[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts. 2020/07/07 18:43:42 fuzzer started 2020/07/07 18:43:42 dialing manager at 10.128.0.26:45977 2020/07/07 18:43:42 syscalls: 3123 2020/07/07 18:43:42 code coverage: enabled 2020/07/07 18:43:42 comparison tracing: enabled 2020/07/07 18:43:42 extra coverage: enabled 2020/07/07 18:43:42 setuid sandbox: enabled 2020/07/07 18:43:42 namespace sandbox: enabled 2020/07/07 18:43:42 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/07 18:43:42 fault injection: enabled 2020/07/07 18:43:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/07 18:43:42 net packet injection: enabled 2020/07/07 18:43:42 net device setup: enabled 2020/07/07 18:43:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/07 18:43:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/07 18:43:42 USB emulation: enabled 18:47:00 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000040)={{0x3, @name="3aeee34c3d9430709834828810ccf376d593280c7a0878acdc0567538f3ce196"}, "c41c7fd95bbce577846ce712f57181fc1e7be6c6f3b74a4f8dc7c0ec69796402", 0x1}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x141400, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200200, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x4002, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x20880, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qrtr-tun\x00', 0x20000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x100, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000340)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r1, r8, r9, r3], 0x9) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000380)={'bridge0\x00', {0x2, 0x4e22, @multicast2}}) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r10, 0x40e, &(0x7f00000003c0)=0x2) r11 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x5, 0x98000) ioctl$KVM_SET_XCRS(r11, 0x4188aea7, &(0x7f0000000440)={0x1, 0x401, [{0x3, 0x0, 0x7}]}) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x113080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r12, 0x40505330, &(0x7f00000004c0)={{0x2, 0x5}, {0x6, 0xff}, 0x4, 0x2, 0x8}) syzkaller login: [ 256.338627][ T6809] IPVS: ftp: loaded support on port[0] = 21 18:47:01 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x840, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffffffc1, 0x100) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[{}], 0x8, 0x0, [], 0x2, 0x1}) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000140)=0x80000001, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$dupfd(0xffffffffffffffff, 0xeadb879b1ddfc92a, r2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000008c0), &(0x7f0000000900)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000940)={0x7fff, 0x8, 0x200, 0x6, 0x7, 0xffff, 0x3c76, 0x6, 0x0}, &(0x7f0000000980)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000009c0)={r5, 0x5}, 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40)='ethtool\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000c80)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002000)={@remote, 0x0}, &(0x7f0000002040)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002080)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000002180)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002200)={@dev, @broadcast, 0x0}, &(0x7f0000002240)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002280)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000002380)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000063c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006380)={&(0x7f0000006140)={0x220, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008000) [ 256.486614][ T6809] chnl_net:caif_netlink_parms(): no params data found [ 256.636915][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.651986][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.672207][ T6809] device bridge_slave_0 entered promiscuous mode [ 256.696263][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.712702][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.732394][ T6809] device bridge_slave_1 entered promiscuous mode 18:47:01 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20040084) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x7, 0x1, 0x4, 0xe000, 0x7, {0x0, 0x2710}, {0x4, 0x0, 0x7f, 0x4, 0x6b, 0x2, "fd3fecd5"}, 0x21, 0x1, @userptr=0x8, 0x400, 0x0, r0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r0, 0x11}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x28, &(0x7f0000000240)}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000002c0)={0x6, 0xcba7, 0x13, 0x3f, 0x7f, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000340)=0x200, 0x4) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x220, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x40c8c1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000004c0)={0x0, 0x13a8, 0x9, 0x9, 0x1, 0x6c, 0x9, 0x72d, 0x2}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvme-fabrics\x00', 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsa\x00', 0x61e080, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000640)=0xe2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xc0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=0x5, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000700)={0x5, 0xc, 0x7, 0x10000}, &(0x7f0000000740)=0x1ca537a3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={r6}, 0xc) [ 256.769521][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.782471][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.837626][ T6939] IPVS: ftp: loaded support on port[0] = 21 [ 256.843921][ T6809] team0: Port device team_slave_0 added [ 256.893662][ T6809] team0: Port device team_slave_1 added [ 256.962382][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.969392][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.997955][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.030596][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.051889][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.086686][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:47:01 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc0000, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/59) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/82) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{r1, r2+10000000}, {0x77359400}}, &(0x7f0000000180)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x101000, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x453, 0x400, 0x70bd2b, 0x25dfdbfd, "f01b609fab2cfb724774ae9e189c7963cddb14fb66a869e96ec09476ea09a025435a2b9581ab910c015c9e38ef87e6555230393dba06b8d95a6af489781ac006acef39ec3658e72796ac317531a5b19d109a75cc6d57df19ff738ede5c6b3fc4ae3f80", ["", "", "", ""]}, 0x74}}, 0x5) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000340)=""/124) ioprio_get$uid(0x0, 0xffffffffffffffff) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x121200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x12}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x4ef5}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x8001, @mcast2, 0x80000000}], 0xd0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x8) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10000}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x31}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x44080}, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000006c0)={0x18, 0x0, 0x5, {0x8}}, 0x18) r6 = fcntl$getown(r0, 0x9) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000700), 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000008c0)={0x1, 0x1, 0x1000, 0xbf, &(0x7f0000000740)="6c76e27c3ea83316de54b1a8d6d5696b9b7d4547c7264ddabf1e8cc3f589bc49f186a601c6a89210913b26d8182d0181311c1365ae91081f13cf4fd1b4b8ae32597ef38a4368f8f3e23284a4ffa062a91ce8f6001ff50c24fb0b408df738c6f5aec68010f4ff38acc05b4080d59570b45f3697104b9bac4e5e476ca02b03f4ee0dcd44f2ecb1dccd0458e355c458126e6f53af90f3b1116217d71a1e16d2563ce196270b5c0fd498ef1d3092ab301e7b44ab36543840e1d8689f60b787553f", 0xb8, 0x0, &(0x7f0000000800)="9d8ffd5e7cfa9b67a2b5de3577f5355eaa1cded808db714797dc7ac73bf390d490e3b72a9541da9c0514e5b91a571fc89ca772bf5c9e2faa60e677da14e98bdb9fcfc299d407b43910b625be912c3f492d67ab8e30e3588f81a6923aed39ca65f34a6298b472e448e1955e437a118fdf0ae86b371c0b1bb8214e45af542d091bf5efb9411b702b0a52cee78af49f73ef0baae39e29e22ffac5ead20d6f4534b5f670f8343a7e20c240660eb12a7e8b323a40a0fd079896b4"}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940)='/dev/sequencer\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000a00)={{0x9, 0x2, 0x3ff, 0x2, 'syz0\x00', 0x1000}, 0x3, 0x10, 0xd9fa, r6, 0x7, 0x200, 'syz0\x00', &(0x7f0000000980)=['syz1\x00', ':/*\\].@!5\\*[*^(@\x00', '/dev/vcsu\x00', '/dev/btrfs-control\x00', '/dev/vcs\x00', '#\x00', '[^./\x82}:[:[+\x00'], 0x4a, [], [0x8, 0x2, 0x1db8, 0x8]}) [ 257.139749][ T6983] IPVS: ftp: loaded support on port[0] = 21 [ 257.207457][ T6809] device hsr_slave_0 entered promiscuous mode [ 257.261297][ T6809] device hsr_slave_1 entered promiscuous mode 18:47:02 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x9f0000, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98090c, 0xd2a, [], @p_u16=&(0x7f0000000000)=0x8}}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', r1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000002c0)={r2, 0x2}) read$midi(r0, &(0x7f0000000300)=""/147, 0x93) modify_ldt$read_default(0x2, &(0x7f00000003c0)=""/36, 0x24) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000440)=0x8000) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x10001, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x50, r4, 0x5) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000004c0)={'veth0_to_bond\x00', 0x6}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) accept4$netrom(r5, &(0x7f0000000540)={{}, [@netrom, @rose, @remote, @remote, @rose, @null, @rose, @bcast]}, &(0x7f00000005c0)=0x48, 0x1800) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvram\x00', 0x800800, 0x0) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000640), &(0x7f0000000680)=0x4) [ 257.369075][ T7001] IPVS: ftp: loaded support on port[0] = 21 [ 257.641099][ T6939] chnl_net:caif_netlink_parms(): no params data found 18:47:02 executing program 5: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/111, 0x6f}], 0x5}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000033c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003400)=0x14) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000003500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x68, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x27}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2ff, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4018) syz_genetlink_get_family_id$l2tp(&(0x7f0000003540)='l2tp\x00') r4 = socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_elf64(r4, &(0x7f0000003580)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0xf9, 0xff, 0xffffffffffffb417, 0x2, 0x6, 0x9, 0x138, 0x40, 0xe5, 0x20, 0x8, 0x38, 0x1, 0x7f, 0x1, 0x4}, [{0x3, 0x6, 0x9, 0x8, 0x0, 0x5, 0x100000001, 0x10d4}, {0x4, 0x100, 0x0, 0x3f, 0x8, 0x7, 0x7, 0xffffffff}], "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", [[], []]}, 0x3af) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003940)='/dev/nvram\x00', 0x101000, 0x0) recvfrom$ax25(r5, &(0x7f0000003980)=""/151, 0x97, 0x40014140, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000003a40)) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000003a80)={0xffff}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003ac0)='/dev/vcs\x00', 0x40002, 0x0) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) r7 = syz_open_dev$mouse(&(0x7f0000003b80)='/dev/input/mouse#\x00', 0x7, 0x208a00) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48095}, 0x4000) removexattr(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)=@known='system.posix_acl_default\x00') r8 = socket(0x33, 0x80000, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000003d40), &(0x7f0000003d80)=0x8) sendmsg$can_j1939(r6, &(0x7f0000003f40)={&(0x7f0000003dc0)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000003f00)={&(0x7f0000003e00)="368dd87b8537a3bbf8bebfe419fbce22d199dbd17097e294b9c967e28b22edfaf11e9a2ad66153318e8c28c9eb6b9c0f9be13d9efc01e817e148a315d25615f5c9d761c0cbdad1dba47792ec1c46555d10b27e5e1794248095f5abe810de8607258b39395d14ac724976d2ecfcaea23fae5fbde47fa49b3b2a666b448db895a7a62703197a8a2c7a6af9ea90f4a5654b46c264c26799c8401d00bf2789a35543a003972056ee612b80d58d0fbd14c92eaec7881d00aad02f5868425e08c9fcc2b1ee51433063cdef58b8b9efd45535fdcfd92a9f0b9aaa", 0xd7}, 0x1, 0x0, 0x0, 0x4000010}, 0x22000000) [ 257.884154][ T6983] chnl_net:caif_netlink_parms(): no params data found [ 257.895222][ T7148] IPVS: ftp: loaded support on port[0] = 21 [ 258.147542][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.154899][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.165021][ T6939] device bridge_slave_0 entered promiscuous mode [ 258.177220][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.184981][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.193153][ T6939] device bridge_slave_1 entered promiscuous mode [ 258.203986][ T6809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.263413][ T6809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.346473][ T6809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.424956][ T7001] chnl_net:caif_netlink_parms(): no params data found [ 258.449319][ T6809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.516776][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.524231][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.532988][ T6983] device bridge_slave_0 entered promiscuous mode [ 258.543795][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.551497][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.559270][ T6983] device bridge_slave_1 entered promiscuous mode [ 258.578258][ T7375] IPVS: ftp: loaded support on port[0] = 21 [ 258.587443][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.607990][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.639354][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.682785][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.703978][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.711428][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.719192][ T7001] device bridge_slave_0 entered promiscuous mode [ 258.774426][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.782844][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.791728][ T7001] device bridge_slave_1 entered promiscuous mode [ 258.820883][ T6939] team0: Port device team_slave_0 added [ 258.869370][ T6939] team0: Port device team_slave_1 added [ 258.878822][ T6983] team0: Port device team_slave_0 added [ 258.890222][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.906550][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.931631][ T6983] team0: Port device team_slave_1 added [ 258.953364][ T7148] chnl_net:caif_netlink_parms(): no params data found [ 259.006743][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.014571][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.042224][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.063183][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.070182][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.099672][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.118575][ T7001] team0: Port device team_slave_0 added [ 259.126760][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.134725][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.161304][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.183501][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.191754][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.218352][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.231931][ T7001] team0: Port device team_slave_1 added [ 259.297965][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.305139][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.332779][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.403885][ T6983] device hsr_slave_0 entered promiscuous mode [ 259.451685][ T6983] device hsr_slave_1 entered promiscuous mode [ 259.480419][ T6983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.488303][ T6983] Cannot create hsr debugfs directory [ 259.513592][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.520855][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.548453][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.592373][ T6939] device hsr_slave_0 entered promiscuous mode [ 259.620823][ T6939] device hsr_slave_1 entered promiscuous mode [ 259.660477][ T6939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.668061][ T6939] Cannot create hsr debugfs directory [ 259.708031][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.718213][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.726386][ T7148] device bridge_slave_0 entered promiscuous mode [ 259.772532][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.779637][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.790585][ T7148] device bridge_slave_1 entered promiscuous mode [ 259.826427][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.912972][ T7001] device hsr_slave_0 entered promiscuous mode [ 259.970618][ T7001] device hsr_slave_1 entered promiscuous mode [ 260.020308][ T7001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.027924][ T7001] Cannot create hsr debugfs directory [ 260.036519][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.149105][ T7148] team0: Port device team_slave_0 added [ 260.163788][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 260.186355][ T7148] team0: Port device team_slave_1 added [ 260.248190][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.256038][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.284439][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.321893][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.336851][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.344988][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.372691][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.484855][ T7148] device hsr_slave_0 entered promiscuous mode [ 260.530518][ T7148] device hsr_slave_1 entered promiscuous mode [ 260.580106][ T7148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.587687][ T7148] Cannot create hsr debugfs directory [ 260.636597][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.654640][ T6983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.726902][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.734183][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.743135][ T7375] device bridge_slave_0 entered promiscuous mode [ 260.756627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.765344][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.791278][ T6983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.822659][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.829799][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.837860][ T7375] device bridge_slave_1 entered promiscuous mode [ 260.856704][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.866573][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.878140][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.885420][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.897354][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.906450][ T6983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.002259][ T6983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.072273][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.085069][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.097186][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.107447][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.116453][ T2696] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.123584][ T2696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.175567][ T7375] team0: Port device team_slave_0 added [ 261.185401][ T7375] team0: Port device team_slave_1 added [ 261.238041][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.245523][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.272075][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.284958][ T6939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.337485][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.375686][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.383619][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.410202][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.423029][ T6939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.479932][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.499763][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.509014][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.522027][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.531874][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.559047][ T6939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.607458][ T6939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.692298][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.703792][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.712639][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.724394][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.733310][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.752823][ T7001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.812384][ T7001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.881990][ T7001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.927160][ T6809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.982835][ T7375] device hsr_slave_0 entered promiscuous mode [ 262.020298][ T7375] device hsr_slave_1 entered promiscuous mode [ 262.059965][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.067541][ T7375] Cannot create hsr debugfs directory [ 262.093520][ T7001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.228936][ T7148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.266815][ T7148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.318803][ T7148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.355502][ T6983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.392675][ T7148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.431639][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.439126][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.462277][ T6809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.493013][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.502177][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.515642][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.591812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.602953][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.612377][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.619714][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.627646][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.637055][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.689489][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.697535][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.711774][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.722234][ T2559] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.729318][ T2559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.737536][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.747303][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.796324][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.808546][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.818035][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.833514][ T7390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.846289][ T6809] device veth0_vlan entered promiscuous mode [ 262.875524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.884543][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.894828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.904405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.913630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.931850][ T7375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.967708][ T7375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.027381][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.046138][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.054952][ T7375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.138845][ T7375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.201525][ T6809] device veth1_vlan entered promiscuous mode [ 263.234306][ T6983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.248389][ T6983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.267715][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.283051][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.293056][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.302930][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.311812][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.321016][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.328754][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.337178][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.346693][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.355989][ T2696] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.363131][ T2696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.385835][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.413180][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.423155][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.431321][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.439104][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.447297][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.456482][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.465566][ T2696] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.472719][ T2696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.481021][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.526302][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.534997][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.543240][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.552974][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.562137][ T2696] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.569321][ T2696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.577732][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.606385][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.617248][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.630074][ T2696] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.637143][ T2696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.648412][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.658078][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.681903][ T6983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.712642][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.722585][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.732920][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.742847][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.753099][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.762853][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.772824][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.783933][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.792849][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.815537][ T6809] device veth0_macvtap entered promiscuous mode [ 263.835658][ T6809] device veth1_macvtap entered promiscuous mode [ 263.847007][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.857346][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.865774][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.873927][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.882990][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.893392][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.902352][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.918067][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.931399][ T6939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.952668][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.960244][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.970152][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.013260][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.032071][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.041711][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.052337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.061607][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.070382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.078624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.087843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.097076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.105984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.113972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.121603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.129027][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.137681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.156978][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.177864][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.192990][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.202405][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.211427][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.218494][ T7664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.226609][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.235760][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.258535][ T6983] device veth0_vlan entered promiscuous mode [ 264.333388][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.341653][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.351238][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.360413][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.367471][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.376615][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.387214][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.457868][ T6983] device veth1_vlan entered promiscuous mode [ 264.466418][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.476612][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.484950][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.493792][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.503243][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.513368][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.537965][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.602129][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.632219][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.647591][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.651717][ T8067] QAT: Invalid ioctl [ 264.679376][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.686919][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.715700][ T6939] device veth0_vlan entered promiscuous mode [ 264.744655][ T8067] QAT: Invalid ioctl 18:47:09 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x8, 0x1, 0x1, 0x2}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d72646d612c306f72743d3078303030303030303030303030303030302c756e616d653d292c0031621843664f12c75fc2d2c7a0b0ccbc3dc74a8844500a0653145340be033d7be7126fbc03a678d0b65228955c46e6e8dbc49819d803000000a19c3e06ede76bc56aee8cdf7c945fc31e5fc3c348f1c8f08c776e36ad65b4b8565ba5927e"]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x481) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) [ 264.762766][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.778856][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.791532][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.800462][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.808871][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.821139][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.830997][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.871427][ T6983] device veth0_macvtap entered promiscuous mode [ 264.892802][ C0] hrtimer: interrupt took 26480 ns [ 264.901957][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.910164][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 