 08:53:03 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000040)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x40, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @userptr}) 08:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) [ 379.590227][T12663] FAT-fs (loop1): bogus number of reserved sectors [ 379.597096][T12663] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 379.606522][T12663] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:03 executing program 5: 08:53:03 executing program 3: 08:53:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='\x00', 0x0, r2) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:03 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x1000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x3ffffffe, 0x0, @planes=0x0}) 08:53:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:04 executing program 5: 08:53:04 executing program 3: [ 380.251448][T12687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.319035][T12688] FAT-fs (loop1): bogus number of reserved sectors [ 380.326165][T12688] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 380.335624][T12688] FAT-fs (loop1): Can't find a valid FAT filesystem [ 380.370675][T12687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:04 executing program 3: 08:53:04 executing program 5: 08:53:04 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x88, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x56}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r1, r2) r4 = socket(0x11, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x4, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x2}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}]}) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x9, 0x400, 0xfd, 0x5, 0x107213f9, 0x40, 0xffff124b}, 0x1c) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) 08:53:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:04 executing program 3: 08:53:04 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_client='access=client'}, {@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@version_9p2000='version=9p2000'}, {@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0xeb1}}], [{@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/dev/video#\x00'}}]}}) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000001c0)={0x8, 'rose0\x00', {'veth1\x00'}, 0x1a84}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x0, 0x1, 0x80, 0x5, 0x3, 0x0, 0x8001, 0x1, 0xff8000}) 08:53:05 executing program 5: [ 381.095196][T12711] FAT-fs (loop1): bogus number of reserved sectors [ 381.101969][T12711] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 381.111530][T12711] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) getsockname$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@remote, @netrom, @null, @remote, @rose, @bcast, @default, @netrom]}, &(0x7f00000000c0)=0xfffffffffffffe73) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x5, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000180)) 08:53:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:05 executing program 3: 08:53:05 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000100)={0xbe, 0x2, 0x6, 0x6, &(0x7f0000000040)=[{0x40, 0x7ff, 0x8, 0x9}, {0x9, 0x9, 0x3ff, 0x1}, {0x7f, 0xff, 0x4, 0x5}, {0x9, 0x0, 0x7580, 0x9}, {0x3, 0x9dd6, 0x7, 0x7}, {0x2, 0x7f, 0x0, 0x7}]}) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) 08:53:05 executing program 5: 08:53:05 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) pipe(&(0x7f00000033c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="000000b3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0xd, &(0x7f0000000040)={r7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000003400)={r7, 0x14be}, &(0x7f0000003440)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003480)={r8, 0x7, 0x2}, 0x10) 08:53:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 381.783311][T12731] FAT-fs (loop1): bogus number of reserved sectors [ 381.790301][T12731] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 381.799775][T12731] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:05 executing program 3: 08:53:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7e1c, 0x38200) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r3 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x26e1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 08:53:05 executing program 5: 08:53:05 executing program 3: 08:53:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:06 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:06 executing program 5: 08:53:06 executing program 3: 08:53:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_buf(r2, 0x0, 0x2c, &(0x7f0000000100)=""/133, &(0x7f00000001c0)=0x85) getdents64(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x7f, 0x1, 'client1\x00', 0x4, "7338d1710ab11ee8", "aa20a683353a74f9b61138ec0bdbd20a59d15bd445e0cb935baee9a2e464b707", 0xbf, 0xffff0000}) [ 382.566297][T12754] FAT-fs (loop1): bogus number of reserved sectors [ 382.572914][T12754] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 382.582633][T12754] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:06 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) msgget(0x2, 0xe) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:06 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:06 executing program 5: 08:53:06 executing program 3: 08:53:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000340)=""/222, 0xde}], 0x2, &(0x7f0000000440)=""/169, 0xa9}, 0x2103) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 383.109680][T12774] FAT-fs (loop1): bogus number of reserved sectors [ 383.116557][T12774] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 383.127516][T12774] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000040)={0x671c, 0x1736, 0x1, 0xfff, 0x1, 0x3de}) 08:53:07 executing program 5: 08:53:07 executing program 3: 08:53:07 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:07 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000000)) write$P9_RLOPEN(r3, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x40, 0x1, 0x2}, 0x1}}, 0x18) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 383.613566][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.777738][T12795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) [ 383.834377][T12797] FAT-fs (loop1): bogus number of reserved sectors [ 383.841116][T12797] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 383.851030][T12797] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:07 executing program 5: 08:53:07 executing program 3: 08:53:07 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000108000000000000000000000000328667aa1f7faf8d030536dd65c5ab67e97f5b5072e420a1d71b3fdc4d50c1b49ebe13130ca30046ba52b70bf7fa950b964d74d18e2764cdfe3abe1924893335abe465df7c67803ad68f3e2fd7b86c74160b2cfbfad4026bd2bf1aecb66a7809444e2102971ac65eb231b157e46cef9f5a0b439649864c8cd75ddcaa45dd6718bfd6aa464015c76a55e34e51aba84445058b2333c141329e20665e9218bc9021478c0114962360ff4829e04abd4d7d0f7a938cdb2c1ec571063141e4fc2e45a38ca9ee32da03719c81ccb803a555b496cf07889e020e737a7bb9b8ebf4958b91", @ANYRES32=r5, @ANYBLOB="000000000000000018001680140001801000060001000080000000000000000008000d0000000000"], 0x40}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(r6, &(0x7f0000000080)=@ipx={0x4, 0x4, 0x1c9, "fb5121b6f995", 0x2}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r8, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:08 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1, 0x40, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:08 executing program 3: [ 384.311834][T12814] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 08:53:08 executing program 5: [ 384.466615][T12819] FAT-fs (loop1): bogus number of reserved sectors [ 384.473337][T12819] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 384.482941][T12819] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:08 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) fdatasync(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 384.647812][T12832] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 08:53:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d", 0x2}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 08:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc080aebe, &(0x7f0000000000)) 08:53:08 executing program 3: 08:53:08 executing program 5: 08:53:08 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$unix(0x1, 0x2, 0x0) listen(r4, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:09 executing program 3: 08:53:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000240)) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r3 = socket(0x8, 0x5, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl(r3, 0x1000, &(0x7f0000000040)="ebe79c59e78f270ebbc5aff3d7d488f52f176149fb3f901517ad0a2a07de51ef29c2a11a3d5b16231a39294e26c1eeddef5c5cfa30f24be01d6bfec42d5a4acc437727ceae189072d9ac605a1259d8db74") [ 385.115536][T12842] FAT-fs (loop1): bogus number of reserved sectors [ 385.122260][T12842] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 385.132212][T12842] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, 0x0) 08:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:09 executing program 5: 08:53:09 executing program 3: 08:53:09 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x800002, 0xa, 0x4, 0x20, 0x0, {0x0, 0xea60}, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x4, @offset=0x4}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) 08:53:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x8, 0x0, 0x7fffffff, 0x401, 'syz1\x00', 0x6}, 0x5, 0x400, 0x2, r2, 0x1, 0x5, 'syz1\x00', &(0x7f0000000080)=['net/dev_snmp6\x00'], 0xe, [], [0x0, 0x800, 0x100, 0x4]}) fremovexattr(r0, &(0x7f0000000040)=@random={'trusted.', 'cgroup.controllers\x00'}) [ 385.782619][T12865] FAT-fs (loop1): bogus number of reserved sectors [ 385.789720][T12865] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:09 executing program 3: 08:53:09 executing program 5: 08:53:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, 0x0) 08:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:10 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {r3, r4/1000+60000}, {0x0, 0xc, 0xfe, 0x0, 0x0, 0x4, "c66a6db5"}, 0x0, 0x0, @userptr=0x3ff}) 08:53:10 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket(0x11, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r2) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000180)="0d7768ff3bc28ed49e2057b47f6cb8d3ff879ead9302eb14b8bc4106611926d648", &(0x7f0000000300)=""/150, &(0x7f00000003c0)="26f78517e9d148e28903288fb1966444abaa6ace1be44c78714be02da1a262b7163e3f2e4ddc473ee72a7f588e33ae88e04f173063cfcf0c0716ac1eae34017856ff8edf4c1c79ccb2f66907fe7c200f9cce", &(0x7f00000001c0)="f296566a24de2afbef6f035cd695891b04a65e0d4a9ffaac2ec0a3388fb5065faa97ee0da2813bf06e706d541cfa3d9fbae5ce0099175983da6e6923f91c", 