18:47:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x60001, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bind$packet(r7, &(0x7f0000000040)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x102, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b \x00', 0xcc, 0x3a, 0x0, @empty, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, [{0x1, 0x8, "34bc2a6c034f0faf0135e9fa7d54f63efee456f23bb1776361d8eb5e3c3b91b78a3a34c19c3484d1a906cdd004f395b211b3bb52f266454fd2f5b022d9627b0833"}, {0x4, 0xf, "35dd3c9c9f915b5947ddfa52ac50e1c917a15bba3a95e85cb2a5e3944f1a0ca59733a03125f86aaf9504eed6015ff38fa753e0749f105632262c9f2c066bea97d40f7f7395a8f23328feb39e492b38d7d00fe5daa898ba57fb1c4a058837f1beb50de3e0d6273373d21e9a1ab29d08c86151222413fa6e"}]}}}}}}, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f00000003c0)={@dev, @broadcast}, &(0x7f0000000400)=0x8) [ 264.918005][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.928041][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.938593][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.948779][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.958790][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.968180][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.978696][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.988098][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.997961][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.013674][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.024624][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.036690][ T2696] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.043864][ T2696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.054338][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.064551][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.074305][ T2696] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.081487][ T2696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.090615][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.100316][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.117078][ T6939] device veth1_vlan entered promiscuous mode [ 265.153149][ T6983] device veth1_macvtap entered promiscuous mode [ 265.166211][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.178696][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.187662][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 18:47:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}]}}) [ 265.201328][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.237418][ T7148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.260681][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.277171][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.297479][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.319030][ T7001] device veth0_vlan entered promiscuous mode [ 265.345717][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.359479][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.367486][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.387959][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.408582][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.462817][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 265.487428][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.508211][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_0 18:47:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}}, 0x40) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x10000, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000093", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 265.539778][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.548445][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.570464][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.589989][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.608475][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.627090][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.645426][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.660712][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.676537][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.697668][ T6939] device veth0_macvtap entered promiscuous mode [ 265.743426][ T7001] device veth1_vlan entered promiscuous mode [ 265.756936][ T8092] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 265.770699][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.787920][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.805974][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.816001][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.826286][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.836936][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.848409][ T6939] device veth1_macvtap entered promiscuous mode [ 265.860607][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 265.872098][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.883820][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_1 18:47:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0xffffffffffffffff) [ 265.907332][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.932673][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.959716][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.968596][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.037298][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.056535][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.066707][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.084218][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.096692][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.098272][ T8101] input: syz1 as /devices/virtual/input/input5 [ 266.192254][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.200127][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.207571][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.218401][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.228065][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.236565][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.254468][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.266225][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.276697][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 266.287479][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.299589][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.312624][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.396264][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.405686][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.424642][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.520399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.537865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.571812][ T7001] device veth0_macvtap entered promiscuous mode [ 266.589989][ T7001] device veth1_macvtap entered promiscuous mode [ 266.617200][ T8120] Unknown ioctl 8835 [ 266.637324][ T8120] Unknown ioctl 8835 18:47:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r4 = dup3(r3, r0, 0x80000) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000030002707000051a3960b000000000000300001002c000100070001006374"], 0x44}}, 0x0) sendfile(r6, r1, 0x0, 0x10000c000) [ 266.832990][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.848270][ T29] audit: type=1804 audit(1594147631.585:2): pid=8130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir476096378/syzkaller.y2eVnn/1/cgroup.controllers" dev="sda1" ino=15748 res=1 [ 266.877051][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.887781][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.899964][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.912649][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 266.926626][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.954148][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.977485][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.003014][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.019981][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 18:47:11 executing program 1: syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x0, 0x0, 0x4800, &(0x7f0000000840)) [ 267.057911][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.121189][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.189449][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.211570][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.250691][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.276169][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.293157][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.305762][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.316371][ T7001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 267.333806][ T7001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.347705][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 18:47:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x44}}, 0x0) 18:47:12 executing program 0: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000075beb96512702e20010000c204000000000000", @ANYRESHEX=r0]) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0xc6, 'syz1\x00'}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000005004000019000300e60100006c000000010000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 267.441043][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.464595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.500286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.520606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.574621][ T29] audit: type=1804 audit(1594147632.315:3): pid=8130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir476096378/syzkaller.y2eVnn/1/cgroup.controllers" dev="sda1" ino=15748 res=1 [ 267.626786][ T7375] device veth0_vlan entered promiscuous mode [ 267.704350][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.720002][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.742548][ T8160] EXT4-fs error (device loop0): ext4_fill_super:4670: inode #2: comm syz-executor.0: iget: root inode unallocated [ 267.770717][ T8160] EXT4-fs (loop0): get root inode failed [ 267.773229][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.783340][ T8160] EXT4-fs (loop0): mount failed [ 267.799947][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.829007][ T7148] device veth0_vlan entered promiscuous mode [ 267.921960][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.949268][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.957144][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.999156][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.008761][ T7375] device veth1_vlan entered promiscuous mode [ 268.073437][ T7148] device veth1_vlan entered promiscuous mode [ 268.087871][ T8167] EXT4-fs error (device loop0): ext4_fill_super:4670: inode #2: comm syz-executor.0: iget: root inode unallocated [ 268.161340][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.176856][ T8167] EXT4-fs (loop0): get root inode failed [ 268.186879][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.194882][ T8167] EXT4-fs (loop0): mount failed 18:47:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000804) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x800000000000000) write(r1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc002}, 0x8001) syz_genetlink_get_family_id$nl80211(0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r4 = accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10, 0x80000) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000001c0)='veth0\x00') ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) [ 268.229267][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.254682][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.269834][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.324361][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.384934][ T7375] device veth0_macvtap entered promiscuous mode [ 268.443567][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.486900][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.532107][ T7375] device veth1_macvtap entered promiscuous mode [ 268.603770][ T7148] device veth0_macvtap entered promiscuous mode [ 268.627733][ T7148] device veth1_macvtap entered promiscuous mode [ 268.661978][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.698392][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.710723][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.766122][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.784250][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.804953][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.815922][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 268.826679][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.839042][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.850088][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.859430][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.867484][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.884381][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.902565][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.920572][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.935386][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.952347][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.964453][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 268.983463][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.994702][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.011368][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.026105][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.056805][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.086987][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.097801][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.126632][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.157843][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.178321][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.197997][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.217987][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.237664][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.253195][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.263556][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 269.274475][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.286099][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.297207][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.307788][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.317699][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.328224][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.338149][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.348679][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.361618][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.372676][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.382609][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 269.393123][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.404398][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.418160][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.426683][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.436130][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.445364][ T2696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:47:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet(r0, &(0x7f0000002540)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @empty}}}], 0x20}}, {{&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000300)="82ddd3a975b2c155629d09c1cfbfe3ef9b35043afb14f9823e76a9b15e1d776969b0f1e4c3bc947125d6a719016cd8603dfa33f91a62aedc43a2cb45673eec7f508b6fed412a623e0472283412181798b7cf08b25d9f44a434d6e9d2339a1e95b5757413c07cbd987e42581c06b1117a1d5adb8d100b7155be0c7207603d21812c4d96081663a78aafa6f685a960f13ab7461be8a9b776", 0x97}, {&(0x7f0000000240)="47579cc2d28fc1691d490563185595afc4faf5396ef31fc0b58095c92622172ce285ecf302aa50e15e0714d6f79d4a9d5a876344fd4db1279fdd45623e2dd022788a8d0a", 0x44}, {&(0x7f00000003c0)="21afe061436381b69434473aa48b661038fa47c575be9f0988b4e2671e36b28824", 0x21}, {&(0x7f0000000400)="18a07bb1d7b49527542865eaa8cfe16707ae3dab370102822864165c26b5db8c4625cffe3f59efb238d577ab5a6adab75f7aef42d5c5ae9bcdc61376f77d9f2223ad2a0fa7bc05a2c55a6f06232d86422a6c10c7ba63d806fa681289833bb19d7585c8d2166d2eff97e6c7091a220137856838733965287c288c5cc045bf2bb234b7cc54cee32fc1beed62992d39", 0x8e}, {&(0x7f00000004c0)="19be86556c151da0a5420b661bc17e11ae6be60ddfdcf73229f0ac305d79cc80cad055fe9055b4e0971bc0f6a41e4feed92346a66ec392afbc290cdac597c0252bee80cb96546e835ea6508f3dada407d7d6ea55274e667626d4c635f7ed5ae03f6a8e9b9214a2401273fd4a78b9cdfe065fd9272d6d6842fcd5af1782ed1ff6dcb4cb1bd8f4a2ea0af65a969d0271fec4ec9603d0651a8ae16141e5bd1fc9c0061e6043581cd6b535a8a6cf51dd372d92e6759429d48396319a9253f54f", 0xbe}], 0x5, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xda}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @dev={0xac, 0x14, 0x14, 0x10}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}], 0x68}}, {{&(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001bc0)=[{&(0x7f00000006c0)="c93c81f9aa370c6fd9f6e9814f07b8a2404679f690ca7dddd41ea075d15a56f5bf120bbfcd50cb1189a8c7b3e7d81cb9dad3e3d8daa0530bcb8df03054435f945059cc6313ebe1f329ef9423d3c3ce9d1f3c68f1a7", 0x55}, {&(0x7f0000000740)="75ab0af671ed30de53224a9c111ad499d771996b40ca10eb68062faee2a37ba062cbd2a67e657a948b00c34c12e8f2cf50f5a50b78b8d185b4f54c7e9e72ac19179ca24ed1cbbf2cc84a3261328ce3b42b25d333e4ee91446b4cd3f20f28636a8180dbd209dd98d5754204b848f7dbb1c423652a718ef1609ad22c789b3c353cc56234d5b0ac1e7b67c40e559a7746fac01728fed8f8b49ef1f0692141e4faf4b1f3a568b8576bf19db9d9ae200b062a56e253938792c7251451b4087dc93e9646ff0ba29196af5512acb51d3d8821458c9349d7ee908e3daa284035cfff509b87976d8cc15b99e8918c", 0xea}, {&(0x7f0000000840)="3b9d8a51047a14b28cd088cf1e4368d9ce31045a76e4ba91defc8562897708c7e2ed84d7293bc64543792d4a0109c99b12bbc713fcb0282efb0df76311ea3d1d3c13d3ad9229116cdb8bee1f9f44e6a3bdba4b2daee783c5a6864475d407637a02655c668f1661335b28a3f4363b4b79375f9a062894acc244", 0x79}, {&(0x7f00000008c0)="92c645358e05865248354c31c32e45188cc1c23e22270c21736e524a333d29", 0x1f}, {&(0x7f0000000900)="39f281e39fcc6ef24f51fe39a3927972a5c0f77613ff3dccd519efaf728abe314abf29bb87a0df35ab6d91fab6ebb87c5014a80ddee6342948334b2113150d48af5e2450d8fdf32ed70dd8cfd50f02375b55670db8b42835c657a3f2ed999d5a67e614132dbbaa1ea374d6c9cbcd6d1198f83fdb6a016faba5e947e29ac45017eea0e53d0afb44f833c249813cccdb", 0x8f}, {&(0x7f00000009c0)="44c0c2a3789f0c209c38384056c0d7196624456fdbaf98004ab5e7cb47e9c4dd7147de609ec27e54cb6fdb48eb0257d184b1e43bc2d1ba469343a681dec5afd972ecda077185884e64397cc53fd34c654dd1370c9f94d477d22f132c4f40a9e9b12e675124eeb4b1ab57b946dcd8d3aa31f27801c77fe70a1cb8f21ec9502dab9e9afa3c6ebcc31b112a02edc5daa532a4aca139d370b1c3ab331abf5eb0407223933d077bb23e8805676ff8ef71c548ef5ad2014b5f9ad725abbbe64285e4eb9361153b31c9df832c53379a1e57d1d39c62ced0dd270ebe0c41e4de03be9b4be108c4206112d6fadfc76685a61b31a3fe69314c55033337b16df6eb795995b7de7c830a07e68aca719f93e981f9bd90f38a4d56ed508d9cafd9e360808b90d76a02abdcdd6770f39a3346738e5263ff7bfc98e3dbb2750b24543ffa8c54db2502880c5a1f7c62994218a52ff9e68c91c7f6c4044337caccc891847ecf096f5f2114e433bcc7c3d084ca9324168c5ee5fc84dbfa7b365a8f3d9a76588ac27b91647c2027e84a448d91612ec6262ccb3010fa018a53d0f01e44b41f39281054dc923fb2cace7f33f66ed153ad86a4e6ce78aae6853dc8e402b64a7ffcbab2afe770fc7c46709ea9cd144e288d757b7765ce332d832d811addbdcfe5b00cc318c949b0620c9db240fd6d7fcca20f4d7ec50769a8a4560c8068f496b31f01f730dab1dd4f66769d367e58c482033328b8b907b77a7738def4629a46af9620dd4f259eac3e758bb3a8318f9d7281bbe772a4ea97be55fb81dc47bc6600b385274ba3dbe6fe088e809cbdedbf1890117af4c1630d845052533fac1b7fe480b001b9d1518a9a3da34f58660500d1da3fa623d6836684bfe255c80e856b96da0edb69cf2ddbe579bcf98b26ff19e2625be194004348b7e2f8a390d8d037e20d8bd5053d1ceb02720fdc1f5458c0795e0d7575a1adc94b525fa2f6062582fda2ee308d97fcdffb0a74f17a8f5970915bd58d5ce0d9e8fd43c557a8c586076cf2dda3261600c96f9c40f19c2b08bfbcaa8bb2f6bc75ebea357d4e76eb30883f2a5350bfa15944712457959585d0648fa391c640203483df9bc511755c2a14aac48918134b1a1cf2ac40186220b5d2e0cdeef2b0ec886c7c1b9c9971b472737b763f573353adafb82068d27bbc0e23eba7cfb6ca4a0d0d33530bc1b84d2ae4aa91e9a631d33de6178b37dc1eb04caf68667a6e91ad5b9ee0878e30ec0740e9615265cf7e8dd82e43612752486241ccdf242d72dae5cbc6bfc02b3204b07a3e136eb6360796894fa3d65e5b3cd3f07667dbf41867cd34e1ef45aadaa8e7e6dc3f49677cd497b692fc071a23737bd0b8a6142e4c168a1cd8d97741cf80b72ad0c91b1e511fc15df90fe68d0ae53926b5cd931ea9d337110153c36c3010e0df27f9e4bae08e88fb28b6b8b5b044e5bc8435c5ce3a1e374b3fcaaeed3b974bd04f61495540adb01cb0c94f396edf89ab53a1203f017ee27f48a0202d5af520ef9a83ed9106bbfa9cea7819cedd97df343f168bc3bd1c3abd55540f2de83b7052c243ec9fff907b275c73a9f042401112ace8debaa160398ab85e506a2c3eb8f7fb458944c9932f599a146b3a36617ca5b26a1c39d874692597843ee2039a05c9427f644b7815b5cbc9ce4e41c7eff26f93ce24e8aaf76ba30da0f6299e085852d5f717dcade9b857cf1f93950241aee7b8b77ef08a5258fd3a51df5de231f8e66793b5ef981b436602519670ccf57fd00c3224fdb251620a14db08891ee2b67108c2596824e7f0221374639f8c8569a15986065930813c51467a155bacb66a67ba2623f65cd11b17474a3f9f67cbf0bb61ab36d6b12187981af38fa7e234659117457fc366177eacefe5e112ca85fde0ab450e9f87c231e58720f56844c8c867736a6adb835f757f2e7aaba4c26e0bd5e265d4b3df20c5ff06f838ba659e6a25bd7171f6ceed7b567d649e68cd4cf48ad8c9337cf4b51b9cd6b5b105acebd4f02029a9746d2b2118ddb7ed115ebfa829b4e94f1b16c322c2fe1cda10fa1519d61925b8cb1a7d3551bb99d7d3474e5407bb3c71856e5a45573756adc3820a8197480a1d4d6e172b87419c7832a64573c4c68bc027ca7de60a26c27dc8757c70bee37be85a0549dab1adeb3a63c6f2d22cd8e4b671cff11cd112591e3d48736b46e0a2ed822ec738ce4e4e9438ce2787230ecf546f0ce7eef3f1be8b0e201ef5c1857dca88f5737e80a80081998d1b5a1b5eab6329969d298000b2511123ab6525d99000ef2e10be599b3fd5a6ac2a854c9d3938a4f9bbaab54add67e63b0e3e5b362bba15618f3c75c85631a799ef49bdc7ddb17274b06dc3f69d92f85dee3c8f0ec55a3938ef520614ef848e9c8b1f1407abec6790a8e9776dede4d54ccf126b6da1894fac92ea7f36a80d1d500b27c6bef7df5a2b5308edb00b0403110045504c45803b199db4df6ca391e425feaf34016544f5c2d73cc30c7f7f7bccab0eb5442bd7393d7f49b0d9740444b867ec048d0864935270ece851a315d86c1e44a824f0c1645b8848ebf0a5ee217ef65b23fd5e9278d587c572202dac776ac70eeeb6c3beed8b504ef044882f5804a0ee02f4a97a7cd9587d935cb08a9f7b438d63deb813871086c03cf46351de978c4dbeabdfea31706b6105d4b19b815c17913f72c02f957615d2f2ff897cceb22ccaa0066d026c37e828576957fd13dcff80610246a0178af35d5ca8d8b05c7e5bcee8d41c65e2fc69d4d9260a58c95665f3937e71876fc6062718f11891a74457a4f4d04154686f7291f0786f6273bbba31e43730eeae48a6aa85514e73d150068b1d1980c175f1353a8a951da93ed0faeed05dabd9b121e3f01a7bf990de3b75d5c39f9447eefc604247ccb384fe5ad13e052945d37f1188c2a88129775c26c02600e496762fbfa1e080429e69712b008da42e1aac0190010e060f985f52bcdd8cd47a77eb886b715a74b3c151a4d5755ed27edd047fc5b4092b7e961451914e7065489529e3792d58d39613a19a5103d32e60996219f8a93ab05469ea6aa9e43aa00fc7303b7d6408c4b18b989deda7ee4f1dd0f5f8dfb568d158eaf08b2f371bdf0c667036b5b3735d0ffae9d308e380a778d50c94f2bbc37019fcb005f3dcb190ccb716812a71bc71f559ffcdb583b2db208a57b6f8abe75a46aa16fc630578f8c1e9a2625eb56aa023e347d1bf8d9599e374baf964433b4e7a1aab46c9ef0ff57c49126a590a5a5d085fcfdcad4ee0426428e3f381e7e078efdad0d40a8198fdfd09a0ffd3197572b3852d885d6c10724565d18fcd73814c23d3838f6fdb348f0972106ed9cdc41a868e142cfecb93d10052b12808b42133e8b706090cc179ebdae37057efb29c5bcf936f8070d6f6945509f9856bc218497985342090ad27d08cf31238a0be1b5ade00e05532b7d2f164cdb4bb8bcb554d4ce0e39d3ddca9e2f8974dcf505c49c482e28a6ccebc9afa9720ee80bd75f068c161d9816055a12c8763067cff54c09722b57e0d1c851c2351fc4d8c96fd64bbfb7228b1fa8023b94922f68e9e210251b244bef2fce4677b3f62002d56bc121378d340c52d8e756ab64857b763381d6259d2e302abbd838d6703b9d97181224c769a0713345243b084b991526513d758e7524d8c8f3b65d02debb7e8a67d9fc7c027577d8ee98a2af307dac2c507fd1769cc11538a5eab913be3243152c9e83f14176c4fa1d38e32654741ad894bfceee76db560db4bc7a231ae6282dfb15a1d8446f0964196d7db2acc39b9264c425ae7e3f660201e5155eb39f5a239afc42bf23d529c32be8c4d684f561f2de63f080f9e85b8129cae28bffd1713835a87c75b97341cba3e22e38fc10367ad1549867c62fb2a84348302c6ea7cff25390514000c1f27f156252beb8238caf19fc11547930f1559e9cf418a3f1bd54407f25b3ca3cfed2918c374e1af99b5e0ca19210e62a748a8ae36ee3fc2dd4a7226a9365e0ad7d6de5c4e4f457d84e44b2df318a67668bd96e62e633adc7089fd4d6d1e02fe4fb092073427b9d04e169d111ec2ab07f9170a24836d9fae013e06005678311513db43995428db4e4d7e3cad27f09fe3f41a9e8116f35a483bc29569c4ecc8b841bfe27348c4acd1ae359c55230ea3b2ce4e0252091d40fc5b062ca898662e6a72653c54ad5ac8fca8ce70fec94bb9076a5068c58f8c9f19785fd44f1a28bf16a7927a8b88890b305406c520b5565bca18a4f3b1d378ec89476f2ac65ec20bb1828bd7ab0510f6d8221cbd4193e315e16251dfc4478af99f3dc49546ed0ef52b304df103cbc8d9d70e6b318dcb743dc60f9eaac4125b95cf30562bd033db82e7e4089d4adabe51463fdc9e33becbebdc17f45bfa809f4c920a1be2afe9ee8ace27623dbaa07785316a0eaa009f2062c0f14c94fa837489b9fda4d2af249796ebcc26a5808e39b6f66564772363af4a1417be98c627bb2c9427be005ff99d8ba7f7286ce1329aadeb9aa0d56cc2ab3e1645d1fb484375b063b955b33b1ce436fa305d378c7dfc241abf200d2abf02333fbdfdc4e8e5e83eed2dfa97583ede6226570b24f6f8f5d4e0c701aad03e0195757682dd412eb9386db334b8203e3a9c4c60593bca8cfd4425426ebb6c2146a50112a3aa2901f049eb7b5ccc826d8621677d95106b11b0da50bf6baad54ffcac7be443e9a02b8bc5f0ea92c5b955270b72e3c9dccda8a21d9837de6c7456af3d7e12683c214da0a8cd456516a447bfd80b03094b81266b21845dfcbaa3c430829ae4814b0cfb2ab6a106ae159d5bdbc332ae1b64586e6423226fdd6eecd133fa3e3375d5db6ecdfc9340d88b205ac1ba22ebf51be6166c39b07872ecf377a013f3648d0f9a446d761d7598ee428bc4aa8ec6d8d92f6ffc45fe795766d1fec7eb2f113b82baf91cab2658c52164a2f017461b01961810c0368b6b6aa7be49dec15640f58d3aea523d0fa25c6b6ebc06bad73559f52606da8be7a34f89dc2ee1ec6b9b63ac44e7cdfaa02c6f1653d34fb118674ef85784c9edf1b9eb5b96cd268d8bb8e65a9ff8b0c952af94bac4fe0f12540e5ece712936bc1af7b0b27b10b1f12317d67ab046942c640861a4cb366261c00aea1441314379cbea03a7aa875da03b5ce3cd930c1f0b5f48f342a8b2ba5bb3e7d58417d4d402c50c383ce11199a2d2d059e076b4033454799aaea2c7531ade47d1c0b099bf133c6fdf0b4aec459dd11747f09b8662ff43cc5a22d5e2026e3b55a147af11ca9ee12b1f998d63ed859cda5bd25ca3f9b542a34c078b6895b3b856b7bb10f4b012108bd0e98414ed052e05b3c7bed43c555e4a6bc9a15cd486b87fadd6c0d5973ed7b078c92d1afb1c00a830a1389bb63e453c568aa6c065dc1dc9d2ef29410ce7b9c13a99d555068e6f152b36dd40c2b61aec51449a742f4de596dcdd5394cc9191545a64f8c6948489d6eb9ffc2b62a46f4eafd0f1b6acfd527d52a107ae8aba6ed2c3cec611dc647364b41315327b2ef427b6851430a8c41ed06c4edf43e66fcacbf3c892a45f3640f7d175afa39ac4ec57d2f291081d0b859cad268819d19c6c33e50f055205d22c4783f30d51428d59a286835309c550a1db62c81607a7e65c3f87fee706659c52bca1ae43dac86ba49041bcf568262034b83fb441c0c71c25201239d8be63d3e72d2b9229def14353e816f14346ce0ff024209add2a0dedced1365f404170c7ea468e471b2d4cb5b3709ebb54f1", 0x1000}, {&(0x7f00000019c0)="d881601035e1b4b89ca328896dab94ee584b8de945ec33407ee39e3bc66d4da970ab44479e774d228593108e7935868eda2417c7a5d2dc34edc0c921ff816bb9e2cc11a5d7b74948bed78cffd3a31899b5299689d4a82be6dee817a115c3f4cbc25c0c97de1f6de8e0834c533bbe337d042b0c47900d391f5e86b7c7a1b7b3449ec5439fe65fb4bc9d0a4e0243fa40235c165d6c1d4536a5ced8b04567b3c6dc165bc52551ca0d785c49300ab0a900ad84a9f5d43612072f4f822fb1a26218842841b98217dc8e78ddcc22ce8e0bf8f18d98b66845f51c95bfceb4002cd9411bb9eedc", 0xe3}, {&(0x7f0000001ac0)="2db232f360dd89e4a0273715bc203f2951b929f30b4143afac1d8c8e3e59e5cb2de1d3092c1e427762643faadd040aeb245804a32e911e2063eba5135b829958fdbe106768b228cc9b525d37691884f4d6978d4e346c63ffee053bb1e4ec5fe4aa8cacb7ede31c1c8114ea8304ad5c15fc859f497d4c65afc0e16ba552d896bc61ec2077be6da8a43209f7f93a4c59953a5939251dc18288a4ca5ae17ea114219e8e79c37f7e5b25418a303ec26e018bce026c6efc04ae414dbd75fd1e0bf7d7b408699c9ec221cb272a902970f8a080bf342ee25e61b374c7d11ad38839bba6ddd2221814d411d8a20f559df05c1ddcc8", 0xf1}], 0x8, &(0x7f0000001c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xb, 0x65, [@private=0x7, @loopback]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xf0}}, {{&(0x7f0000001d40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000001d80)="33dda7a7d28b5049219d4a0a73f186c5ab712a6c4557a85db6ac342c8078e59db0ac1ab2f2d641ab061fc2db9338c13afd655fa36b47ffe830cb24cc6015c919c67a7b402a905c02148d44a56e0749bb36817decefc1284978efaa2eb742979ab6d92030fb3bb6502432a144373958f5236b50b4f3f17d65524905f4eff800659cec6d97603cac6107edd0ba33a959df12a9fbc00816a96b6052455e59ebf178faa87dcea7e9b068ef19eb35663f297c46e30a55892b55e6adc015f5cfdb51778f343cfc1ece2613af729f02cbb6050da048759176c45c803262e770c427e129591144", 0xe3}, {&(0x7f0000001e80)="5b9eb2b42ba507a5629211bde4f2281a93d508fc38b7232f6cf5a2c35938313ce02dd667435c", 0x26}, {&(0x7f0000001ec0)="197358294a02864c959b7d06417970f5aac29e051dbd6fea4578f9195d0e04fb6291c44284531c1849190572fdb9baa60270b3eaf4de294fdd5c7f738a0f198884153afc4c592e9b5fdf167bfc993762bdf6a0935c56d2dc75faa3525492b23a588c1504ef1b20de14691c3197d2f0c413a5c487b9ac53d147e859c600d19ed7", 0x80}, {&(0x7f0000001f40)="b1aac63bb38175854b0898f835382ae2441aea6a4c2fddc3b71a28a122ece4dce040c0c7e0d0e5dc699b7a194f876fdaca82653b0b0e8b68582f8dff241a2f212dc4f0b94a6ae71b06d8051e226692e4fa604d3d11e604a58f5cc15be598bd5b5d60fb7ea51671572a541f911f5a8706886274e062e5f9d7f6c46ccb7ff19748f276a139fbc6bfda4f49539ab4dee59e76abe41bb296", 0x96}, {&(0x7f0000002000)="ce03c1687b96f4a0d90b082a0e00d3aa8b4d937362b96149a85674d2ce14f7b4b3d7d246e520a67e616cff0efd5fb24a69ee36fcbb62bde2cfd7a978bcfc2a20efee1ffd0e2f200dd8b4ff2f93212fd0d2cd7750eb04a7c8f6c65ccbe5342bf8c4d0932bc1790567f301ac3b01130d2526169ab79ed3dbd7dc3b233dc70fba2bb910e1b46bbaa7cf34db12b3c51f87f26e5dbf3cd8c6", 0x96}, {&(0x7f00000020c0)="7c761705028621a1d5d30e73f2c08ebe73e2a15d58915c48288e65c0069cb98e019c1a5158b7d539815efe35108ea40377f7a872394903e948b2d3df413b290449ace6942f5d8d9193480e653e925c128ec9c70fa60fccc59fbe430e25d4451044c74daa385fdd1a0059a854265b30ec70419be5f983865af5e4ebc28cdb2738ff66a7ddc22b79b231b02684209e5372c3e94adbcb4daed8e344c8e8a879dfaf9e4c2de565a30ecc0e6e5070148b08e555233f1339026c9a5fe4cac0ac343dca489e44a88c3b8dded6c8dae1af472c1b12dea6e5eba628b17f77969b", 0xdc}], 0x6, &(0x7f0000002240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0x34, 0x3, 0x9, [{@remote, 0xf8ad}, {@loopback, 0x3}, {@empty, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @noop]}}}], 0xa8}}, {{&(0x7f0000002300)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="7ccb7198f808aae3d07d400814c14d99d85378ff3f5ac4c3d87330539935ca8f3234c63f37e23922bf3b", 0x2a}, {&(0x7f0000002380)="7d2a82289f8a88e047b5db7da91de93b22b6a57d1834ed809843500aad8ba901c75226cf44b2c1111ba362355f319bef80e99a13edc0b4ec6266c24c350f8a37ec0008badb29d0d16f5cc85f60b44d0e49d273ad447c37c7da72492b9343f8f08290e5acbbdda05a0084c65db642f2c565452c4ee94acbf1866c3c5a818abc9f00db82927f47fe79a6e5ef80cfcb1926b825364ba9dd3943a9fd72841c71b7c1ba84c840bfac19f9ee88bc5a60b99f6d7ae74c463d96dc45a8c89e", 0xbb}], 0x2, &(0x7f0000002480)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xa0}}], 0x5, 0x4e0c4) 18:47:14 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000420000012dbd7000fcb99300082500000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup2(r3, r2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x309840, 0x0) socket(0x29, 0x5, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 18:47:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001bbf2f6dcaf65d75e97aa9cc2e310a800ac1ce35e1e6c6df50d7afe8d03d8c059cd1aa0050ced20038ee79254c87e0a000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d0, 0x14, 0x100, 0x70bd25, 0x25dfdbfe, {0x8, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "999fdbc725df7bbb9d48862ce4d2e828e14d143b0570835f10522e3feaf3a5b5eb4d6fbe72d06d64d08266c3bedf633004a1d80d31b6bf0cca9854a48e6f1af5bd448c225b57308e4e9b79bd9b64a74be00b3b70d8f4051d76d296a47d75923deafa44496c105de3380832c3ce"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "2eaf04ee4a83b315cc735fb9059b51dd8c8fb93f6896849b87dee724ec73db3f32704e1469f28e4be725d6192371925965c85aa5f5663deb331fc652c0ec60fb1e1e39b81c1120f101ab3389384a70a03c03779684279d9617afd997ed0227dbfb06e6d2c657"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "3ddc1e99463da9dc26c01d9feaf0f9575888f965381ee2baeb91b3d0901b7ae66f2411d19f6a3d9bdd0e03f7066d03a89f5f56f4b5f25637a842679010aa838e6f99a4bfbee4b7c4468754d53e5d3ac68cc6aed5afa494c40ab7b1ec2c128794903322"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "fa532aab65d8c8eab539027186c184c2390b0e675ee3099b96b57d64e7207d84d9c6f4e0550c3603108809fb591a3cdf600524b73037215a5cf61c65803e80a60672867804fd09b73878f216beabf8d3da1c632e484f557dafdc92c900a71f956fb0fd107b6a152951a4325cf66d"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) close(r2) recvmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/132, 0x84}], 0x2}, 0x40010061) 18:47:14 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x20, 