0x10000000, r3}, 0x38) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="998da2477fd36fa01cd3a9ad3fcfeec84c33d9766733e7bf8e6c2cdd4177abc2f1558fbe29a8db5b5b98e67d4628c3e9344a731c052f2b403999b390f92347d2dabebc4724272314255386a4922966a96633c99b7dd684bb1c50b8ec61742ddd6dc9df60dc5b0bf487771c09cd7606c48078bb11c21424f81768ff9214da4fe48be297c34754fd6587ec760b7fd4a41d725f45ea734347a88f477506e0d39297400563c23c565a45dbeb6b9c25ec13cda2d524ac90af36e68f6c8226ab778cd4099da4e98279a2cbde3236179095a44170170f0ac5aa1a5acb4eff0e5f09a2ab61332973bdd1f950e8fd96a682bb9f5f4f9976de37b0cf", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x88}, 0x1, 0x0, 0x0, 0x651374995767ffd}, 0x1) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 08:53:10 executing program 3: 08:53:10 executing program 5: [ 386.410225][T12886] FAT-fs (loop1): bogus number of reserved sectors [ 386.417483][T12886] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 386.504052][T12894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:10 executing program 3: 08:53:10 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000040)={0xfffffeff, 0x3, 0x1f, {0xffffffff, 0x9}, 0x3, 0x7}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r4 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f0000000500)=""/238, &(0x7f0000000600)=0xee) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="648d9b9000f4a4c99563b3b085bc273edbf12016b1added982cb008d803dc84f43b8cf316275228baeaaa002dfa8103c046fb90cb55999d8674fdc2d7e90663511a13d9271ccb5093b891b60693b0948a1904d5b9c9e4ecf2680c3f6f07320eda4e9aff9923d6baa3d5373397dc07135299aa9b4dae5942830e60b5e936085881529db7db3e9803f0fbe9225d4701099976732d957db1bfc1817baf2d40a5a58c4462ea363cc4c7a92130c16da803508b051daccb76eed101561878c43533bde75ed2399f42d2ff610004f002f6465762f766964656f23000c0062000800"/232], 0x294}, 0x1, 0x0, 0x0, 0x804}, 0x8000) [ 386.667871][T12900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, 0x0) 08:53:10 executing program 5: 08:53:10 executing program 3: 08:53:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000180), &(0x7f00000000c0)=0x4) creat(&(0x7f0000000040)='./file0\x00', 0x40) 08:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 387.212777][T12915] FAT-fs (loop1): bogus number of reserved sectors [ 387.219799][T12915] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:11 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) r3 = dup2(r0, r1) socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:11 executing program 5: 08:53:11 executing program 3: 08:53:11 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, [], 0x1f}, 0x4}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @multicast1}], 0x6c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x8, "621c3c50416b66c338959466158d9c2a740ff7f410753726f7d9262e2229dc15", 0x1, 0x1, 0x8, 0xc00000, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)) 08:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:11 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x10, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:11 executing program 3: 08:53:11 executing program 5: [ 387.896756][T12939] FAT-fs (loop1): bogus number of reserved sectors [ 387.903373][T12939] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)) 08:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:12 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000240)={{0x0, 0x0, 0x80}}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) setuid(0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = getgid() r6 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r12, r10, r11) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc, &(0x7f00000005c0)=[{&(0x7f00000000c0)={0x404, 0x33, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x62, 0x0, 0x0, @u64=0x7}, @nested={0x342, 0x7f, 0x0, 0x1, [@generic="75ed83f215f0268b1918f85cdc9d69dc1f1cf7bfff2b5768cb74c027b7f6f0889368943bc61447a0e6903d82b4d0154431013e8bf703c65c8987462ba8057414e1f04db6eb3e01336b8036729644053934a2451b004751a7d35025a0c3ec40a8964efa1ab5967fb97e006c4c8a", @generic="d778c25fb72002ac2ee643e144cb5c1f4e540b988ea4dfa81d5d32948434c5486ffcba82ddeaae7ee7a29b1a0f445d279297067b2fc3d339f052b53fa7c9461c45c5a2e3a705bc1a164345b8feb7835108e4", @generic="3fd8ec04dc64e21599042437f73099a3a70d8462366d73dc60f3ab94aa2012672403242e3af145d8da4dc56d92ebee223ae7f41a56825b557a346897175af3019bbf8c17ccfbbe77ebfb407946309b1506c44e7d0ece2ace6a8f593e33ee0fc4e0cf8e2850bdc24328777e97cfeb581b119a9ee422105458b8750aadba03574994c1714ceb2217f8f6bcf844afc5775b515590330a503724e28943e75df91d3c8e701dc4fe617674e814a08eced3c3ec6a8b386a3ba5f15f22b0e69838e0c1a6009a1890144c81087e4f8aac541becdd1aff0bb605a1714fc24017ee07a0fe39fb2e18", @generic="5cc456779f3ef0519e58d47173c710cf25f48f9119002f8a126710cd85cfe43a721e386a8197b1643607a416961c29eb77d621a2d5847d706447596fb0b2e77a81ef08de92e71b19ad1749ffaa694edfea5ee7d5c53800f8f430eb3615885faf6de1b5158bfb01bd0b84809038ff4c7925f17f9b02c711e5f907819678a28bb93da9099cdb143d91bbb3127856bb970786a4439235f219f517df9f85f11b09fe79db49cbea6b4529690474b931aba2216fb8256431e6c8a2da6882dd6ea82b672cd58dbfa960df1cf949", @typed={0x74, 0x7c, 0x0, 0x0, @binary="a709230999d7330a71c9a7be5ac27466e2e8d7c4d8c56d5c249fd740f4877c93317af90b062bde4e6a8bed7738b554fc75b93423a1458ba30168ed3c8d4905ff0eed380a0635d78df074345d595d84e16891c28f42326abcfc6b12c67f3e7b57b9d5a349f2dae64c33f34ebd6fab9b6a"}, @generic="f6d756534d0189c64c2f7029ee964971eb82f0fc1f8d87b3a4041b8bdae39ff9ed064c58cd17ad2465071d70cdbfa04a5d6c9414632e8ebef5a4d2faf8aa89a01405f9af10fe959d9cb531853550", @typed={0x8, 0x90, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x17, 0x0, 0x0, @uid}]}, @nested={0x99, 0x40, 0x0, 0x1, [@generic="91f063aea2ab15ea373c3d59cd9128ea3c43b71c5c6834cb34b4a044408dd6db2c3fcf83803ea2419191bbe9b859234456daa128f206bbe8fe62b8fb1bcb318b61520ca34123e50925b56df3562f4f34623681486e41f3fa98b99a3ba2e2c4267854cf9ed04287120b456fc777c32fce35c9569bd1ca0b4604ece7f45e21fbbc2f69f65f75230700376bd09360", @typed={0x8, 0x1b, 0x0, 0x0, @uid}]}, @typed={0x8, 0x95, 0x0, 0x0, @pid}]}, 0x404}, {&(0x7f0000000580)={0x1c, 0x39, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0xa, 0x0, 0x0, @uid}, @typed={0x4, 0x17}]}, 0x1c}], 0x2, &(0x7f00000006c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r1}}}, @cred={{0x18, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x18, 0x1, 0x2, {r6, r8, r11}}}], 0x74, 0x20000004}, 0x0) 08:53:12 executing program 5: 08:53:12 executing program 3: [ 388.517406][T12959] FAT-fs (loop1): bogus number of reserved sectors [ 388.524783][T12959] FAT-fs (loop1): Can't find a valid FAT filesystem 08:53:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) 08:53:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x2ff00, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}, {&(0x7f0000000240)="02", 0x1, 0xd}], 0x0, &(0x7f0000000000)) 08:53:12 executing program 3: 08:53:12 executing program 5: 08:53:12 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) syz_open_procfs(r6, &(0x7f0000000000)='net/snmp6\x00') sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) dup3(r2, r3, 0x80000) 08:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:12 executing program 3: [ 389.095645][T12980] FAT-fs (loop1): bogus number of reserved sectors [ 389.102324][T12980] FAT-fs (loop1): Can't find a valid FAT filesystem [ 389.223839][T12987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {0x2}, 0x5b}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f00000001c0)=0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80488d5}, 0x64000040) 08:53:13 executing program 3: 08:53:13 executing program 5: [ 389.444383][T12987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 389.667606][T13000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.720559][T13002] 8021q: VLANs not supported on lo 08:53:13 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0xfffe, 0x1, 0xbd, 0x80000001}]}) getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000140)={0x990000, 0x9, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c0906, 0x1155, [], @p_u16=&(0x7f0000000040)=0x8000}}) write$6lowpan_control(r4, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) syz_open_pts(0xffffffffffffffff, 0x9c000) 08:53:13 executing program 1: [ 389.860519][T13006] 8021q: VLANs not supported on lo 08:53:13 executing program 3: 08:53:13 executing program 5: 08:53:13 executing program 1: 08:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:14 executing program 3: 08:53:14 executing program 5: 08:53:14 executing program 1: 08:53:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) syz_open_procfs(r1, &(0x7f0000000080)='net/vlan/config\x00') r2 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @identifier="ae94180032f4d464145cdc47572ce46d"}}) r3 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) ptrace$getsig(0x4202, r3, 0x200, &(0x7f00000000c0)) 08:53:14 executing program 3: 08:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:14 executing program 5: 08:53:14 executing program 1: 08:53:15 executing program 5: 08:53:15 executing program 3: 08:53:15 executing program 1: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0xffffff80, 0x178, 0x178, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x50000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@check_relaxed='check=relaxed'}]}) 08:53:15 executing program 3: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x178, 0xffffff80, 0x178, 0x178, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x401}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:53:15 executing program 1: unshare(0x44000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fchdir(r0) 08:53:15 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) r3 = syz_open_procfs(r2, &(0x7f0000000040)='personality\x00') getdents64(r3, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x26e1, 0x0) 08:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 392.002081][T13066] FAT-fs (loop5): bogus number of reserved sectors [ 392.009016][T13066] FAT-fs (loop5): This looks like a DOS 1.x volume; assuming default BPB values 08:53:16 executing program 3: [ 392.196802][T13071] IPVS: ftp: loaded support on port[0] = 21 08:53:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0xc029, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x80, 0x3, 0x4}) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:16 executing program 5: [ 392.664688][T13071] IPVS: ftp: loaded support on port[0] = 21 08:53:16 executing program 3: unshare(0x44000600) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x400000000000, 