0x40, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8349b982e441d6602fb0cfe05de0de4cb463fe"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80a01, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "8349b982e441d6602fb0cfe05de0de4cb463fe"}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) openat$ptmx(0xffffffffffffff9c, 0x0, 0x98880, 0x0) 18:47:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f00003bf000/0x3000)=nil, 0x3000, 0x1000000, 0x110, 0xffffffffffffffff, 0x6d139000) open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x6, 0x4) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 18:47:14 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000081}, 0x48801) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0x9) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}}) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='9p\x00', 0x84000, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@cache_loose='cache=loose'}, {@timeout={'timeout', 0x3d, 0x6}}, {@common=@dfltgid={'dfltgid', 0x3d, r2}}, {@timeout={'timeout', 0x3d, 0x81}}, {@common=@dfltuid={'dfltuid', 0x3d, r4}}], [{@fowner_gt={'fowner>', r1}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) shmctl$SHM_UNLOCK(0x0, 0xc) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 18:47:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x2, [], [@pad1, @hao={0xc9, 0x10, @ipv4={[], [], @local}}]}, 0x20) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 270.179467][ T8207] IPVS: ftp: loaded support on port[0] = 21 [ 270.222572][ T8212] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.388110][ T29] audit: type=1804 audit(1594147635.106:4): pid=8217 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/1/bus" dev="sda1" ino=15784 res=1 [ 270.428038][ T7949] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 270.507139][ T8236] binder: 8209:8236 ioctl c0306201 0 returned -14 18:47:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000001a00)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={@remote, 0x35, r9}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x3000, 0x4) 18:47:15 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c00000000000001"]) r2 = socket$nl_crypto(0x10, 0x3, 0x15) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x1, 0x0, 0x2}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x5c, 0x25, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x45, 0x11, 0x0, 0x0, @binary="252357154df0f77523f8cdb6a4e481c5bd10dc44a0e91f29338d2bd107d54f042a2a6701d3c976393388ea21c043620de596be35786abdcee37e49da32ce71540d"}]}, 0x5c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 270.798179][ T7949] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 270.823360][ T7949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.882454][ T7949] usb 3-1: config 0 descriptor?? [ 270.912133][ T8207] IPVS: ftp: loaded support on port[0] = 21 [ 270.930588][ T8263] fuse: Bad value for 'fd' [ 271.053693][ T29] audit: type=1804 audit(1594147635.796:5): pid=8234 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/1/bus" dev="sda1" ino=15784 res=1 [ 271.128661][ T3526] tipc: TX() has been purged, node left! 18:47:15 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) [ 271.205967][ T29] audit: type=1804 audit(1594147635.806:6): pid=8242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/1/bus" dev="sda1" ino=15784 res=1 18:47:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x8e1) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x420000, 0x0) mq_timedreceive(r4, &(0x7f00000003c0)=""/4096, 0x1000, 0x100000001, &(0x7f00000013c0)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r5 = accept(r3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40e4}, 0x4000000) inotify_rm_watch(r0, r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='/proc/self/net/pfkey\x00', 0x414200, 0x0) [ 271.347183][ T29] audit: type=1800 audit(1594147635.816:7): pid=8234 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15784 res=0 18:47:16 executing program 4: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000300)=""/72, &(0x7f0000000380)=0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f00000002c0)={0x6, 'netpci0\x00', {}, 0xfff7}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xf0, 0xf0, 0xf0, 0x0, 0xf0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0xd8, 0x8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 18:47:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="1b977a1473d60c070c82dcb5086b4d4c65198d2e8b9c98543af0a95980e1c748db28f845dc624d32b51fff4a70268dd4ae2ce3c5a7a88dbfa7355256b3ea007f7eef3518b2dd675fa419f7fac763b9dd20290020e229833c084eba0c6a4656f7c0d492c313ed01c94f571d26553f003d05035894643be944020e77a876aedf4c7c3c39f397a55c29f7613f6853b909e3853127") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) [ 271.387706][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 18:47:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x5, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000040), &(0x7f00000000c0)=@udp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x8, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x2, 0xb, 0x5, 0x43445bc84b4022a4}, @ldst={0x3, 0x1, 0x3, 0x4, 0x5, 0x1, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0xb, 0xb, 0x3, 0xfffffffffffffff0}, @map={0x18, 0x4, 0x1, 0x0, r2}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 271.430476][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 271.510524][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 271.514403][ T29] audit: type=1804 audit(1594147635.996:8): pid=8217 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/1/bus" dev="sda1" ino=15784 res=1 [ 271.525189][ T8314] IPVS: length: 72 != 8 18:47:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x8e1) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x24) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x420000, 0x0) mq_timedreceive(r4, &(0x7f00000003c0)=""/4096, 0x1000, 0x100000001, &(0x7f00000013c0)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r5 = accept(r3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40e4}, 0x4000000) inotify_rm_watch(r0, r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='/proc/self/net/pfkey\x00', 0x414200, 0x0) [ 271.586576][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.609611][ T8319] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 271.641782][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 271.665639][ T8319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.714946][ T8319] IPVS: length: 72 != 8 [ 271.726037][ T8319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.735739][ T7949] asix: probe of 3-1:0.0 failed with error -71 18:47:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000400000000000000800b000100627269028008000200"/36], 0x3c}}, 0x0) [ 271.762386][ T7949] usb 3-1: USB disconnect, device number 2 18:47:16 executing program 1: r0 = memfd_create(&(0x7f0000000000)='%mimepe\x00\xeb\xd5\x00W,\xd4\xbfBp.\xdb,y\xc5\x7f\x100&\x133\x1d[\x04\xd7.\xe1\xf9\xa1|-\xb4\xc3\xe5\xfcB\x05h\x00\xb0\xd9\xd3:\xfd\x1c\xb5\xa5\x12\x02\xe0B\x1a\xca[\\\xa4HP\bt\xbd0\xf6H*v\xe8%\xd3\x994[\xef\xc0D\x00\x00\x00e\xc0\x8e8dJ\xcc\xd5PM\xe3\xaa\x1dx\x93\x01a\xa1\xb8\x9eX\x9e]\x0e\x9e\xcc\xbc\xd9x\xc3\xdd\xdfGtL\x94\xb1dB\xc2\x8b\xda\xcd~uiR\x16\xf2)$\xd4Q((\xaa\xda\xfdta\xb3G`\x85\xe5\xd3\aix\xc5\x9avJ3\xb5\xac\xc3J^\xf9\xe2\xeb\x1f]{\r\x92\xa3~\xbazB\xad\x8a\x96\x1c`\x0f\xc9\xef\x81\xacP\xc4g\xfe\xa0\x1e\xf9\xf0m\x05\x00\x00\x00\x00\x00\x00\x00r\b\xedp\xdd \xc15\xf5\x06\xc4\xb3\x13\xad\xbd\x00p\xa0M\xa1\xd5\x1aK\xeb!FH\xae\x98\x91\x05\x1b\xf7l\xb4\xb2z$\xc2\x02\xff\xc9\x9b\xac\xd6\x9c!%\xcf\f\xd1\xc6\x8e\xa0\xa8t\x1fs\x0e\xad5\x8a}L|\xd61\xe5\xe0\vQ\x1a\x816)>\xf7N\xc6\x93\xe5\xa0\xab\x8a\xf3L\xca\xfb#\xd6\xc2{\x15\x1f\x1f\xb6Ql+,\x9d\xe5y\x93\xb9\x95\x8cN\x0e\x1c\x04\xdb+\x89\xfcz\x11\xe8\x90W\xbbP\xd0\xa7\x1dzx\xe9\x1f\xfc\xb8\xf3\x14\xc2\xf0l\xf4\x9c\xc9\xec?(\x1f\xe8\xee\xe7\xd8\f-\x03\x19\x90\x86\xef\x1f\n\r\xf7\xe8\xa9f\x10\xbdr\xe4\x8b\xb4\x00o\xda{\xf2Y\b)\xeee*^\xe3\xfaw\xc9\x98\xd8\xe54\xcd\x03_u^\x19\fg\x00^\x01\xc2\x9eSmC\xa2Zvt\x14\x01Ic0\'\xe6\xcdK~\b\xb8Kv\x1c4\x90(\xf3^D\xa9y\xab\x15\x9a;\x1b~/EW\xa5^\xf0\x8e\xde{\x8d\x92Zc\xb4\x18\xccP{\xd9\x1c\xd2\x05^G7\xf8\xbe\x8a\xca\xbc\xf8\xdd7\x8a\x94HQ\x8c\xf1_W\xae\x04\x94zPN(R\xa0\xc5\x00@g\xe2;\xd3h\x98z\xe8\x18\xe2\xd5\x19\x0f\x12\xdf\x95Ks\xe2\x87\xe0`y\xd6=\xd5DT\x06\x9c\xfaC+PQV\xcb\xf44\x86+s\xa6\xa7#\xa1\x95\x15&&pk\x16\x8e\x01\x9f\x90\xd1\xa4\x9f\xc0\xf9$\xed\xfcM\x9f5e\xcb\x8e(\xbf\x82\xdd\xe3X\xf0q\x15\x110M\xed\xcf4\x12\x1b\xbcF\x91\x88J\n\x16\xfcg\x05\xf0\xcd\xc6\xe6\xcao\x85\xb92\xbahOE\xeaF!\xb4\x8e.\x1fL\x06z\x9d\xd2\xd3\x83,\xf5\xf6\xeb*J\xe9-\x1a0\xe6\xe0\xf5!\xbfB\x83LQ\t\x1d\xd3G\x87\xf1D)\xf5]\xf7u \"\x15\x8f\xb2\xacD\b\xb4\xe3\xe5\x1c\x0f\x17\x0f\x1a^\xdd:\x8d\x0fb\xd9\xb6\x88@\xe2\xdd\x8e:d\xf2\x8evp\xab\xc5\xf1\x13\x17(v\xa4\xb6W\x81O\xb8G\xe2\xe1\x90918\xcaU\r\xcc;3\x06\x80\xd7f\xa6}\x10\xcc\xcd^5\x9a\x88\xa7\xd6\x96\xb6p!a\xdb\xfc\xda\xd5\\\xac\x99\x10\xed\x97\xdfk}8\x1d\xa8\x97\x81\x02y\x9e\x05\x98}$\x91\xf7Hg<8\xe4e\x9a\xa4~!>r\x16\xb5VJ\xf6H0\xf3\xb5n\xed\xeb\xf60\"\xa4\x8d\b\xf9`N\x15\x96\xd6\x96\x8a\xf4\x96K$\xfe\xeb\xe2,\x05/\xe4Y@r\xa3\xf8\x86\x8c}\x0e\xfej\xbd\x861\xc4\x00\x02\x92\xff\xe8\x8f?D~\xeb\xf8\x81_\v\x9e\x1c\xafU\x8c\xf7\xd33\x9f\x92\xabxB\x17>\x98H\xc7\xde\xfa\xc4/E\xa3\x89\x00\xc7Y\xd54\xdc\xa1nX9\x01\xeb\xaf\xd7\xd9PfLc\x17y{j\xb986h\x8e\x94\xf0\x03\xb5\xa6\xfb\xef\x96Iz\xc4m\xe9\xb8\xd6\x11\xd8\xb5`\x01\x88\x13\xfb\x12\xc2w\x9c\ace\xb2\xbb\xc7', 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000440)={0xa10000, 0x6, 0x1ff, r3, 0x0, &(0x7f0000000400)={0xa30903, 0x20200, [], @p_u8=&(0x7f00000003c0)=0x9}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8}, 0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x102, 0x8, 0x6, 0x9}, 0x10) fallocate(r0, 0x3, 0x0, 0x40000004) 18:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x201, 0x0, 0x3, 0x7, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000006c0)={0x0, 0xffe0}, 0x8) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000040)=0x5) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x161, 0x0) ioctl$VT_RELDISP(r0, 0x5605) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0xc010) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 271.902930][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.989225][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.115030][ T8358] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 272.257598][ T7949] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.632876][ T7949] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 272.661902][ T7949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.698783][ T7949] usb 3-1: config 0 descriptor?? [ 272.967469][ T7949] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 18:47:17 executing program 2: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="020026bd7000fbdbdf250d00000008000500000020012c000280060002004e2400689e0d0d00010000009ec3ab1c3038d08a080009ca000000000800050040"], 0x50}}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x25ba}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 18:47:17 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r4 = accept4(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000340)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0xb2e, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004400e) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000140)='./file1\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_off='index=off'}]}) 18:47:17 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000019000100000006005b040002ff0100000f00000000000000003054c86bc480b39a89eae0000001e00000010005000000000000000000000000000a0001000000000000f5e1d06fdd7479e2d0a7922eb20f46aeb0ab731227d938bf65bc4ae39a73ae3f1f001c3d967db7d3a061180b20b006626e05580a92bc1583e68659dae5125e9bc651d5c49d7f5965b45c3ed6b41f8f77", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'caif0\x00'}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000040)={0x9}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x20, 0x70bd2b, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x5c, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20040881) dup(0xffffffffffffffff) 18:47:17 executing program 1: r0 = memfd_create(&(0x7f0000000000)='%mimepe\x00\xeb\xd5\x00W,\xd4\xbfBp.\xdb,y\xc5\x7f\x100&\x133\x1d[\x04\xd7.\xe1\xf9\xa1|-\xb4\xc3\xe5\xfcB\x05h\x00\xb0\xd9\xd3:\xfd\x1c\xb5\xa5\x12\x02\xe0B\x1a\xca[\\\xa4HP\bt\xbd0\xf6H*v\xe8%\xd3\x994[\xef\xc0D\x00\x00\x00e\xc0\x8e8dJ\xcc\xd5PM\xe3\xaa\x1dx\x93\x01a\xa1\xb8\x9eX\x9e]\x0e\x9e\xcc\xbc\xd9x\xc3\xdd\xdfGtL\x94\xb1dB\xc2\x8b\xda\xcd~uiR\x16\xf2)$\xd4Q((\xaa\xda\xfdta\xb3G`\x85\xe5\xd3\aix\xc5\x9avJ3\xb5\xac\xc3J^\xf9\xe2\xeb\x1f]{\r\x92\xa3~\xbazB\xad\x8a\x96\x1c`\x0f\xc9\xef\x81\xacP\xc4g\xfe\xa0\x1e\xf9\xf0m\x05\x00\x00\x00\x00\x00\x00\x00r\b\xedp\xdd \xc15\xf5\x06\xc4\xb3\x13\xad\xbd\x00p\xa0M\xa1\xd5\x1aK\xeb!FH\xae\x98\x91\x05\x1b\xf7l\xb4\xb2z$\xc2\x02\xff\xc9\x9b\xac\xd6\x9c!%\xcf\f\xd1\xc6\x8e\xa0\xa8t\x1fs\x0e\xad5\x8a}L|\xd61\xe5\xe0\vQ\x1a\x816)>\xf7N\xc6\x93\xe5\xa0\xab\x8a\xf3L\xca\xfb#\xd6\xc2{\x15\x1f\x1f\xb6Ql+,\x9d\xe5y\x93\xb9\x95\x8cN\x0e\x1c\x04\xdb+\x89\xfcz\x11\xe8\x90W\xbbP\xd0\xa7\x1dzx\xe9\x1f\xfc\xb8\xf3\x14\xc2\xf0l\xf4\x9c\xc9\xec?(\x1f\xe8\xee\xe7\xd8\f-\x03\x19\x90\x86\xef\x1f\n\r\xf7\xe8\xa9f\x10\xbdr\xe4\x8b\xb4\x00o\xda{\xf2Y\b)\xeee*^\xe3\xfaw\xc9\x98\xd8\xe54\xcd\x03_u^\x19\fg\x00^\x01\xc2\x9eSmC\xa2Zvt\x14\x01Ic0\'\xe6\xcdK~\b\xb8Kv\x1c4\x90(\xf3^D\xa9y\xab\x15\x9a;\x1b~/EW\xa5^\xf0\x8e\xde{\x8d\x92Zc\xb4\x18\xccP{\xd9\x1c\xd2\x05^G7\xf8\xbe\x8a\xca\xbc\xf8\xdd7\x8a\x94HQ\x8c\xf1_W\xae\x04\x94zPN(R\xa0\xc5\x00@g\xe2;\xd3h\x98z\xe8\x18\xe2\xd5\x19\x0f\x12\xdf\x95Ks\xe2\x87\xe0`y\xd6=\xd5DT\x06\x9c\xfaC+PQV\xcb\xf44\x86+s\xa6\xa7#\xa1\x95\x15&&pk\x16\x8e\x01\x9f\x90\xd1\xa4\x9f\xc0\xf9$\xed\xfcM\x9f5e\xcb\x8e(\xbf\x82\xdd\xe3X\xf0q\x15\x110M\xed\xcf4\x12\x1b\xbcF\x91\x88J\n\x16\xfcg\x05\xf0\xcd\xc6\xe6\xcao\x85\xb92\xbahOE\xeaF!\xb4\x8e.\x1fL\x06z\x9d\xd2\xd3\x83,\xf5\xf6\xeb*J\xe9-\x1a0\xe6\xe0\xf5!\xbfB\x83LQ\t\x1d\xd3G\x87\xf1D)\xf5]\xf7u \"\x15\x8f\xb2\xacD\b\xb4\xe3\xe5\x1c\x0f\x17\x0f\x1a^\xdd:\x8d\x0fb\xd9\xb6\x88@\xe2\xdd\x8e:d\xf2\x8evp\xab\xc5\xf1\x13\x17(v\xa4\xb6W\x81O\xb8G\xe2\xe1\x90918\xcaU\r\xcc;3\x06\x80\xd7f\xa6}\x10\xcc\xcd^5\x9a\x88\xa7\xd6\x96\xb6p!a\xdb\xfc\xda\xd5\\\xac\x99\x10\xed\x97\xdfk}8\x1d\xa8\x97\x81\x02y\x9e\x05\x98}$\x91\xf7Hg<8\xe4e\x9a\xa4~!