0x0) 08:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:16 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r2, &(0x7f0000000500), 0x37d, 0x0) [ 393.115248][T13129] IPVS: ftp: loaded support on port[0] = 21 08:53:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:17 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) dup3(r2, r3, 0x0) 08:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:17 executing program 5: setregid(0x0, 0xee01) setregid(0x0, 0x0) syslog(0x2, &(0x7f0000000140)=""/138, 0x8a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) [ 393.728568][ T1538] tipc: TX() has been purged, node left! [ 393.734038][T13129] IPVS: ftp: loaded support on port[0] = 21 08:53:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80000) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8095}, 0x20000409) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) 08:53:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents64(r0, 0x0, 0x18) 08:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:18 executing program 3: setregid(0x0, 0xee01) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') 08:53:18 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x210d80, 0x102) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000200000000000000000000000300000072ffffff000000000000000003"], 0x158) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xd, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r5, 0x54, "5f8cc5d16971be421e268774bdfeab8814bb68f3ad8be40fac93936883c1170844f37af10c00ba5630e1e73d93daf9c0caff32f68919b130080122ad1dc119c6113a951ad39cfa26557f499c5d09f64f9ec9b5fd"}, &(0x7f0000000140)=0x5c) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x26e1, 0x0) 08:53:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540f, 0x0) 08:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:18 executing program 5: clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x178, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00', {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x401}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 08:53:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f0000000180)="0400000900000000060000000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 08:53:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1, 0x0) 08:53:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa0, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1470}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008001}, 0x4050) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0xfffffffa}) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 396.954435][ T1538] tipc: TX() has been purged, node left! 08:53:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x10000}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 397.114177][ T1538] tipc: TX() has been purged, node left! [ 397.240518][T13255] input input5: cannot allocate more than FF_MAX_EFFECTS effects 08:53:21 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010044) 08:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) [ 397.331732][T13257] input input6: cannot allocate more than FF_MAX_EFFECTS effects 08:53:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 08:53:21 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9d, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:53:21 executing program 3: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00090000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 08:53:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x9, 0x10, 0x0, r1}) 08:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0xe9) 08:53:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010044) 08:53:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:22 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x10000) 08:53:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents(r0, 0x0, 0xfffffffffffffd04) 08:53:23 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x300) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 08:53:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_pwait(r3, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) 08:53:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 08:53:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1, 0x0) [ 399.739290][T13324] input: syz1 as /devices/virtual/input/input9 08:53:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) 08:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:24 executing program 1: unshare(0x44000600) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', 0x3}, 0xfffffffffffffda0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 08:53:24 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x5450, 0x0) [ 400.512940][T13347] input: syz1 as /devices/virtual/input/input10 [ 400.670943][T13357] IPVS: ftp: loaded support on port[0] = 21 08:53:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40, 0x0) 08:53:24 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000040)={0x2, 'veth1_to_hsr\x00'}) 08:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, &(0x7f0000000000)) 08:53:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_DEV_SETUP(r1, 0x40045568, 0x0) [ 401.390941][T13357] IPVS: ftp: loaded support on port[0] = 21 08:53:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r8, 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f00000001c0)) keyctl$chown(0x4, r7, r5, r6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, 0x1, {{0x1, 0x1, 0x7, 0x80000000, 0x7, 0xf1, {0x6, 0x4e31, 0x1, 0x4, 0x5, 0x7, 0x360, 0x604, 0x7, 0x3, 0xff, r3, r6, 0x7, 0xec3d}}, {0x0, 0x34}}}, 0xa0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r12, r10, r11) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r12}) [ 401.513912][T13401] input: syz1 as /devices/virtual/input/input11 08:53:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9d, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 08:53:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) 08:53:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x74, 0x0, &(0x7f0000000100)=[@increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x93856a4044423499, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x10b, 0x2}, @flat=@binder={0x73622a85, 0x100a}, @flat=@weak_binder={0x77622a85, 0x1100}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @exit_looper, @request_death={0x400c630e, 0x1}, @request_death, @exit_looper], 0x86, 0x0, &(0x7f0000000180)="23b71c159407b5f45e4cab4602c8988e4ba10283d5c6c29f86ff0f419651507cf8eea3dd400492b7ac7ef7019f1b2a1a6b335172f836648f3eb1a17c189f849e68b59b60cdc957215d481a7cb7a950ad253b4ec8fe7c8588b299e6954edb3d8d85cf99d525f0a2a58265c6746a520e1bd9cf8fcd7f2c501f3155a6deaf640622722a5235707f"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f00000002c0)='stack\x00') 08:53:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 08:53:26 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@netrom, @default, @remote, @remote, @netrom, @remote, @rose, @rose]}, &(0x7f0000000080)=0x48, 0x80000) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000100001080000951d3600"/23, @ANYRES32=r5, @ANYBLOB="000000000000000018001680140001801000060001000080000000000000000008000d0000000000"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x1}, {r1, 0x10}, {r2, 0x3000}, {r0, 0x1000}, {r3, 0x104}, {r6, 0x608}, {r0, 0x8084}], 0x8, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r9, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000040)={0xc, 0x1, 0x3, {0x200, 0x4, 0x5, 0x8}}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r11 = dup2(r0, r10) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f00000000c0)={0x0, 0xb, 0x4, 0x2, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) [ 402.414733][T13445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) [ 402.478883][T13446] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.527786][T13446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x805}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x5}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="24f1a78029", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x68}}, 0x0) [ 402.617662][T13445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.713131][T13449] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.738677][T13455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:26 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) 08:53:26 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x8080024) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000080f2b2e526c9e8c54d2aae576fe69c5e10b229fdbc27d0b09ae6593a24c1b822008c87024071f9f4f3a7add8b3614f04ebc9b3b7eb4e8e7f8377520281468078cebf7694e97ac88480c9830d5985f1fae2bccbdf298fa7f0f9a0628e8b8c00"/113, @ANYRES16=r4, @ANYBLOB="050400000000000000005f000000"], 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001740)={0x0, @multicast2}, &(0x7f0000001780)=0xc) fstatfs(0xffffffffffffffff, &(0x7f0000000280)=""/44) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x2, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x54, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2a0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 402.944023][ T1538] tipc: TX() has been purged, node left! 08:53:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:26 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x400, 0x3, {0x0, 0xea60}, {0x0, 0xd, 0x0, 0x0, 0x80, 0x0, "57746cb8"}, 0x0, 0x2, @fd=r3}) 08:53:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)='<', 0x1) readv(r1, &(0x7f0000002680)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/245, 0xf5}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000002540)=""/177, 0xb1}, {&(0x7f0000002600)=""/67, 0x43}], 0x7) r2 = socket(0x11, 0x4003, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b100050460000000000008000701000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01be657aea8c500000002000000000000020208a371a3f8000400000000000000010000000000000000", 0xb1, 0x0, 0x0, 0x0) dup2(0xffffffffffffff9c, r2) r3 = socket(0x11, 0x4003, 0x0) poll(&(0x7f0000000340)=[{r0, 0x2}, {r3, 0x4}, {0xffffffffffffffff, 0x40}], 0x3, 0x606dca73) syz_emit_ethernet(0xc4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) [ 403.098140][ T1538] tipc: TX() has been purged, node left! 08:53:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)) [ 403.212823][T13468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:27 executing program 5: r0 = msgget$private(0x0, 0x92bb876097d245f0) msgrcv(r0, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0xd3, 0x2, 0x1000) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) msgsnd(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="020000000000000030d00dfe876e8da79ec41593a38051e8670cf5f8e3e800ec4638feb3149aff7f000000000000ca697e5b084ee9d7eec3ccffb83fde27745d16f04d538f47b8288b56c8b7d0979dd398a6841cbf150221c16dc74a7dd0ae8a9f74fd5951dadeeb10dd54c4feadbf152707e2b1927d1ce55b5b1b4a733596ff0beb0afb60fac55f0f76c35f2143a2d7437f02a4d8bbf76cfc6bdac35522f1564778a94bc1cbaeb465c9cf155a81c286bf3ae6a30e57054b536b588eb1a2169cc573dd2fbbf515b0d68925eb7196c12b06056312cdff963fa0250daf712b7ded887db2c0afcfd01943dfe44b458adf1be585c495c63c3b7db782c863d078e063f1f316c439c0b6c2fa1157a47fc5b4eaebdc9da31494ab7b9dd262a7dd3f6e370def253e5fb2b67d89848c44ab9e77a870d13cd8624e6234277b38741c29cdf003cf60e6064c9637b62959e6ea2226e7e5abd2a96558562abaf45833720be3e63a930299105d21f9ffc283088fd76e51"], 0x31, 0x800) 08:53:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:27 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x30000, 0x0) r2 = dup2(r0, r1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000400)={0x2, 0x4, 0xfffffff8}, 0xc) openat$vcs(0xffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x456a00, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r4, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000440)=""/102391) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x22, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r5, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000019440)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000240)) bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) 08:53:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000340)=""/4096) 08:53:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, 0x0) 08:53:27 executing program 5: pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001200)="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", 0x1e4}], 0x1, 0x0) r0 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64, @ANYRES16, @ANYBLOB="73a8fcc309ae3f5e92190ae662ed628e225f71bb8eaa49cbed053faaac253e770edb146c6d4b761518dbeea9e2dd5074408067b8c8828daf9e993b6cdb943e713e000000000000000000"], 0x8, 0x800) msgsnd(r0, &(0x7f00000003c0)=ANY=[], 0x0, 0x800) msgrcv(r0, &(0x7f0000000140)={0x0, ""/145}, 0x99, 0x2, 0x1000) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xc3, 0x0) 08:53:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) dup2(0xffffffffffffffff, r0) 08:53:28 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x3a1ac0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80042407, &(0x7f00000000c0)) 08:53:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/40, 0x28) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r4, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x2, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f0000000040)={0x8, 0x8, 0xffffffff, 0x1ff, 0x1, [0x6, 0x0, 0x5, 0x5451], [0xfffffffd, 0x8001, 0x4, 0x9], [0x2, 0x2b, 0x473a, 0xf02], [0x4, 0x7ff, 0xffc000000, 0x81]}) 08:53:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, 0x0) 08:53:28 executing program 1: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/222) 08:53:28 executing program 5: 08:53:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) dup2(0xffffffffffffffff, r0) [ 404.623892][T13518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:28 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10200, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) [ 404.839325][T13518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:28 executing program 5: 08:53:28 executing program 1: 08:53:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc080aebe, 0x0) 08:53:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) dup2(0xffffffffffffffff, r0) 08:53:29 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0xf9ad, 0x8}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r2) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x5000, 0x5, 0xde87, 0x400, 0x0, [{0xff, 0x6, 0x8, [], 0x3}, {0xff, 0x8, 0x9, [], 0x5}, {0xff, 0x8, 0x40, [], 0x80}, {0x80, 0x2, 0x40, [], 0x2}, {0x0, 0x4, 0x4, [], 0x5}, {0x7, 0x1f, 0x0, [], 0x40}, {0x8, 0x4, 0x5, [], 0xff}, {0xa5, 0x40, 0x33, [], 0xcc}, {0x9, 0x3b, 0x1, [], 0x8}, {0x8, 0x3, 0x0, [], 0x5}, {0x1, 0x7, 0x1, [], 0x8}, {0x1f, 0x6, 0x2, [], 0x4}, {0x40, 0x9, 0x0, [], 0x1}, {0x7, 0x3f, 0x3, [], 0x81}, {0x9, 0x81, 0x1f, [], 0x1}, {0x59, 0x8a, 0x13, [], 0x9}, {0x68, 0x6, 0x81, [], 0x29}, {0x43, 0x40, 0x9, [], 0x3}, {0x8, 0x2, 0x8, [], 0x64}, {0xa, 0x5d, 0x2, [], 0xfe}, {0x1, 0x9, 0x40}, {0xff, 0x7, 0x3, [], 0x60}, {0xee, 0xfe, 0x8, [], 0x8}, {0x5, 0x19, 0x3, [], 0x9}]}}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', 0x400}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:29 executing program 5: 08:53:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:29 executing program 1: 08:53:29 executing program 4: 08:53:29 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r0, r2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0707001f"}, 0x0, 0x0, @planes=0x0}) 08:53:29 executing program 5: [ 405.966720][T13548] bridge0: port 1(bridge_slave_0) entered disabled state 08:53:30 executing program 1: 08:53:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:30 executing program 4: 08:53:30 executing program 5: 08:53:30 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x20}}, 0x800) r3 = dup2(r0, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r4, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000001c0)=0x3) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_snmp6\x00') r1 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x6021c1, 0x0) accept4$x25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0xc0800) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgsnd(r2, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r2, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 08:53:30 executing program 1: 08:53:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:30 executing program 5: 08:53:30 executing program 4: 08:53:30 executing program 1: 08:53:31 executing program 5: 08:53:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f00000002c0)={0x980000, 0x5, 0x713, r3, 0x0, &(0x7f0000000280)={0x9909dc, 0x8c1, [], @p_u32=&(0x7f0000000240)=0x8}}) r7 = dup2(r0, r1) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000300)) ioctl$VIDIOC_G_FBUF(r8, 0x802c560a, &(0x7f0000000040)={0x86, 0x6c88c5b1b06f90df, &(0x7f0000000140)="a11ac0d1e7a0eef8562448cc0fabb17c12e32e091f0088f4ffd3f4fe72c69a7ff6fe2ce6ff051710e8ed1ac8349358b09821440cf7fb3b51b1be6edc8f61bd35fc648b17250272937ce696c0be900886579ff9f9111056b2014da2b89bb6e5aac861be6d92fef1b0272ba232e0d974fdc2cfbafa6a12d776531a938d3c05cc3c0eb1e62a2781df6d1cccd4a356341fc2166aace4962c5934c03e396977", {0x74c1, 0x9, 0x32315659, 0x0, 0x3ff, 0x10001, 0x0, 0x4}}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:31 executing program 4: 08:53:31 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r0, 0xffffffffffffffff) 08:53:31 executing program 2: setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000001c0)={0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9c0906, 0x5, [], @p_u8=&(0x7f0000000100)=0x7f}}) getsockname$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in6=@local}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000440)=0xe4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x154, 0x0, 0xb05, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x44}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8082}, 0x8080) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 407.490635][T13597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:31 executing program 1: 08:53:31 executing program 5: 08:53:31 executing program 4: [ 407.678214][T13600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.837192][T13605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:31 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r0, 0xffffffffffffffff) 08:53:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2c140, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000140)={0x7, @pix={0x0, 0x6, 0x32344d59, 0x2, 0x40, 0x200, 0x0, 0x1f, 0x1, 0x1, 0x1, 0x1}}) 08:53:31 executing program 1: 08:53:32 executing program 5: [ 408.076731][T13606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:32 executing program 4: 08:53:32 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) read(r4, &(0x7f0000000180)=""/100, 0x64) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) [ 408.304384][ T1538] tipc: TX() has been purged, node left! 08:53:32 executing program 2: r0 = gettid() r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) wait4(r1, &(0x7f0000000040), 0x2, &(0x7f0000000080)) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r2 = getpgrp(r0) prctl$PR_SET_UNALIGN(0x6, 0x3) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r3, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:32 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r0, 0xffffffffffffffff) 08:53:32 executing program 5: 08:53:32 executing program 1: 08:53:32 executing program 4: [ 408.734381][T13625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:32 executing program 1: 08:53:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x800}) 08:53:32 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x2, 0x8, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x2, 0x0, @planes=0x0}) 08:53:33 executing program 5: 08:53:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:33 executing program 4: 08:53:33 executing program 1: 08:53:33 executing program 5: 08:53:33 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0xff}, 0x0, 0x2, @planes=0x0, 0x0, 0x0, r3}) 08:53:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:33 executing program 4: 08:53:33 executing program 1: 08:53:34 executing program 5: 08:53:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') ustat(0x3, &(0x7f0000000040)) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:34 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = fcntl$getown(r2, 0x9) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000609010425bd7000fddbdf250c0000000c001700020000000000000008005100", @ANYRES32=r3, @ANYBLOB="add61b0a4e6e46bed7647758d3b26255d9de25ff6837a68dd585f7f6f2c404f554ed39dd0d969dded168385996584ca86dccffc0926ba86aac8333fd1cec4040f49f4f92f14109fdb2032b718ce8f33069b1be2b78eff5f83fc5481923062826f6f754cca8a5a6ad9152584f7115f888ca9642e1607b778cc56c179d9793af8bfc58bed5e4254fec71a605a2f7941a62de90892727f9376e19c80f2b6775fd591eb084d74a696df13bcadca2702a1d7d3200b8bee60b9fefbd495b84a0464a092416a75c6ad773e1f21652873647d87846da3e7542736014e049d160424005ac9e128c7ea36f"], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x40080d4) 08:53:34 executing program 4: 08:53:34 executing program 1: 08:53:34 executing program 5: 08:53:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "44a486", 0x18, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}}, 