>r\x16\xb5VJ\xf6H0\xf3\xb5n\xed\xeb\xf60\"\xa4\x8d\b\xf9`N\x15\x96\xd6\x96\x8a\xf4\x96K$\xfe\xeb\xe2,\x05/\xe4Y@r\xa3\xf8\x86\x8c}\x0e\xfej\xbd\x861\xc4\x00\x02\x92\xff\xe8\x8f?D~\xeb\xf8\x81_\v\x9e\x1c\xafU\x8c\xf7\xd33\x9f\x92\xabxB\x17>\x98H\xc7\xde\xfa\xc4/E\xa3\x89\x00\xc7Y\xd54\xdc\xa1nX9\x01\xeb\xaf\xd7\xd9PfLc\x17y{j\xb986h\x8e\x94\xf0\x03\xb5\xa6\xfb\xef\x96Iz\xc4m\xe9\xb8\xd6\x11\xd8\xb5`\x01\x88\x13\xfb\x12\xc2w\x9c\ace\xb2\xbb\xc7', 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000440)={0xa10000, 0x6, 0x1ff, r3, 0x0, &(0x7f0000000400)={0xa30903, 0x20200, [], @p_u8=&(0x7f00000003c0)=0x9}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8}, 0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x102, 0x8, 0x6, 0x9}, 0x10) fallocate(r0, 0x3, 0x0, 0x40000004) 18:47:17 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x9a3aa500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$iso9660(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0xc050787274, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0xfffffffffffffffd, 0x2) open(&(0x7f0000001840)='./bus\x00', 0x80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:47:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000000000000000000000000000829a253cc9b171d21cb9b38a791e6e9b480b8f559cc3a21f999daefeca8dba38b188fc28d4c70af95f7dcd6792172df6116e1872a560f90e1b80add9e65ccd630cdca60214f40a67b29203a7d130f3e7a5ba1570879cf2f4b3e25eb59f3917eddf04aaa654baf14235930c724f"], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) connect$inet6(r1, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000900)='devlink\x00') [ 273.009166][ T7949] asix: probe of 3-1:0.0 failed with error -71 [ 273.104104][ T7949] usb 3-1: USB disconnect, device number 3 [ 273.306902][ T8401] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 273.321647][ T29] audit: type=1804 audit(1594147638.066:9): pid=8394 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/4/bus" dev="sda1" ino=15806 res=1 18:47:18 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'system.', 'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x13}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x32) [ 273.491469][ T8401] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 273.682110][ T8401] overlayfs: filesystem on './bus' not supported as upperdir 18:47:18 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000000f3280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000340)) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffffff000000090001006866736300010000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c0000002c00270e00ffff0000000000a3e1a3de", @ANYRES32=r3, @ANYBLOB="00000000000000000300000009000100666c6f77000000005c000200580009805400010007000100637400002c0002800800060000000000180001000000000000000000000000000000000000000000080005"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 273.995486][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.005048][ T29] audit: type=1804 audit(1594147638.747:10): pid=8425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113855408/syzkaller.GXhnAZ/4/bus" dev="sda1" ino=15806 res=1 18:47:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffcf5, &(0x7f0000000300)="893c8aa1eeea37") syz_usb_disconnect(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) 18:47:18 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00', r3}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x500, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x3}, &(0x7f0000000040)=0x8) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) write$P9_RXATTRCREATE(r7, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r6, 0x6}, 0x8) syz_usb_connect(0x0, 0x36a, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000dcdfda081107000973dc00000001090258030100000000090420000a24a41000030937090b"], 0x0) 18:47:19 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000200)=0x1000) r5 = dup(r3) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000000)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x7, 0x2, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname(r6, &(0x7f0000000180)=@generic, &(0x7f0000000080)=0x80) 18:47:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) mlockall(0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x6c2040, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r3 = open(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048049}, 0x20044800) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x33) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) [ 274.683410][ T7949] usb 5-1: new high-speed USB device number 2 using dummy_hcd 18:47:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x14d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) tkill(0x0, 0x80e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000280)=""/210) ptrace$cont(0x18, r0, 0x0, 0x0) [ 275.047378][ T7949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.081824][ T7949] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.102532][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.130028][ T7949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.139579][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:47:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x3) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x3) pidfd_open(r4, 0x0) waitid(0x0, r3, &(0x7f00000001c0), 0x1, &(0x7f0000000240)) [ 275.183923][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.205972][ T7949] usb 5-1: config 0 descriptor?? [ 275.217272][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 275.229470][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.264796][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 18:47:20 executing program 1: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xfffeffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0) [ 275.456866][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 275.577565][ T17] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 275.597712][ T17] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.639825][ T17] usb 4-1: config 0 has no interface number 0 [ 275.652914][ T17] usb 4-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 275.667860][ T17] usb 4-1: Dual-Role OTG device on HNP port [ 275.680644][ T8473] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 275.687588][ T17] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=dc.73 [ 275.697315][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.710288][ T7949] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 275.717555][ T17] usb 4-1: config 0 descriptor?? [ 275.760591][ T8479] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 275.813264][ T7949] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 18:47:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a28093020600010001fd01020000003900090035000c00060000001900054006000000000022dc1338d54400009b84136ef75afb83de4411000b00c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f6, 0x0) [ 276.051176][ T7949] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 276.097518][ T8455] usb 4-1: USB disconnect, device number 2 18:47:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0856448d87df0000009100b0a6c8f96a52f92900000a0005003c00000000b3710200000000000a5cea85a96fbc85b50d5334d499c6e7ba9f5cde8d730cae1ff32911e800"/87], 0x48}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000091) 18:47:20 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xcf3) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x65}]}]}, 0x28}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:47:21 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000729d5001477000200000707000095dfa921629b802a0fec90f3d114640165f59495d8d17175cc147b6c42f2518ebc8786cebbbd82583d3ef039234e41fb9cdb05ff5f4fc48ee29fa9875a6e44472afe8ca5", @ANYRES32=r1, @ANYBLOB="130f66000a0002"], 0x42e}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18:47:21 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000002400070700eebfde00000001000b0000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, r1) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/87, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 276.567541][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:47:22 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000140)='R', 0x1}, {&(0x7f0000000080)="82", 0x1}], 0x2, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x200001000000067, &(0x7f0000000000)=0x1000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) 18:47:22 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000940)='./file0/bus\x00', 0x4, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x20440, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2102, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x4, 0x10001}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @remote, 'wg1\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="cbb3a73148b87bfc604d0e40cad549f1702380360ad45cee34729dc4094e1a68a3d1cf933511215f1f225d9bff809119a3228ca876005ebbe546", 0x3a}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4c50}}], 0x30}, 0x20004040) 18:47:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, "5f12c4556bc58db3b37e6b8c5017bee6073fab"}, 0x1b, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x2, 0x410900) 18:47:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="00bac99cede4d3d07793819060293eea00000000000000f45fa13ab9fccc33f3be794acc4d39b991fe01d515f2f5c53579398f61228e0501112ddf14b71a9f83f86945bfa06135d0fe0263d2c4af51407cd0fbc01208a26f15f3a0ee835008796f88bdd3dd32ce49b97b98f960a4d779513a828d2f7de84573ec0fd2d1e06c169f6da166de476f72de5cd25f1fb6e616cfda8e6d8b1306c81b3176bda2af71c0870425f7ad7e6c6763e23917fb49b321e285b85356727396863f1f567db91b07c3f83c30727f868d6ffc6fc0e9960363b170798eff8577081e307d61faf9d7065896f7"]) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x5e22, 0xffff, @mcast1, 0x3f}], 0xfffffffffffffe24) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x6, 0x30}, 0xc) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x1a) sendfile(r0, r6, 0x0, 0x80001d00c0d0) [ 277.510027][ T7949] usb 5-1: USB disconnect, device number 2 18:47:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x6, 0x3, 0x14}) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000000)=""/45) r4 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:23 executing program 5: mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') recvmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000001c0)=""/74, 0x4a}], 0x3, &(0x7f0000000140)=""/29, 0x1d}, 0x10000) sendfile(r0, r1, 0x0, 0x1) 18:47:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="450000000005eb3030b1a74b05947c460664c85545be66ca14333873bc33760036f300000100007d617cbe", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000040)=0x28f) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x800000000000000, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:47:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[{}, {0x3, 0x2, 0xe1, 0x101ff}, {0x0, 0x20, 0x12}, {0xab9, 0x5}]}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xffffffffffffffda, 0x84835, &(0x7f0000000000)={0xa, 0x4e24, 0xa000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x43}, 0xfffffffffffffea3) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) bind$tipc(r2, 0x0, 0x0) [ 278.596363][ T3526] tipc: TX() has been purged, node left! 18:47:23 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffffffffffffbd17) 18:47:23 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000fe00"/21], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:47:23 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x1607000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r2, r3) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc, 0x1, r6, &(0x7f0000000200)="8b3359170219f9a3341a05d8c319770ab71292f53b0cc8b192dfb3e9054d1e792c717d5a3acd04db28a54ff9b7017f2a86ae10a4060cbe8b6955b76f99c2e15fdb0b8cece5d32dea360906dc5e7d30c29ed477565a485ca4d7bc5da62012bd82af8c7a8d8cddb71a889f000a379b55ff264639f9b4d25f44e839162a1f", 0x7d, 0x7, 0x0, 0x3, r7}]) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r8, 0x2008001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 18:47:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4000000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000003b0000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c40)=@newtfilter={0xa0, 0x2c, 0x20, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x68, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_EMATCHES={0x4}]}}, @TCA_RATE={0x6}]}, 0xa0}}, 0x0) r9 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 279.136502][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:47:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x3, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x158, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x81, 0xac, "5cd8cb452b3a5cee84671b9d0c455c946972d411f01f8033943160bfba74ffda0f0f8fdb9255e06c9f37e2f3ade64529c7a2fb2110bea1eb6fb9c6f3363e7621b1ee6d497d921a4a7dedc766612f277fe71f8f96ea8239599feb520c15aaccd0c4ac5f6a2043ed9e87bfe7e39da33cb6e78da536cdd284b784ec02f9d1"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3df}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9e, 0xac, "e38149cc0b4e02d612f640546c5dd5220ad1c97c91c24e64a15246b9a3e249d3ffb5d799771a133dad9074e3102afe415bf94b3b6a2b29ed87c1f5494a6d2692393635ae2baf24208f9cf3c639cac2623787bc18ade24a79691fe629233bd50881e21292bcb4338d3bba23d21afe7e7c72fc6004a740c37543e122f116320fc8fecc846f9a9390034d4eb3c0553f070f1bb67b75e83aff70a8e0"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x400, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x1, &(0x7f0000000280)=0x0) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) [ 279.335870][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:47:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000100)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x4}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xd1}, @IFLA_MACSEC_ES={0xffffff96, 0xa, 0x2}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', r6}) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x40}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) setsockopt$inet6_group_source_req(r8, 0x29, 0x2, &(0x7f0000000440)={0x3, {{0xa, 0x4e24, 0x8000, @mcast2, 0x3ff}}, {{0xa, 0x4e23, 0x6, @ipv4={[], [], @local}, 0x4}}}, 0x108) 18:47:24 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="230000005e0081aee4050cfe00b093ae13008bc609f6d8181942ee995b274dedffffff", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000001900)=""/4090, 0xffa}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000340)=""/109, 0x6d}], 0x5}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) [ 279.637018][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:47:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000600)={0x3ff, 0xb, 0x1, 0x8, r4}, &(0x7f0000000640)=0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797af7d01d38eca89515ff072aa8c6599607aafc8e5255f1cb5497689d2336434e87"], 0x3a) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18:47:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1f, 0x180a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x40002, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ffff, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x5001c, 0x1000, 0x0, 0x0, 0x8000000, 0x7, 0xfffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010200000000000000001"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='ip6tnl0\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x8001a0, 0x403, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80000000100000000122e25d30806", 0x0, 0x403, 0xe00, 0x22d}, 0x28) clone(0x20023023ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 279.749798][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.049731][ T8628] kvm: emulating exchange as write [ 280.373918][ T29] audit: type=1800 audit(1594147645.118:11): pid=8642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15848 res=0 18:47:28 executing program 3: io_setup(0xbd0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x8, 0x80000000000024d, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f0000000340)='-selg&\x01\x00boxn\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x64000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 18:47:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x53, @private1={0xfc, 0x1, [], 0x1}, 0x1ff}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000100)=[0x8001, 0x916, 0x4, 0x2, 0x8, 0x8000, 0xff01], &(0x7f0000000140)=[0x7], &(0x7f0000000180)=[0x9, 0xfff, 0x8001, 0x100, 0x72, 0x3, 0x3, 0x2]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r2, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x14, 0x6c, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x46) 18:47:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x0, 0x8002}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3, 0x4000) ioctl$FITHAW(r2, 0xc0045878) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) close(r1) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000240)=""/131) 18:47:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000395000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="66b9800000c00f326635000100000f30f08194e08cc0b50f0fc99a660f380bfe66b99002000066b8c300000066ba000000000f306526643665650f20860f20e06635002000000f22e0ba210066b832a9000066efb845018ed8660fd97262", 0x5e}], 0x1, 0x1, &(0x7f0000000400)=[@cstype0={0x4, 0x8}, @dstype0={0x6, 0x5}], 0x2) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000001c0)) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000000)) 18:47:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235004000000f30d075f5450f090f20e035000040000f22e026660f3881694f0f0f5c193a9af342d8860080000066b820018ee82e66420fc73366ba2000ed", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2100, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 283.978475][ T8851] IPVS: ftp: loaded support on port[0] = 21 