0x56) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 08:53:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611130000000000095000000000000004ce8bd053e7cc0148e6704bfba491dfcbc41a2ec4ef090df988a8d94f8b8bf55583588e3ab68fdaf27daf212865858cd1ad43a81325673c5c9f781a8910edaf2f3ba852c94b6bc794fb4f77ed784b9a81f78b38899c98f7387633818204c23f5ee23158021a1de3751dc6750df843b9ed836c4492a3dea2ee5770473a8526da53f98b595e8157ff5bae08a56bb3d34a7b66dc812465229487a72aa953fb3a29704a39b1363e29f5bf94bee45ade34713297eac418f72c8317c2b2b2c08e6b4aa42e682f192927d6288df0fb60445d70cc71b46e1e210b9028afc35e2b82e1a7fb2"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:35 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000000005) 08:53:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0xfff}, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000001c0)={0x9, 0x3ff, 0x0, @random="ce49ba2d3a1e", 'ip6_vti0\x00'}) r4 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000814}, 0x20004035) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:35 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffff, 0x84000) 08:53:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x258200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd27, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x400c094) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x26e1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r6, 0x0, 0x0) ioctl$NBD_DO_IT(r6, 0xab03) 08:53:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xffffffff, 0x7ff, @name="b5fe1ee3705caf6448cf670ebf709bf929cccbd63caa7533c22fa0f198ee2b0d"}) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000140)={0x2b03af898abaa195, r0}) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r6, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xbd}, {0x6, 0x11, 0xfe01}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x583}}]}, 0x124}, 0x1, 0x0, 0x0, 0x88800}, 0x20000801) r7 = dup2(r1, r2) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:37 executing program 4: 08:53:37 executing program 5: 08:53:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00') r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:37 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r3 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:37 executing program 1: 08:53:37 executing program 4: semget$private(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30480}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000003c3) 08:53:38 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/114, 0x72) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 08:53:38 executing program 2: r0 = getpgid(0xffffffffffffffff) capget(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x5, 0xfffffd2e, 0x1000, 0x1, 0x7fff, 0x80000000}) r1 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter\x00') openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80000) 08:53:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:38 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) writev(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000040), 0xfffffcc0}, {&(0x7f0000000180)="1db4781dfd3411d649fa1de725c75dcf73aeb85b82582c6f51c9071b40e1fe5bcc1c0cbd7caeeb4ddf7178add2c292427d40c2c97106df898c54c94e", 0x3c, 0x8}, {&(0x7f0000000240)="628f0556009ccdb1a4cc232b76bf3eb2126317bbef18512a92f84f8f13c4f0502bc9b0368ca443e1a8b8fb5051f1cb54a0c6483b53a807b791c9e456ea6979f880f74735901bc943291e1ccee015f6ca294bba63bd3e64c31bb9579b3876162b4d2d2592986d64e18b69a2f78248325db38255f7300e2a0aed434799df1fa234442fa000f45906776f11d943b8b857c75d17f61c562cfa83e1433c3612a64c34f8072a06e65eb3f82eb9eba33888b288778c63b2c3", 0xb5, 0xfffffffffffffff7}, {&(0x7f0000000380)="0792a86dc690f389105dc5851ae455b9cb5202a29a0bc8958f08eb916c54fa2c6261a17d2f508a355b4de260c64a2bf8bec0390cc5e0484c8e6a8a4f02f7c8572a6dd9", 0x43, 0x8}, {&(0x7f0000000400)="e8568d752895320dbd7810935ab50d881ef487efb6f37236feea10b59487d4b531725a7225c837e77c779666ed171ab1fdee74ba34c573700f2b5e5ba303125ea72de8a28b1234c7673183fc9cfba4131c5eeb30c1237362c6a22ea094412e24fafa5df8fb56a2497ed44b02af17c87050cdb2872b84ff48e54ed0689c3b2bcbb3054371f07f4e0baf9cd27f4fae2667a0ffe9d47d6a", 0x96, 0x80000000}, {&(0x7f00000004c0)="7f511583da97230fd0c063fd52913d7995ea8369f902a9e36422a702f0d51b0601a16f18e490fca9e0d3b414ee6e56d62e4cd128944b45c42cf1dffca5b014a0d965449638b63e732c52fc34a2a0f314d339053ccc4208ddf74757efa8e8152e3cf9717190d2c0850bf2feefe79434142cba2b5c46b1454aab2bbaad216aa3b02b7044bce5be2aa12b9181423c24e650dcd1725358cef1e444a4f82681b3cd88925fd0b106fcb105353a80323de53058dbad123b100b2609ea2af636d9fc39c855b8e98117a6806126742ab9ea8fac9258b6f34aed0bc047f2754785818e545aaa1908", 0xe3, 0x2}, {&(0x7f00000006c0)="ab970cbc4443e25c7ce9995c59f9468ca6e408106a786991bf1cb8b59360c19ca84a59b0da92a79a0a6c1f130d3a3a1eee8990ebffa15b215426617b4bdb4017a5fcf921e34510eee5b7b1c4af9ede24035514e3c85c4d9d5eaa6b4c039d8b8908d619fbdc0f24baa981cc4b5c8ba8245a263b89ffa60c02f3f1df04cabb656fd4baa26b1102b65d909228d3d9522d79b88fe370a591dab2d410b1ff7c974c4dc5c675b6f9ac9bbcdd98b711208b43a9c1d2cc728033323c97bd7e518cb21d5069d96ecd413813e261c8795e261fde9814a01cc7fcc640323a8763a63d33c6623a8a908f0ac2e74a", 0xe8, 0xfffffffffffffff5}]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 08:53:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611154000000000095000000000000004ce8bd053e7cc0148e6704bfba491dfcbc41a2ec4ef090df988a8d94f8b8bf55583588e3ab68fdaf27daf212865858cd1ad43a81325673c5c9f781a8910edaf2f3ba852c94b6bc794fb4f77ed784b9a81f78b38899c98f7387633818204c23f5ee23158021a1de3751dc6750df843b9ed836c4492a3dea2ee5770473a8526da53f98b595e8157ff5bae08a56bb3d34a7b66dc812465229487a72aa953fb3a29704a39b1363e29f5bf94bee45ade34713297eac418f72c8317c2b2b2c08e6b4aa42e682f192927d6288df0fb60445d70cc71b46e1e210b9028afc35e2b82e1a7fb2"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:38 executing program 2: r0 = openat$full(0xffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6d}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x30000041}, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:38 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r1, 0xffffffffffffffff], 0x5) getpeername(r1, &(0x7f0000000040)=@generic, &(0x7f0000000140)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r7, 0x301, 0x0, 0x0, {0x8}}, 0x14}}, 0x8004) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x410, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000005) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r9 = dup2(r0, r8) ioctl$VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:38 executing program 4: r0 = mq_open(&(0x7f00000000c0)='0\x00\x00\x00\x00H\x9b\xcc\xc4\xa6` \bw\xfe\xcdZ\xbd\xd6\xaf\xd4n\xb7a\x12\xb0B\xdc\xffs\n=Z \xc7\xf6\xc6\x9c\xcf\x16\x10\xcefHt\x9e$\x90', 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xe0}], 0x1, 0x0, 0x0, 0x0) 08:53:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 415.042670][T13768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) [ 415.212141][T13771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x26e1, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000140)=0x3) 08:53:39 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x1}) r3 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) 08:53:39 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchmod(0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x2, 0x0}) 08:53:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000600)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @mcast1}}}}}}}, 0x56) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 08:53:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1a002, 0x0) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) 08:53:39 executing program 4: openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) fchmod(0xffffffffffffffff, 0xc) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 08:53:39 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = dup2(r1, 0xffffffffffffffff) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r0, r3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r6) getdents64(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x101) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r7, 0x0, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r7}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)={0x2, 'macvlan0\x00', {0x1ff}, 0x2}) [ 416.162717][T13800] md: could not open device unknown-block(8,2). [ 416.171434][T13800] md: md_import_device returned -6 08:53:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:53:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, r0) 08:53:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x1, {0xe4e9, 0x0, 0x9, 0x3, 0x101, 0x2}}) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000280)=[{{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x8) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000007ad06c7d6cf30c7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ff000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a"]) 08:53:40 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x41, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000000005) 08:53:40 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0x1000400, &(0x7f0000000240)={[{@noquota='noquota'}, {@tails_off='tails=off'}, {@noacl='noacl'}, {@grpquota='grpquota'}, {@data_journal='data=journal'}, {@noquota='noquota'}, {@barrier_none='barrier=none'}, {@grpjquota='grpjquota'}], [{@seclabel='seclabel'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/video#\x00'}}, {@obj_type={'obj_type', 0x3d, '.!\''}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_hash='dont_hash'}, {@smackfsdef={'smackfsdef', 0x3d, '!.+//\x9b*'}}, {@hash='hash'}, {@appraise='appraise'}]}) [ 416.781302][T13832] QAT: Invalid ioctl [ 416.826495][T13832] QAT: Invalid ioctl [ 416.884612][T13837] QAT: Invalid ioctl 08:53:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, 0x0) dup2(r1, r0) 08:53:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:41 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x47, 0x4000000000000800, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), 0x0}, 0x20) 08:53:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "00bd9c476f6e51eb006adf88c13d1860bbdf27e1183bfb3ae4b4876e3ed521f017666d94506caffbc12c87241a84f04521f5060c0c9cf9a6bf4f02d4f0e8e382"}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket(0x11, 0x2, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 08:53:41 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x1) 08:53:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, 0x0) dup2(r1, r0) 08:53:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) [ 417.593212][T13854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 08:53:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, 0x0) dup2(r1, r0) 08:53:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "28e4d4", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private1, [@routing={0x2f}], "cd45e09497edd1fc"}}}}}}}}, 0x7a) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 08:53:41 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc810) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c66a6db5"}, 0x0, 0x0, @planes=0x0, 0x0, 0x0, r3}) 08:53:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r1, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x8ac1}) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r2, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0086418, &(0x7f00000000c0)={0x3, 0x401, 0x10001, 0x1007, 0x4, 0x6}) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x110) 08:53:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x1}}]}}]}, 0x84}}, 0x0) 08:53:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(0xffffffffffffffff, r0) 08:53:42 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_create(0x5, &(0x7f0000000040)={0x0, 0x28, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(0xffffffffffffffff, r0) 08:53:42 executing program 2: timer_create(0x7, &(0x7f000049efa0)={0x0, 0x26, 0x4}, &(0x7f0000044000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) [ 419.038689][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:53:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 419.653405][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:53:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x1, 0x5844, 0x4}, 0x40) ppoll(&(0x7f0000000180)=[{r0, 0x309e}], 0x1, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) 08:53:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:53:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(0xffffffffffffffff, r0) 08:53:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x2000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='{@-P%\x00', 0x0, r2) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) 08:53:43 executing program 4: dup(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0x1c, 0x0}}], 0x1, 0x40000) 08:53:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x38, 0x28, 0xf35, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0) [ 420.059716][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:53:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents64(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1c) 08:53:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, 0xffffffffffffffff) [ 420.267667][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 420.297881][T13950] EXT4-fs (loop5): Can't read superblock on 2nd try 08:53:44 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x8, 0x2, 0x0}) 08:53:44 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xa00}], 0x1, 0x0) 08:53:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) write(r0, &(0x7f0000c34fff), 0xffffff0b) 08:53:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, 0xffffffffffffffff) 08:53:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x42, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) 08:53:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4808a800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 08:53:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2c, 0x0, 0xfffffec5}}], 0x40000000000007f, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0xffffff7f) 08:53:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') dup2(r1, 0xffffffffffffffff) 08:53:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2c, 0x0, 0xfffffec5}}], 0x40000000000007f, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0xffffff7f) 08:53:45 executing program 2: 08:53:45 executing program 3: 08:53:45 executing program 1: 08:53:45 executing program 4: 08:53:45 executing program 0: 08:53:46 executing program 5: 08:53:46 executing program 2: 08:53:46 executing program 3: 08:53:46 executing program 4: 08:53:46 executing program 1: 08:53:46 executing program 0: 08:53:46 executing program 2: 08:53:46 executing program 3: 08:53:46 executing program 4: 08:53:46 executing program 1: 08:53:46 executing program 5: 08:53:46 executing program 0: 08:53:46 executing program 2: 08:53:47 executing program 3: 08:53:47 executing program 4: 08:53:47 executing program 1: 08:53:47 executing program 5: 08:53:47 executing program 0: 08:53:47 executing program 2: 08:53:47 executing program 5: 08:53:47 executing program 3: 08:53:47 executing program 4: 08:53:47 executing program 1: 08:53:47 executing program 0: 08:53:47 executing program 2: 08:53:47 executing program 5: 08:53:47 executing program 3: 08:53:47 executing program 4: 08:53:47 executing program 1: 08:53:47 executing program 0: 08:53:48 executing program 2: 08:53:48 executing program 5: 08:53:48 executing program 1: 08:53:48 executing program 4: 08:53:48 executing program 3: 08:53:48 executing program 0: 08:53:48 executing program 2: 08:53:48 executing program 5: 08:53:48 executing program 1: 08:53:48 executing program 3: 08:53:48 executing program 4: 08:53:48 executing program 0: 08:53:48 executing program 2: 08:53:49 executing program 1: 08:53:49 executing program 5: 08:53:49 executing program 4: 08:53:49 executing program 3: 08:53:49 executing program 2: 08:53:49 executing program 0: 08:53:49 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$BLKPG(r0, 0x914, 0x0) 08:53:49 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000080)=""/220, &(0x7f0000000180)=0xfffffeaa) 08:53:49 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(0x0, 0x2, &(0x7f0000000280)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500000000000000}]) perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000640)="457b784d688e2cfe92a793cd98cae07ac308c8be58a1edf039e50c99de88f581ce32ba68f099885fc35ed2280bef9a562d3dbbcab4e6e7777e5f92ac1899b1e992a6d53d4de0dddf831dc81f8234bc42e51ba02c90906035b38e65a9d2aeb019832b6c0cf551a587573e42fc9068b68d04f085a4332977cc365ee8693a2bf33b5c860742dfac13761eefc5cf", 0x8c}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 08:53:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10) 08:53:49 executing program 2: perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000040)) 08:53:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 08:53:49 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) 08:53:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) 08:53:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) 08:53:50 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x80) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) ptrace$pokeuser(0x6, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, [0x73, 0x40a, 0xc83, 0x11a]}) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:53:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r0, 0x5502) 08:53:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a000000000000002001000000000000000000000000000200000000000000000200010000000000000000000000000005000500000000000a"], 0x78}}, 0x0) 08:53:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) 08:53:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x8, 0x7}, 0x0) 08:53:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/145, &(0x7f00000000c0)=0x91) 08:53:50 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB='nodecompose,force,barrier']) 08:53:50 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d}}) 08:53:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@type={'type', 0x3d, "db155f0e"}}, {@creator={'creator', 0x3d, "090376ce"}}, {@codepage={'codepage', 0x3d, 'cp855'}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) [ 427.182132][T14116] IPVS: length: 145 != 24 08:53:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) [ 427.218257][T14118] IPVS: length: 145 != 24 [ 427.290991][T14119] hfsplus: unable to find HFS+ superblock 08:53:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x280, 0x280, 0x130, 0x280, 0x1f8, 0x350, 0x350, 0x1f8, 0x350, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x38c) 08:53:51 executing program 1: syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@broadcast, @local, @val, {@llc={0x4, {@snap={0x0, 0x0, "af", "fdaefd"}}}}}, 0x0) 08:53:51 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000600)='/dev/input/mice\x00', 0x8c000) [ 427.498530][T14126] hfs: unable to parse mount options 08:53:51 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) 08:53:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) alarm(0x100) 08:53:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}, 0x8, 0x7}, 0x0) 08:53:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0) 08:53:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2}, &(0x7f0000000040)=0x8) [ 427.981342][ T32] audit: type=1804 audit(1594025631.841:26): pid=14149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir059565908/syzkaller.fwoa24/146/file0" dev="sda1" ino=16377 res=1 08:53:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="509edad6c96cb03e83f4566871", @ANYRES32], 0x390) 08:53:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000020"], 0x14}}, 0x0) 08:53:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) io_setup(0x3, &(0x7f0000000000)) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500000000000000}]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef) perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000640)="457b784d688e2cfe92a793cd98cae07ac308c8be58a1edf039e50c99de88f581ce32ba68f099885fc35ed2280bef9a562d3dbbcab4e6e7777e5f92ac1899b1e992a6d53d4de0dddf831dc81f8234bc42e51ba02c90906035b38e65a9d2aeb019832b6c0cf551a587573e42fc9068b68d04f085a4332977cc365ee8693a2bf33b5c860742dfac13761eefc5cf5ee6c9b7", 0x90}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 08:53:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 08:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07763fb63fc6fa9b083ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4600838efb2f636d66a8e9d6b3f04f65c4d6e455dcba9194f2ca7e9e0efde8f3ba30c194e209add1b0ad50ffffb558d87157bbbc9e46c1ad59e014ebd734a3c6f22846499352e279e1b971de48a6eacea5a9f716"], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) [ 428.697084][ T32] audit: type=1800 audit(1594025632.561:27): pid=14149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16377 res=0 08:53:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2101000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) socket$nl_route(0x10, 0x3, 0x0) [ 428.886237][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:53:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/14, 0xe}], 