18:47:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7e13, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000280300000000000098010000000000009801000098010000900200009002000090020000900200009002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000010000000000000000000600000000000000300198010000000000000000000000000000000000000000c000737472696e67000000000000000000000000000000000000000000000001000000006b6d7000000000000000000000000000ea7c5e89c8401b46ee142a8d52160cbc0b726fe53e8538bbdadc9ddd538e5910669144ed8f5c28b845bd7239f20dcbc7c9a63f5f5cf9b0840bace7a91c206ab34ea211db749a7ebd146b29002d52bd7c314acfa1e784729b6eab7dcfe83893eebf5420c4618cbea4171ed61cfbde838a517cdb269c92ba1ab99ff8fc1dc61f802700000000000000000000006800435400000000000000000000000000000000000000000000000000000002000000000000000000000000707074f00000000000000000000003000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000060005345548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000e1ff000000000000000000000000000004feffffff7d52f43901c2b9f7d9a0336469ec28b888470a40f82109b7ae8d9433a8936748e9d0f3ba9218700bec0f2f43942b073d77adbab317da96289041d48af0e27b679bfe4299b52fd77f3b3ebc04ed78"], 0x1) socket$kcm(0x2, 0x0, 0x2) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x7, 0xa7, 0x1, 0x6, 0x0, 0x7}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x208, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x170, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cf6ee00}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d4579e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21676d7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3950e0db}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x468b6b25}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29ef5a52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c6cddef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x608b063b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c8d127}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610bd05a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x179085a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79d6eba2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540d4deb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f06755a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45b02320}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b6e8b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x15555555555555f8, &(0x7f0000000140)=[{&(0x7f0000000b40), 0x700}], 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 18:47:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x3, 0x8, 0x20}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000040)=0x10000, 0x9) [ 284.373258][ T8893] xt_CT: No such helper "pptš" 18:47:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b85f6200000f23c00f21f835010000000f23f867f4c4c1b573d3070f015b00f30f09670f21eff30fc7ffc4e37d44928ed5723400360f01c53ed8eb", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000140)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf37]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x38, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) [ 284.701403][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.774713][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.794640][ T7664] usb 4-1: new high-speed USB device number 3 using dummy_hcd 18:47:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @ipv4={[], [], @private=0xa010102}, @mcast2, {[@dstopts], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "000600", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}}}}}}}}}, 0x76) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) 18:47:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x6c, 0x4, [], [@enc_lim, @calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0xe963, [0x43ac3b2d, 0x3]}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x2}]}, 0x30) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x1, 0xffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 18:47:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000003c0)={[0x8, 0x7, 0xfffffffb, 0x8dde, 0x21, 0x4, 0x401, 0x6, 0x80000000, 0xfff, 0x6, 0x8, 0xffffffff, 0x1ff, 0x3, 0x7, 0x9, 0x4, 0x0, 0x3, 0x6, 0x9, 0x1, 0x7, 0x400, 0x4, 0xeea, 0xfff, 0x400000, 0x5, 0x9, 0x2, 0x8000, 0x7, 0x10001, 0x7, 0x7b5c, 0x7fff, 0x2, 0x900, 0x5, 0x1000, 0x2835, 0x20, 0x4, 0x3f, 0x9, 0x4, 0x3ff, 0xb3a, 0x9, 0xfffff19d, 0x170, 0x1, 0x7fff, 0x7, 0x6, 0x7f, 0x5, 0x7, 0x2, 0x6, 0x8, 0x4, 0x4555, 0x4, 0x6, 0x40, 0x1, 0x0, 0xffff, 0x0, 0x10001, 0x0, 0x1, 0x6, 0x9, 0x80000000, 0xff, 0x4, 0x4, 0x7fffffff, 0x8, 0x0, 0x80000000, 0x5, 0x1, 0x8, 0x4, 0x0, 0x9b4, 0x4, 0x6, 0x4a, 0x1, 0x7f, 0x7, 0x3f, 0x9, 0x0, 0x10001, 0x80000000, 0x5, 0x40, 0xbc5, 0x3, 0x10001, 0x8, 0x68, 0x1, 0x40, 0x6, 0x0, 0x276c, 0xbef9, 0x80000001, 0x7, 0x3, 0x6, 0x6, 0x8, 0x400, 0x4, 0x81, 0x200, 0x5, 0x2, 0xd31, 0x1, 0x1, 0x2, 0x60f0373f, 0x9, 0x2, 0xfff, 0x1c, 0x7, 0x10001, 0x1, 0x4, 0x1ff, 0xffff, 0xfff, 0x7, 0x7fffffff, 0x20, 0x1, 0x0, 0x63, 0x0, 0x7fff, 0x0, 0x6, 0x401, 0xfffffffa, 0x0, 0x3, 0xffffffff, 0x8, 0xff, 0x7fffffff, 0x2, 0x0, 0x200, 0x3, 0xfff, 0xc72, 0xba, 0x4, 0xbc, 0x3f, 0x10001, 0x1, 0x4, 0x6, 0x0, 0x40, 0x3ff, 0x8, 0x0, 0x81, 0xef47, 0xfffffffe, 0x100, 0x8f, 0x27, 0xe82, 0x20000000, 0x6, 0x6, 0x9, 0x6, 0x7, 0x44, 0xd2a, 0xfffffff9, 0xa8, 0x80, 0x3, 0x0, 0x3, 0x5, 0x81, 0x2, 0x8, 0x4, 0x9, 0x800, 0x237, 0x0, 0x1, 0x79, 0x7ff, 0x7c, 0x5, 0x8, 0xf, 0x2, 0x2, 0x3, 0x7, 0x7, 0xfff, 0x3, 0xffffff81, 0x60096000, 0x4, 0x791, 0x8, 0x2, 0x6, 0x8, 0x0, 0x8, 0x6, 0x6b9, 0x20, 0x0, 0x9, 0xfffffff9, 0xfffff75a, 0xfffffff7, 0x79, 0x100, 0x7, 0xc91145af, 0xf1b, 0x2, 0x7, 0x1, 0x38e, 0xc13, 0x7fff, 0x401, 0x2, 0x20, 0x1bf, 0x9, 0xfff, 0x8, 0x10000, 0xfffffffc, 0x1, 0x3ff, 0x800, 0x8664, 0x5, 0x9, 0x8, 0x80000000, 0x81, 0x7fff, 0xffffd9d4, 0x2, 0x7, 0x9, 0x200, 0x8, 0x3, 0x1, 0xffff, 0xfff, 0x9, 0x80000000, 0x2e, 0x1, 0x2, 0x800, 0x3, 0x4, 0x1f8c, 0x0, 0x1, 0xf3d, 0x1, 0x10001, 0x7, 0x1000, 0x1, 0xb7, 0x1000, 0x9e, 0x28000000, 0x1, 0x1, 0x7ff, 0x3ff, 0x7d, 0x4, 0x5, 0x3, 0x3c47, 0x6, 0x126d, 0x4, 0x5, 0x3, 0x1, 0x8, 0x200, 0x5, 0x7, 0x5019, 0xfffffe00, 0x2, 0x3, 0x3ff, 0x80000000, 0x3ff, 0xfffffffe, 0x7, 0xdc65, 0x77d, 0x3f, 0x2, 0x7ff, 0x7f, 0x0, 0x8930, 0xfffffffc, 0xff, 0x4, 0xff, 0x81, 0x6, 0xa5af, 0x7, 0x6, 0x9, 0x1ff, 0x7, 0x32445c8c, 0x4, 0x3, 0x7323, 0x100, 0x503, 0x3, 0xfffffff7, 0x0, 0x1, 0x0, 0x7, 0x889, 0x5, 0xfffffffd, 0x4, 0x4, 0xdc8, 0x9, 0x4f03, 0x3, 0x3, 0x6, 0x3, 0x8, 0x79, 0x3, 0x383b4427, 0x4, 0x1, 0x80000000, 0x8001, 0x6, 0x5, 0x401, 0x20, 0x0, 0x4, 0x80000000, 0x5, 0x3, 0x0, 0x4, 0x2, 0x8000, 0x0, 0x7, 0x1, 0x4, 0x7fffffff, 0x0, 0x0, 0x7fff, 0x2, 0x8, 0x81, 0x7, 0x0, 0x2, 0xa3, 0x3ff, 0x0, 0x4, 0x3ff, 0x6, 0xfffffc01, 0x0, 0x3, 0x2, 0x0, 0x3, 0xb635, 0x0, 0x7ff, 0xfffffff9, 0x20, 0x2, 0x2, 0x9, 0x101, 0x57e, 0x6, 0x7, 0x4, 0x2d29, 0x2de, 0x7, 0x4, 0x3, 0x3ae, 0x0, 0x7f, 0xb7, 0x3, 0xff, 0x1, 0xe201, 0x5, 0x446a, 0x3, 0xfffffff9, 0x569, 0x1, 0x5, 0x8, 0x101, 0x44af, 0x461e00, 0x2, 0x1, 0x401, 0x9, 0x9, 0x8, 0x39eb4daf, 0x8, 0xd4, 0x4, 0x7fffffff, 0x80000001, 0x401, 0x1, 0x7, 0x5, 0x4, 0x80000000, 0x8, 0x4, 0x7f, 0xd1a9, 0x6, 0x6, 0x81, 0x9, 0x43, 0x2, 0x80000000, 0x101, 0x9, 0xff, 0xfffff800, 0xff, 0x4c, 0x6, 0x0, 0xdf59, 0x10000, 0x3ff, 0x5, 0x1, 0x5, 0x8000, 0x3ff, 0x7fb1, 0x3ff, 0x7, 0x6e6, 0xb3, 0x87, 0x3, 0x9, 0xfffff125, 0x2, 0x20, 0x0, 0x7fff, 0x1a7f, 0x8, 0x7, 0x9, 0x3, 0x2000edd9, 0x81, 0x1f, 0x6a, 0x8, 0x9, 0x3f, 0x649, 0x3f, 0xffff0000, 0x753a0277, 0x1, 0x8, 0x0, 0x7ff, 0x5, 0xfffffff8, 0x1, 0x7, 0x1, 0x7, 0x2, 0x0, 0x7, 0x10001, 0xff, 0x3, 0x5, 0xf38, 0xffffff81, 0x1, 0x8, 0x8, 0x3, 0x1, 0x80000001, 0x6, 0x8, 0x5, 0x30, 0x6, 0x0, 0x400, 0x3, 0xffff8000, 0x4, 0x1f, 0x5, 0x8000, 0x0, 0x657e, 0x7ff, 0x8, 0x7, 0x1ff, 0x3, 0x60, 0x4, 0xfff, 0x1ff, 0x2, 0x24000000, 0x9, 0x5, 0x40, 0x80000001, 0x9, 0x8, 0x1, 0x6ad, 0x5, 0x2, 0x6, 0x0, 0x8, 0x75d, 0xcbe, 0x5, 0x1ff, 0x0, 0xfffff3a7, 0xffff0001, 0x80000000, 0x7, 0x401, 0x6, 0x81, 0x100, 0x84, 0x9fc, 0x0, 0x7f, 0xff, 0xfffffc00, 0x2d4a, 0x1000, 0x3, 0x19, 0x8, 0x1, 0x100, 0x10000, 0x3, 0x8000, 0x5, 0xfffffff8, 0x1, 0x4, 0x7f, 0x0, 0x101, 0xffffff01, 0x7a53, 0x0, 0x2a5aa64b, 0x7, 0xcd7, 0x6, 0x101, 0x0, 0x2, 0x101, 0x3ff, 0x40, 0x9, 0x7ff, 0x0, 0x81, 0x4, 0x2, 0x9, 0x54, 0xfffffff8, 0xf0000000, 0x6, 0x1, 0x1, 0x81, 0x4, 0x0, 0x1, 0x9, 0x8, 0x4, 0x5, 0x81, 0x2b89, 0x10001, 0x2, 0x7fff, 0xf7f, 0x6, 0x9, 0x9, 0xc5f2, 0xce8, 0xf593, 0x1, 0x3, 0x50a0507c, 0x3, 0x1f, 0x7, 0x80, 0x6, 0xbf, 0x7fffffff, 0x6c, 0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x7, 0x6, 0x6, 0x5, 0x5, 0x0, 0x800, 0x6, 0x8, 0x8, 0x480, 0xa3c, 0x2, 0x400, 0x51cd, 0x1, 0x6, 0xae42, 0x8f83, 0xfff, 0x7fffffff, 0x0, 0x7, 0xfffffff8, 0x1, 0x0, 0x8, 0xfffffbff, 0xfffffffb, 0x5, 0x1000, 0xfffffffc, 0x0, 0x2, 0xff, 0x362beae9, 0x8f, 0x5, 0x6, 0x8001, 0x6, 0x8, 0x8, 0x6, 0x3, 0x8, 0x80000001, 0x10000, 0x8, 0xcc1, 0x5cd, 0xafb, 0x8, 0x1, 0xcbab, 0x5, 0x4, 0x21, 0x1, 0x6, 0x1, 0x1, 0x2, 0x7fffffff, 0x7fe00000, 0x7, 0x7fff, 0x0, 0x0, 0x8, 0x20, 0x1, 0x8, 0x28033534, 0x6, 0x70000000, 0x7, 0x27cd, 0x2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0x0, 0x7, 0x200, 0x9, 0x1ff, 0x10001, 0x2, 0xffffffff, 0x4, 0x8, 0x3f, 0xc8, 0x15395be7, 0x5, 0xa7e, 0x418e, 0x2, 0x5, 0xdf8, 0x8, 0x0, 0x7fffffff, 0x2, 0x4, 0x8001, 0x99, 0x3, 0x9, 0x80000001, 0x0, 0x7, 0x1, 0xfffffffb, 0x33, 0x79, 0x4, 0x6, 0x1, 0x9fe, 0xffffffff, 0xfa, 0x1, 0x5, 0x2, 0x0, 0xfffffff7, 0x101, 0x20, 0x8, 0x3, 0xa8cd, 0x6, 0x3, 0x8, 0x4, 0x0, 0x400, 0x794f, 0x20, 0x0, 0x1, 0x0, 0x0, 0x9, 0xf4e9, 0x20, 0x1, 0x7f, 0x9, 0x4, 0x59d4cc45, 0x489, 0x27, 0xa9a, 0x7ff, 0x4, 0xac5, 0x0, 0x2, 0x8, 0x6, 0x1, 0xfffffffc, 0x8260, 0x8001, 0x66, 0x32, 0x1800, 0x276, 0x7, 0xd98c88, 0x6, 0x3, 0x5, 0x9, 0x800, 0x6, 0x9, 0x80, 0x80, 0x5ea, 0x4, 0x8, 0x0, 0x8001, 0x2, 0x8, 0x4, 0xfff, 0x1ff, 0x2, 0x9, 0x2, 0x1, 0xe3, 0x400, 0x1, 0xffff, 0x14, 0x4, 0x4, 0x9, 0x5, 0xffffffff, 0x40, 0x3, 0xfffffff7, 0x1, 0xa3a, 0xbeb, 0x1, 0x80000001, 0xd11, 0x1, 0x5, 0x4, 0x5c2, 0x9, 0x8, 0x14, 0x3, 0x7bc, 0x20000000, 0xacf, 0x401, 0x67e, 0x55f, 0x5, 0x7, 0xb, 0x9, 0xa4, 0x9, 0x6, 0xc1, 0xfffffff9, 0x80000001, 0x1, 0x1ff, 0x8, 0xffff0000, 0x70, 0x200, 0x8, 0x60e, 0x1, 0x5, 0x0, 0xcc, 0x4045, 0x3bfd, 0x8, 0x605, 0x5, 0xfffff001, 0xffff, 0x2, 0x5, 0x6, 0x400, 0x5, 0x5, 0x7, 0x5, 0x8e, 0xcac7, 0x10001, 0x0, 0x7ff, 0x10001, 0x4, 0x8001, 0x80000001, 0x8, 0x1, 0x3ff, 0x100, 0x2, 0x3, 0x2, 0x57, 0x1f, 0x8, 0x0, 0xffffffff, 0x4, 0x1c4a, 0xff, 0x3f, 0xffffffff, 0x7, 0x5, 0x7, 0x2a7, 0x5, 0x0, 0x3ff, 0x8, 0x1, 0x1ff, 0x2e9995ec, 0x4, 0xff2f, 0x7, 0x9, 0x8, 0x3ff, 0x6, 0xffffffff, 0xffffffff, 0x1, 0x200, 0xfff, 0x100, 0x1, 0x8000, 0xfff, 0x100, 0xff, 0x1, 0x8000, 0xd79d, 0x1, 0xf7]}) r3 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r3, &(0x7f0000000100), 0x2d) semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f00000002c0)=""/219) [ 285.055458][ T7664] usb 4-1: Using ep0 maxpacket: 16 [ 285.205677][ T7664] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 285.205732][ T7664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.205751][ T7664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.205775][ T7664] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 18:47:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x2046, 0x8, 0x0, 0x7ffffffa}]}) mlock(&(0x7f000000c000/0x3000)=nil, 0x3000) [ 285.205806][ T7664] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 285.342728][ T7664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.344863][ T29] audit: type=1800 audit(1594147650.089:12): pid=8937 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15872 res=0 [ 285.357385][ T7664] usb 4-1: config 0 descriptor?? [ 285.908843][ T7664] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input7 [ 285.965213][ T7664] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input8 [ 286.003595][ T7664] kye 0003:0458:5013.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 286.219763][ T23] usb 4-1: USB disconnect, device number 3 [ 286.239500][ T8851] IPVS: ftp: loaded support on port[0] = 21 [ 286.685609][ T21] tipc: TX() has been purged, node left! [ 287.015071][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd 18:47:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x78}]}, &(0x7f0000000100)='GPL\x00'}, 0x3b) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="d5018f711ddde4ab41bc8e7bf153a200000000000000003e4c"]) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x4, 0xff, 0x2}) 18:47:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x006'], 0x0, 0x0, 0x0, 0x0}, 0x0) 18:47:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 18:47:32 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0300023a096702000000a5b4587472a1aff2fe9900e9"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9ad, 0x4a00) 18:47:32 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12040}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x922000000003, 0x11) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1a) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000000000000000000000000021000000000000009d91409707a79498161c76", 0x3b}], 0x1}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0x5, 0x7, 0x5, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f00000000c0)=@udp6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x1b, 0x1}, 0x10) 18:47:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1c00000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="006cb4fe400000003e4c0015c880288fb1510109f900000000"]) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@RTM_GETNSID={0x64, 0x5a, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x64}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1000}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xec, 0x0, 0x106, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) 18:47:32 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x18, 0x4, 0x5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="7375e080b4a220d89b156c472f40ffd20827928eb82ebcd48473be8b6b6295b975c8f25452e133169c5711079b172a3e1b648da97ffead557ac2bd2461fb90b0e35890ee8fc919ad901674481178173e1df2d00551c29ff888963d454aafa9613c734fb34468e9b277d1e70dfc3a2e7278b0dd157cc5e56d3f4eb39deef9991db3adb292d0a96ed843bd2b8ef7f7126a555d8ecd88c66533df001e86ccbbabc7cc59f19dd2b361c015fb6700e884d8c1", 0xb0}, {&(0x7f0000000080)="7e918bc221a6a076f9ac30e83b9cbc8094789d80ba94d632f810d433939f67fa1f30647d240c97738d4169f254a577cd22877edd77dcd11f67061fd3d4e07fba32f3373b16569d78d9a9fb30b9f496d6b21485d4cfc21342e21081d137f32c0e730d5210814b4d982987", 0x6a}, {&(0x7f0000000200)="dc30a7e34af2cb28f91d217fe179d153232762a6b68e3f8b08b2e7c7161ff751fbb79c8966b14e7f931b19e78a3b64a1c0e06ad72dc5e79cd61aafcb2c000001002ff1f9542e2368d5498266c47af2373606c7ad0718560fde9fd1c47ba2d3b62dd58ae329f73cfb96688495bbdf37c998ef3a01c12853126017b545d3e2a2ccf730d20f3f8a", 0x86}, {&(0x7f00000002c0)="ecde2691065182b76343c39e86854afe031c13e78f07b83c762f00d80433fafa15bd30452c259b5b1a86cf2609aa36dd65767a956c4d912670dfab97469f7183de16c8a8089618371e469c651c4cdfe230dc4a173866a245c191570e570c6709c98fceae7884", 0x66}], 0x4}, 0x0) [ 287.510209][ T9043] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. 