0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x72, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2ee2e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f64eb12c07af20200169c864e1d5f8179cba2e431126de0592738cb993815"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:53:52 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') [ 429.055741][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:53:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x2, 0x0, &(0x7f0000000240), 0x0) 08:53:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 08:53:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x16b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000001fc0)=""/4109, 0xf2}, {&(0x7f0000000400)=""/104, 0x316}, {&(0x7f0000000740)=""/73, 0xfe87}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x2, &(0x7f0000000600)=""/190, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 08:53:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 08:53:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCSETS(r0, 0x800455ca, 0x0) 08:53:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 08:53:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) 08:53:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r2, 0x0, 0x0) 08:53:54 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = socket$tipc(0x1e, 0x2, 0x0) dup2(r1, r0) 08:53:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='data']) 08:53:57 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) 08:53:57 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8) 08:53:57 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 08:53:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 08:53:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:53:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 08:53:57 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) 08:53:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x2, 0x1, 0x80b, 0x0, 0x0, {0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4, 0x8}]}, 0x18}}, 0x0) [ 434.048018][T14294] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "data" requires an argument [ 434.048018][T14294] 08:53:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x68000007, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 08:53:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/14, 0xe}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x72, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb40a2ee2e32a3b88aaf3c06f4970e85a63c9a4b0d8b9aad9c9ba4c998db2f64eb12c07af20200169c864e1d5f8179cba2e431126de0592738cb993815"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:53:58 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) [ 434.431952][T14312] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 434.456895][T14315] batman_adv: Cannot find parent device 08:53:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB='nodecompose,force,barrier,context=sysadm_u,fscontext=sysadm_u,p']) 08:53:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/220, &(0x7f0000000180)=0xdc) 08:53:58 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x1c542) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="a35b6e12e9e7e69dedfaef4f7dec9febe476d5db5f860d9bc28fb67a1b353d06b53541d85522638cac6abdfeb6f793b3558abfbdb9089b35670458ab2c9b857dbcc0f2b9c10aec32bf12f130449761ccc23fecd2db911feb63ae7be7275d40954c03ac53a310acf91be367c9d685e1ebca6da111d08237477c8d75cd2214bca92077280beb82a700a522887065edfbaf525359f28f5296c4a26602996d2a10dde39bf4c2b7e72e206c33f20abebafe678df858966462698fd526daf365c2d5034cfca0854c7e402e65bafd68d4cff158c910aed8a9f5e6c9b89d5255f645d1ccfab2e8dc2cc41363a9c0117c7f1b8980d856b4849ed560de05a9bf8d7e6ce3f4") 08:53:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @local}}) 08:53:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x7, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 434.853014][ T32] audit: type=1804 audit(1594025638.711:28): pid=14329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir582691533/syzkaller.HR05vA/128/file0" dev="sda1" ino=16145 res=1 [ 434.893266][T14326] hfsplus: unable to parse mount options 08:53:59 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100753332"], 0x38}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) 08:53:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0xa925}) 08:53:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 08:53:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) [ 435.589931][ T32] audit: type=1800 audit(1594025639.451:29): pid=14329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16145 res=0 08:53:59 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={0x14, r0, 0xc573de0d27bdfe6f}, 0x14}}, 0x0) [ 435.798140][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.955891][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 08:54:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r2, r2}, &(0x7f0000000600)=""/243, 0x3e0, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-generic\x00\x00\x00\x0f\x00\x00\x00yQ\xc56\x9f\x00'}}) 08:54:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004300)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr={{0x18}}], 0x18}}], 0x1, 0x0) 08:54:01 executing program 1: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 08:54:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0xffffffff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x2, 0x0, @ioapic}) 08:54:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x100, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'virt_wifi0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x408) 08:54:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/127) 08:54:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setresuid(r3, 0x0, r5) 08:54:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[], 0x1000001bd) 08:54:01 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)) 08:54:01 executing program 3: r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) 08:54:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$netlink(r0, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)=[@rights={{0x10}}], 0x10}, 0x0) 08:54:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000002c0)=0x80000000, 0x4) 08:54:02 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)) 08:54:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r1, 0x31905e13403123b7, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 08:54:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x40086604, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) 08:54:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) ftruncate(r3, 0x1000000) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x3, &(0x7f0000000000)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r6, 0x2, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500000000000000}]) io_submit(r4, 0x5, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x500000000000000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f00000000c0)="d80bb0485c3ee9adb93ef40e7a1e8d988a9a903f41da9a8f99b3b04bd5d8d90afdd3a658a7f441f0952c81609e6e7bfadcf343b2bf13e50d1dc7a0d119a07a68aa8b5ea11fc69bcabc44005ccc4c589b5d67b40ba354c0dfb1", 0x59, 0xffffffff, 0x0, 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="f3aaf73cbb69d081451e1e5e424049af5f3954edb6d5193888d3b2a20be1c5f267826d832894cb6d75920fcb5f755b740503109e7546d31621a23811027cae87028cf0bfe0440d8ba9fcc452c5bbb787d1ba4a93e5ea3529dcd6b8c2f5d49608f7d02b3222ccc6a7489705bb7a88e090d75c86ccfa5a5e82ae310758dc9eeb57efe691023cd1a9c107537ec46e1e4b20267eb5574db2e34dd4dbd53ad8e976e88e9f23ee4f5a374dbf0adfbce053ea782f953641b3f70f30b94941617ceb2fac281d01ee816369d3f6c45f4dfa88030575b320a21b9c1e74850882ff6a981d048b577a441fc89afc8a5dd012b9ca77e3b7", 0xf1, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="38e7170d0e2d7aaaba320ddf5ac2f407829edae79c080d5c1d36b95547948aae64e067412da12fbd09f1b006226fb41fd0e813f38e229277056e5bf7e34d5198b6b8abaf6803da5b3a33075cc5b0bb76ce7c73eedfbd5b2d07651f6c7cfc0dc4ae4895aeca501f1fb92d7a959f96fcd3bb3451442aaf84f682fd73a31a7b0d20933316754525463febab980055171b22b982e4aa61621d95ba07b5f2efe076440aeb24ffae3c7a97b75393af5cec08ff5227be3aee37946a9acaca1c6f8e891a90b9b42d99ab526aeb9395", 0xcb, 0x4, 0x0, 0x1}]) sendfile(r5, r3, 0x0, 0xeefffdef) r8 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) writev(r9, &(0x7f0000000880)=[{&(0x7f0000000640)="457b784d688e2cfe92a793cd98cae07ac308c8be58a1edf039e50c99de88f581ce32ba68f099885fc35ed2280bef9a562d3dbbcab4e6e7777e5f92ac1899b1e992a6d53d4de0dddf831dc81f8234bc42e51ba02c90906035b38e65a9d2aeb019832b6c0cf551a587573e42fc9068b68d04f085a4332977cc365ee8693a2bf33b5c860742dfac13761eefc5cf5ee6c9b7", 0x90}], 0x1) perf_event_open(0x0, 0x0, 0x2, r8, 0x0) fcntl$dupfd(r2, 0x0, r0) 08:54:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x7, {{0x2, 0x4e22, @remote}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b) 08:54:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x40086604, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000009740)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d464419e5b2fc70b72c0bb8e90f61cc4e6f3fe2d1dee18f638ac947b5e01803287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6b652b1673773ae3cab8d7674c6c4dca2f1b4d745fd95c41f9d441d42f49db6d4a4762e5cc23dfc1adafd1e5a3e7f2e888961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba3973aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13df15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66809af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb00200000000000000c60fca2e2981b22d08f874e0a9cb6fca78d6f1b18fe380df4bf024f120bd715d82033f2fb7d8fc9e0d773294e097e293db58993c0024ab2fd8e5e7003af92d11de48e8b4d32972cba6f49051cec1bf6f16231bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde24f18e4bf7156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f088925e872ef8b4f31e6f57ba631baa729031aae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4d6fd6741fce0834c65c5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf083de3b4ab6368e95dd4fdf6710cd4a79651dc3e1e056c3ecd6b51f30663cc256094c840662e09ab831b7bae9aec6d7259250016795cf91f12dbb72fc321c3dfb5f9181529906b43f9d6b8ce9fad13e1085cafd41183908173e16e40037681835aa080f34b87bba0be276340295062f671e933292e32036cbd03f9a4cd660a94374b013e9f32a6bfb65417b537cd8f67f975358140384a1ca0537fd3a2a2c37006e4b30ffe469bba4251aa3ba4626acd810000000000000000ee37c63f7f295579f542b12f248f4b6ba14448abab540fb7d98a081f3d3c946455d61734855005bcc876bd15a76dd552f9bfeb091a4e82a5d11033e528b133103f5592d5684a57dd70556818ea30e03dc2a6eb69423e4f27034351809da4e5002aa346d4d3e0e2a5a9ba1130b4fe983fc344c1de9f536cff06187599523cbddcd8ffc2d11d5db7712be71c0d74a5ae4e8ff6e65238bb23ea2a979d3e8ab83857a1607dc612f0d84492279bba5ec6c5cea6af9d6a667b5ff7cd594ebccd6db3bfbefe923bbf983d0ef0d7f6450221cbb615b30aa0634df0ffd78208512270c03e1f7c579c19017ad56755a048"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 08:54:02 executing program 1: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x8c, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 08:54:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r0, 0x5413, 0x0) 08:54:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 08:54:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:54:03 executing program 1: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r0}) 08:54:03 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:54:03 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200a80, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:54:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)=0xd2) 08:54:04 executing program 2: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='4~8', @ANYRES16, @ANYBLOB="6f6d216c7fb5c4d0840003000040580001800d0001007564"], 0x3}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) select(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 08:54:04 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000001c0)=""/238, 0xee}], 0x2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000000)=""/93, 0x5d}, {0x0}, {&(0x7f00000002c0)=""/49, 0x31}], 0x4, 0x0) 08:54:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 08:54:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') socket$l2tp6(0xa, 0x2, 0x73) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) signalfd4(r2, &(0x7f0000000140)={[0x40]}, 0x8, 0x80000) symlinkat(&(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 08:54:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xc442, 0x0) 08:54:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) [ 440.880639][T14523] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, and O_DIRECT support! [ 440.881800][T14522] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 440.910416][T14523] EXT4-fs (loop2): Can't read superblock on 2nd try [ 440.910474][T14522] device batadv0 entered promiscuous mode [ 440.926943][T14522] team0: Device macsec1 is up. Set it down before adding it as a team port 08:54:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000080085, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) creat(0x0, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 08:54:04 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 441.008124][T14530] EXT4-fs (loop2): Can't read superblock on 2nd try 08:54:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@fat=@umask={'umask'}}, {@fat=@check_normal='check=normal'}]}) 08:54:05 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 08:54:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x1e, &(0x7f0000000040)={r2}, 0x10) [ 441.325336][T14522] device batadv0 left promiscuous mode [ 441.387753][T14547] FAT-fs (loop5): bogus number of reserved sectors [ 441.394559][T14547] FAT-fs (loop5): Can't find a valid FAT filesystem [ 441.459766][T14547] FAT-fs (loop5): bogus number of reserved sectors [ 441.466647][T14547] FAT-fs (loop5): Can't find a valid FAT filesystem 08:54:05 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 08:54:05 executing program 0: socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[], 0x0, 0x0, 0x5}) 08:54:05 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000140), 0x4) 08:54:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0xb, 0xf0}, {0x13, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 442.252192][T14562] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 442.269609][T14562] device batadv0 entered promiscuous mode [ 442.279259][T14562] team0: Device macsec1 is up. Set it down before adding it as a team port [ 442.545274][T14588] ===================================================== [ 442.552273][T14588] BUG: KMSAN: uninit-value in __tipc_nl_compat_dumpit+0x583/0x1290 [ 442.560174][T14588] CPU: 0 PID: 14588 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 442.568843][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.578892][T14588] Call Trace: [ 442.582205][T14588] dump_stack+0x1c9/0x220 [ 442.586569][T14588] kmsan_report+0xf7/0x1e0 [ 442.590996][T14588] __msan_warning+0x58/0xa0 [ 442.598471][T14588] __tipc_nl_compat_dumpit+0x583/0x1290 [ 442.604037][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 442.609847][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 442.615086][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 442.620294][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 442.626129][T14588] ? __alloc_skb+0x762/0xac0 [ 442.630754][T14588] tipc_nl_compat_dumpit+0x761/0x910 [ 442.636066][T14588] tipc_nl_compat_recv+0x1382/0x2940 [ 442.641367][T14588] ? kmsan_get_metadata+0x4f/0x180 [ 442.646504][T14588] ? tipc_nl_node_reset_link_stats+0x600/0x600 [ 442.652664][T14588] ? tipc_nl_compat_bearer_disable+0x4b0/0x4b0 [ 442.658834][T14588] ? tipc_netlink_compat_stop+0x40/0x40 [ 442.664390][T14588] genl_rcv_msg+0x20dc/0x2480 [ 442.669122][T14588] netlink_rcv_skb+0x451/0x650 [ 442.673919][T14588] ? genl_unbind+0x380/0x380 [ 442.678535][T14588] genl_rcv+0x63/0x80 [ 442.682529][T14588] netlink_unicast+0xf9e/0x1100 [ 442.687397][T14588] ? genl_pernet_exit+0x90/0x90 [ 442.692271][T14588] netlink_sendmsg+0x1246/0x14d0 [ 442.697245][T14588] ? netlink_getsockopt+0x1440/0x1440 [ 442.702627][T14588] ____sys_sendmsg+0x12b6/0x1350 [ 442.707616][T14588] __sys_sendmsg+0x623/0x750 [ 442.712245][T14588] ? kmsan_copy_to_user+0x81/0x90 [ 442.717276][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 442.722481][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 442.727695][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 442.733510][T14588] ? call_function_single_interrupt+0xa/0x40 [ 442.739512][T14588] ? kmsan_get_metadata+0x4f/0x180 [ 442.744642][T14588] __se_compat_sys_sendmsg+0xa7/0xc0 [ 442.749946][T14588] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 442.755416][T14588] ? compat_mc_getsockopt+0x15a0/0x15a0 [ 442.760973][T14588] do_fast_syscall_32+0x3bf/0x6d0 [ 442.766024][T14588] entry_SYSENTER_compat+0x68/0x77 [ 442.771135][T14588] RIP: 0023:0xf7fb6dd9 [ 442.775209][T14588] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 442.794817][T14588] RSP: 002b:00000000f5db10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 442.803237][T14588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 442.811210][T14588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.819182][T14588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.827152][T14588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 442.835122][T14588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.843111][T14588] [ 442.845431][T14588] Uninit was created at: [ 442.849683][T14588] kmsan_internal_poison_shadow+0x66/0xd0 [ 442.855400][T14588] kmsan_slab_alloc+0x8a/0xe0 [ 442.860076][T14588] __kmalloc_node_track_caller+0xb40/0x1200 [ 442.865967][T14588] __alloc_skb+0x2fd/0xac0 [ 442.870384][T14588] tipc_nl_compat_dumpit+0x6e4/0x910 [ 442.875675][T14588] tipc_nl_compat_recv+0x1382/0x2940 [ 442.880962][T14588] genl_rcv_msg+0x20dc/0x2480 [ 442.885641][T14588] netlink_rcv_skb+0x451/0x650 [ 442.890404][T14588] genl_rcv+0x63/0x80 [ 442.894389][T14588] netlink_unicast+0xf9e/0x1100 [ 442.899238][T14588] netlink_sendmsg+0x1246/0x14d0 [ 442.904180][T14588] ____sys_sendmsg+0x12b6/0x1350 [ 442.909116][T14588] __sys_sendmsg+0x623/0x750 [ 442.913708][T14588] __se_compat_sys_sendmsg+0xa7/0xc0 [ 442.918994][T14588] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 442.924454][T14588] do_fast_syscall_32+0x3bf/0x6d0 [ 442.929477][T14588] entry_SYSENTER_compat+0x68/0x77 [ 442.934579][T14588] ===================================================== [ 442.941502][T14588] Disabling lock debugging due to kernel taint [ 442.947649][T14588] Kernel panic - not syncing: panic_on_warn set ... [ 442.954242][T14588] CPU: 0 PID: 14588 Comm: syz-executor.2 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 442.964293][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.974346][T14588] Call Trace: [ 442.977648][T14588] dump_stack+0x1c9/0x220 [ 442.981993][T14588] panic+0x3d5/0xc3e [ 442.985934][T14588] kmsan_report+0x1df/0x1e0 [ 442.990447][T14588] __msan_warning+0x58/0xa0 [ 442.994962][T14588] __tipc_nl_compat_dumpit+0x583/0x1290 [ 443.000513][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.006323][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 443.011534][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 443.016738][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.022550][T14588] ? __alloc_skb+0x762/0xac0 [ 443.027170][T14588] tipc_nl_compat_dumpit+0x761/0x910 [ 443.032477][T14588] tipc_nl_compat_recv+0x1382/0x2940 [ 443.037781][T14588] ? kmsan_get_metadata+0x4f/0x180 [ 443.042911][T14588] ? tipc_nl_node_reset_link_stats+0x600/0x600 [ 443.049075][T14588] ? tipc_nl_compat_bearer_disable+0x4b0/0x4b0 [ 443.055234][T14588] ? tipc_netlink_compat_stop+0x40/0x40 [ 443.060784][T14588] genl_rcv_msg+0x20dc/0x2480 [ 443.065525][T14588] netlink_rcv_skb+0x451/0x650 [ 443.070297][T14588] ? genl_unbind+0x380/0x380 [ 443.074909][T14588] genl_rcv+0x63/0x80 [ 443.078901][T14588] netlink_unicast+0xf9e/0x1100 [ 443.083765][T14588] ? genl_pernet_exit+0x90/0x90 [ 443.088635][T14588] netlink_sendmsg+0x1246/0x14d0 [ 443.093623][T14588] ? netlink_getsockopt+0x1440/0x1440 [ 443.099007][T14588] ____sys_sendmsg+0x12b6/0x1350 [ 443.103984][T14588] __sys_sendmsg+0x623/0x750 [ 443.108613][T14588] ? kmsan_copy_to_user+0x81/0x90 [ 443.113638][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 443.118843][T14588] ? kmsan_get_metadata+0x11d/0x180 [ 443.124050][T14588] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 443.129867][T14588] ? call_function_single_interrupt+0xa/0x40 [ 443.135859][T14588] ? kmsan_get_metadata+0x4f/0x180 [ 443.141000][T14588] __se_compat_sys_sendmsg+0xa7/0xc0 [ 443.146306][T14588] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 443.151770][T14588] ? compat_mc_getsockopt+0x15a0/0x15a0 [ 443.157324][T14588] do_fast_syscall_32+0x3bf/0x6d0 [ 443.162365][T14588] entry_SYSENTER_compat+0x68/0x77 [ 443.167475][T14588] RIP: 0023:0xf7fb6dd9 [ 443.171547][T14588] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 443.191156][T14588] RSP: 002b:00000000f5db10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 443.199572][T14588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 443.207545][T14588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.215518][T14588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.223503][T14588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 443.231472][T14588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.240544][T14588] Kernel Offset: 0x5200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 443.252072][T14588] Rebooting in 86400 seconds..