18:47:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006667e279639a91d797f0000017daf4204a00b32eadc2828407f000001e3d8960f65b27ee8125f42260500000015739d53d5000000c85a3367ff285b1a8e3b2ef366efa76ddca5e1ee1abb7e09e1d64cb7be548d81004c"], 0x48}}, 0x0) [ 287.766119][ T23] usb 4-1: device descriptor read/64, error -71 18:47:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe5, 0x43, 0x61, 0x40, 0x1557, 0x8150, 0x9e64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x65, 0x6, 0xf8}}]}}]}}, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x1ff}, @sack_perm, @window={0x3, 0x1000, 0x8}], 0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x0, 0x0, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$hidraw(r1, &(0x7f0000000100)="f20128e761cc94cc9d51a1da4cfc16976a82f26f389bee29e642d6d96360e97fab7339e0d547757117824244a130bf1d96b4460344f8b1c690c1e24bf8647e55bbf7b1110c83cb6b252b39ff3291c98bff5b2d62f4a18bf1b55ee0b9891a5fb6f1a12ffbcd50c45915e78eabc6bd73ebb3f3caf04d49e7153bb84b98caacae613b4c", 0x82) 18:47:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x1b, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc29f}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900a60083"], 0x0}, 0x0) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000040)={0x6, 0x813f}) [ 288.214417][ T9043] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.266109][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.300196][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 18:47:33 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x3c7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01862b0104000000000000000c0000f40b000000020000a8f500000000000004000000000000ba8ca426a9eb28def8914417b8f50cceb706bec85fb753abd5703511d808b9591f16f012e43bae2f4eea008a409a10c62c4a9ec1184be84fd42a508876c85be48959ddfb524090795924b47e3c07459749345d2d35e97b089a94eebf84d9"], 0x0, 0x26}, 0x20) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x3) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5, 0x2, 0x8, 0x7, 0x0, 0x5}, ["", "", ""]}, 0x38}}, 0x40) [ 288.337003][ T23] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 288.367010][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.374860][ T7390] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 288.405885][ T23] usb 4-1: config 0 descriptor?? [ 288.451415][ T7949] usb 3-1: new high-speed USB device number 4 using dummy_hcd 18:47:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x4, 0x7, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 288.725560][ T7949] usb 3-1: device descriptor read/64, error 18 [ 288.745224][ T7390] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=9e.64 [ 288.754321][ T7390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.764760][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 288.771583][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 288.794973][ T7390] usb 1-1: config 0 descriptor?? 18:47:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0xffffffffffffffff, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x3, {{0xa, 0x4e21, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}}}, 0x88) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x40011142, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) getsockname(r3, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000080)=0x80) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 288.837022][ T23] usb 4-1: USB disconnect, device number 4 [ 289.114643][ T7949] usb 3-1: device descriptor read/64, error 18 [ 289.384675][ T7949] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 289.654649][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 289.659631][ T7390] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 289.684570][ T7949] usb 3-1: device descriptor read/64, error 18 [ 289.707463][ T7390] usb 1-1: USB disconnect, device number 2 [ 290.024715][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.048189][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.086847][ T7949] usb 3-1: device descriptor read/64, error 18 [ 290.097023][ T23] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 290.144472][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.188728][ T23] usb 4-1: config 0 descriptor?? [ 290.206125][ T7949] usb usb3-port1: attempt power cycle 18:47:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x13ec, 0x6, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x006'], 0x0, 0x0, 0x0, 0x0}, 0x0) 18:47:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10}, 0x78) 18:47:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x204000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f00000000c0)=@raw=[@generic={0x3, 0x1, 0x3, 0xd124, 0x7}, @generic={0x8, 0xf, 0x9, 0x0, 0x5}, @exit, @generic={0x36, 0xe, 0x0, 0x0, 0x8fa}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0x4, 0x3, 0xa, 0x8, 0x8}, @jmp={0x5, 0x0, 0x3, 0x6, 0xc, 0x1, 0x4}, @ldst={0x3, 0x2, 0x2, 0xa, 0x4, 0xffffffffffffffc0}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:47:35 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x2, r0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x89, 0x2, [], [@jumbo={0xc2, 0x4, 0xa82a}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}]}, 0x20) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000200000003a507fc12f83809bed0000000000000000000010050000000000000001"]) recvfrom$llc(r2, &(0x7f00000000c0), 0x0, 0x2023, &(0x7f0000000100)={0x1a, 0xffff, 0xfe, 0x1, 0x3f, 0x1, @remote}, 0x10) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001400, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',default_permissions,allow_othe', @ANYRESDEC=0x0]) [ 290.464529][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 290.470590][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 290.477200][ T2559] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 290.529569][ T23] usb 4-1: USB disconnect, device number 5 [ 290.560393][ T9143] IPVS: ftp: loaded support on port[0] = 21 18:47:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="4fd60f748e2c7e1ddcc2d1ed80d2cab3db34d56663e5222b0249e0631ce90d47c0cd729e80f3185268fdd580f05787217728062cb8915671ae17b2320a7a1c9cc0ad79ea4bf8bda0d1156ef4c452dac89517e012ae159ff155c50c90dec364e225b1eead0b0ca21526d0750e3182c493bc08e92e5aad77a3aa7b531fdd23bea2366adb469e022e9ed7b669b835c853702b20a5f2c8336a5957cf388303a7899e7aec90265829fa3981e8b726c8dab3297f53ed07aacd0b803f1d7ee45bef4d0698013d", 0xc3}], 0x1}, 0x4040) r1 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x403}], 0x4801, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7ff) [ 290.855167][ T2559] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=9e.64 [ 290.884901][ T9160] IPVS: ftp: loaded support on port[0] = 21 [ 290.897375][ T9177] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 290.898267][ T2559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.944381][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 291.006521][ T2559] usb 1-1: config 0 descriptor?? 18:47:35 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x2, r0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x89, 0x2, [], [@jumbo={0xc2, 0x4, 0xa82a}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xffff}]}, 0x20) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000200000003a507fc12f83809bed0000000000000000000010050000000000000001"]) recvfrom$llc(r2, &(0x7f00000000c0), 0x0, 0x2023, &(0x7f0000000100)={0x1a, 0xffff, 0xfe, 0x1, 0x3f, 0x1, @remote}, 0x10) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1001400, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',default_permissions,allow_othe', @ANYRESDEC=0x0]) [ 291.080730][ T9177] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 18:47:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000003e4c000000000010050000000000000001"]) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xc4, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8e}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030038000505d25a80648c63940d0324fc6010000a400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 18:47:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfe000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x7, @remote, 0x5}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, @in6={0xa, 0x4e21, 0x6, @empty, 0x7}], 0xa4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3ff, 0x0, 0xd0}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='x', 0x17c8}], 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xffffffff) [ 291.214400][ T7949] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 291.318209][ T9213] IPVS: ftp: loaded support on port[0] = 21 18:47:36 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000006c0)={0x5, [0x7, 0x10001], 0x800}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x7e71, 0x80, 0x72aa, 0x5, 0x6, 0xc8, 0x80000000, 0x3}, &(0x7f0000000080)={0x7, 0x0, 0x3, 0x0, 0x0, 0x7, 0xffffffff, 0xe39}, &(0x7f00000000c0)={0x8001, 0xfffffffffffffffb, 0x7, 0x1f, 0xf800000000000000, 0xbc2d, 0x100000000, 0x9}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000680)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x3, 0x2, 0xe1, 0x1ff}, {0x0, 0x20, 0x2}, {}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYBLOB="77673c6a485e8bbc9644dc3a9906408e9c901294b4eddc5a174cd8791f84407a69e2a51080e2806714a1180d6780346ea6bef4ff848aace4b7bdb514d21a263b33bd5d0e3054c6a3bb934a18ef8378fab8274115151382c8f359734de8bc7d01984971e65bff0e24c4d13dc5cf360e112755b29e071299f921ef56042e2797df21c63b4b3bd64b0810363dacc8cb506d0059b1ff0d9553d5ae81b38df63460c69298c796c90a243b34a7c8c7555e2c5553ec3bd22e6817e3a0565c30c06817c7a8fb311e8600f1a2d15993a1f239ed8db7bfeae4e4060fa17a54a9", @ANYRESDEC=r7, @ANYBLOB="76c75dff48f912865390d05aeb00fa9b3138fab8dbb37a0aa1e24a8f19d0660393586f198feb3ed8b88d36ff9847238d97e204c11c7e73202fb45e06daae3a3e598e71d4ae8ae4153031af2a0d1fcc48bea025fa80ac674f78399e1e8044c6dc9f0fd8226b20968b429110c3d18908f1cbc1db3c9371adf385dab179acf01443587f48ae7718a96dff307ac89870263910d87833db5614c5eda2c6c60f", @ANYRES32, @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="929f96607b99fdc6970182400df4e3fe8fa59781f4a1f98c41a5e5198dd001369a7cf9b0551982ea4e4af3677e6e386853586fa4b04c82cf85740e09b0ca1c8241b0bae2591060c3283bcb48b592404254cc4b666079580cd6c37cf36325b60ebf85b1521537c92b81b01ee869586001a19c7ac2e480e5fa2b3c0a340fad8ee7b9dfd26cb1698430f2e1e9481983a5ed649fc27563abb10ae1f9291ebd08168495e625278d769897a8717868b45be54f6f80b73bdca5bb43d8e2f4db6d4da0", @ANYRES16=r4, @ANYRES32=r5, @ANYRESOCT, @ANYBLOB="fdb95d345d265dc7e391e379d788072a88e18f3448fd9fb6fd9c81ac3f4b80ddb22f4bce3773cbebe37ea94cd6f8377e8624e0aeff28ff3eade317898f133ccb9bfb88fa6bc1930a24a1f97fb1f32d4016f454a322ac6d281e3ff9bd734b485632da182f1bd9634c4024096f7f565db72d0b8b3d83eab1a28cc596652d51199ea32cdea375f3f560afceb57a1136eb909296b3a5130afde0a48b73a9d81671098156cbc0b0cae60600c02edd2381223a2fb1553d9b5f7bf02480f7e96ed29c39b351abdb286dbcb4bcada0ab429d6f62ef7cce20888c0766c9", @ANYRESDEC=r2], 0x0) [ 291.652606][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.663964][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.674018][ T23] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 291.683209][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.693021][ T23] usb 4-1: config 0 descriptor?? [ 291.704287][ T7949] usb 3-1: device not accepting address 6, error -71 [ 292.124300][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 292.130471][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.162638][ T23] usb 4-1: USB disconnect, device number 6 [ 292.420746][ T21] tipc: TX() has been purged, node left! [ 292.574634][ T21] tipc: TX() has been purged, node left! [ 292.724291][ T21] tipc: TX() has been purged, node left! [ 292.884177][ T21] tipc: TX() has been purged, node left! [ 293.624151][ T2559] rtl8150 1-1:0.0: couldn't reset the device [ 293.630389][ T2559] rtl8150: probe of 1-1:0.0 failed with error -5 [ 293.639941][ T2559] usb 1-1: USB disconnect, device number 3 [ 307.923436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 309.842911][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 310.485831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 330.971678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 332.242311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 373.201040][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 412.239487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 [ 452.559352][ T1151] INFO: task syz-executor.1:9075 can't die for more than 143 seconds. [ 452.567677][ T1151] syz-executor.1 D27720 9075 6939 0x00004004 [ 452.577248][ T1151] Call Trace: [ 452.588461][ T1151] __schedule+0x8b4/0x1e80 [ 452.594872][ T1151] ? io_schedule_timeout+0x140/0x140 [ 452.608026][ T1151] ? prepare_to_wait_event+0x129/0x650 [ 452.625235][ T1151] schedule+0xd0/0x2a0 [ 452.631035][ T1151] p9_client_rpc+0x3b5/0x1220 [ 452.635754][ T1151] ? p9_client_prepare_req.part.0+0xc50/0xc50 [ 452.649626][ T1151] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 452.655620][ T1151] ? p9pdu_writef+0xf0/0xf0 [ 452.666928][ T1151] ? finish_wait+0x260/0x260 [ 452.674247][ T1151] ? find_held_lock+0x2d/0x110 [ 452.680792][ T1151] ? lock_acquire+0x1f1/0xad0 [ 452.685572][ T1151] ? p9_fd_cancel+0x1d/0x230 [ 452.698036][ T1151] ? find_held_lock+0x2d/0x110 [ 452.704584][ T1151] ? p9_fd_cancel+0x65/0x230 [ 452.716826][ T1151] p9_client_flush+0x1f9/0x430 [ 452.726875][ T1151] ? p9_client_rpc+0x1220/0x1220 [ 452.740261][ T1151] ? prepare_to_wait_event+0x129/0x650 [ 452.745735][ T1151] ? do_raw_spin_unlock+0x171/0x230 [ 452.757784][ T1151] ? _raw_spin_unlock+0x24/0x40 [ 452.765428][ T1151] p9_client_rpc+0xfcd/0x1220 [ 452.776756][ T1151] ? p9_client_prepare_req.part.0+0xc50/0xc50 [ 452.785610][ T1151] ? pipe_poll+0x1dd/0x7a0 [ 452.796922][ T1151] ? p9_fd_poll+0x2c0/0x2c0 [ 452.804988][ T1151] ? anon_pipe_buf_release+0x380/0x380 [ 452.817214][ T1151] ? finish_wait+0x260/0x260 [ 452.824836][ T1151] ? p9_conn_create+0x3ef/0x520 [ 452.839963][ T1151] ? p9_fd_create+0x262/0x380 [ 452.844686][ T1151] ? p9_conn_create+0x520/0x520 [ 452.858081][ T1151] ? trace_hardirqs_on+0x5f/0x220 [ 452.865042][ T1151] p9_client_create+0xa8f/0x10c0 [ 452.877923][ T1151] ? p9_client_flush+0x430/0x430 [ 452.884272][ T1151] ? v9fs_session_init+0xe9/0x1770 [ 452.892765][ T1151] ? trace_kmalloc+0xfd/0x130 [ 452.897439][ T1151] ? lockdep_init_map_waits+0x26a/0x890 [ 452.903044][ T1151] ? __raw_spin_lock_init+0x34/0x100 [ 452.908338][ T1151] v9fs_session_init+0x1dd/0x1770 [ 452.917054][ T1151] ? fs_reclaim_acquire+0xa1/0x110 [ 452.922320][ T1151] ? find_held_lock+0x2d/0x110 [ 452.927095][ T1151] ? fs_reclaim_release+0x94/0xf0 [ 452.935600][ T1151] ? v9fs_show_options+0x760/0x760 [ 452.942867][ T1151] ? lock_downgrade+0x820/0x820 [ 452.947729][ T1151] ? lock_is_held_type+0xb0/0xe0 [ 452.956926][ T1151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 452.966244][ T1151] ? trace_kmalloc+0xfd/0x130 [ 452.974184][ T1151] ? kmem_cache_alloc_trace+0x181/0x480 [ 452.979792][ T1151] v9fs_mount+0x79/0x970 [ 452.984042][ T1151] ? v9fs_write_inode+0x60/0x60 [ 452.988956][ T1151] legacy_get_tree+0x105/0x220 [ 452.997458][ T1151] vfs_get_tree+0x89/0x2f0 [ 453.001946][ T1151] do_mount+0x14c5/0x1df0 [ 453.006284][ T1151] ? copy_mount_string+0x40/0x40 [ 453.014871][ T1151] ? _copy_from_user+0x138/0x190 [ 453.019876][ T1151] __x64_sys_mount+0x18f/0x230 [ 453.024647][ T1151] do_syscall_64+0x60/0xe0 [ 453.032676][ T1151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 453.038576][ T1151] RIP: 0033:0x45cb29 [ 453.043654][ T1151] Code: Bad RIP value. [ 453.047744][ T1151] RSP: 002b:00007f7b6d440c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.057783][ T1151] RAX: ffffffffffffffda RBX: 00000000004f7360 RCX: 000000000045cb29 [ 453.066273][ T1151] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000000000 [ 453.074735][ T1151] RBP: 000000000078bf00 R08: 0000000020000380 R09: 0000000000000000 [ 453.083331][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 453.091855][ T1151] R13: 0000000000000773 R14: 00000000004ca6cc R15: 00007f7b6d4416d4 [ 453.100400][ T1151] [ 453.100400][ T1151] Showing all locks held in the system: [ 453.108121][ T1151] 1 lock held by khungtaskd/1151: [ 453.113953][ T1151] #0: ffffffff89bc3040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 453.124345][ T1151] 1 lock held by in:imklog/6490: [ 453.129840][ T1151] #0: ffff8880947bebb0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 453.139608][ T1151] [ 453.141939][ T1151] ============================================= [ 453.141939][ T1151] [ 453.151140][ T1151] Kernel panic - not syncing: hung_task: blocked tasks [ 453.157992][ T1151] CPU: 1 PID: 1151 Comm: khungtaskd Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 453.167434][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.177478][ T1151] Call Trace: [ 453.180848][ T1151] dump_stack+0x18f/0x20d [ 453.185280][ T1151] panic+0x2e3/0x75c [ 453.189187][ T1151] ? __warn_printk+0xf3/0xf3 [ 453.193806][ T1151] ? watchdog.cold+0x22d/0x24b [ 453.198558][ T1151] ? watchdog+0xc59/0xf30 [ 453.202893][ T1151] watchdog.cold+0x23e/0x24b [ 453.207477][ T1151] ? trace_sched_process_hang+0x2e0/0x2e0 [ 453.213271][ T1151] kthread+0x3b5/0x4a0 [ 453.217356][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 453.222467][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 453.227633][ T1151] ret_from_fork+0x1f/0x30 [ 453.233340][ T1151] Kernel Offset: disabled [ 453.237687][ T1151] Rebooting in 86400 seconds..