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", 0x1000}}, 0x1b7) 00:35:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1b7) 00:35:30 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x20800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x482, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r3, 0x0, 0x0, 0x4000810) 00:35:30 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) 00:35:30 executing program 3: r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000004300)={0x2020}, 0x2020) 00:35:30 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:35:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@loopback}, {@in6=@private2, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 00:35:30 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x20800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x482, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r3, 0x0, 0x0, 0x4000810) [ 337.552057][ T9250] loop5: detected capacity change from 0 to 3 00:35:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 337.623417][ T9250] syz-executor.5: attempt to access beyond end of device [ 337.623417][ T9250] loop5: rw=2048, want=8, limit=3 00:35:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3103, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f00)={0x24, 0x0, 0x0, &(0x7f0000000e80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) 00:35:30 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000}]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x20800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x482, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r3, 0x0, 0x0, 0x4000810) [ 337.726130][ T9260] binder: 9259:9260 ioctl c0306201 20001480 returned -14 [ 337.762034][ T9250] SQUASHFS error: Failed to read block 0x0: -5 00:35:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 337.792379][ T9250] unable to read squashfs_super_block 00:35:31 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) 00:35:31 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 337.914279][ T9268] binder: 9267:9268 ioctl c0306201 20001480 returned -14 00:35:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.003731][ T9271] loop5: detected capacity change from 0 to 3 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.062490][ T9271] syz-executor.5: attempt to access beyond end of device [ 338.062490][ T9271] loop5: rw=2048, want=8, limit=3 [ 338.118613][ T9280] binder: 9279:9280 ioctl c0306201 20001480 returned -14 [ 338.142919][ T9271] SQUASHFS error: Failed to read block 0x0: -5 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.167456][ T9271] unable to read squashfs_super_block 00:35:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@loopback}, {@in6=@private2, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 00:35:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:31 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:35:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:31 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) [ 338.456017][ T9255] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 338.523181][ T9298] loop5: detected capacity change from 0 to 3 [ 338.560350][ T9302] binder: 9296:9302 ioctl c0306201 20001480 returned -14 00:35:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.571312][ T9298] syz-executor.5: attempt to access beyond end of device [ 338.571312][ T9298] loop5: rw=2048, want=8, limit=3 00:35:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.624967][ T9298] SQUASHFS error: Failed to read block 0x0: -5 00:35:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.681234][ T9298] unable to read squashfs_super_block 00:35:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.759403][ T9315] binder: 9313:9315 ioctl c0306201 20001480 returned -14 00:35:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@loopback}, {@in6=@private2, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 00:35:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:32 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:35:32 executing program 0: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 00:35:32 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) 00:35:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) [ 338.977611][ T9328] loop5: detected capacity change from 0 to 3 [ 338.995985][ T9331] binder: 9325:9331 ioctl c0306201 20001480 returned -14 [ 339.003435][ T9334] autofs4:pid:9334:autofs_fill_super: called with bogus options 00:35:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000002c0)="73ea88fd31a3c9ce2dc18197451715eff32d8ba0126f11b7089540b09874b21838f3180ffb4a48d08adda04ba2c47d63b9726638845f601902f21c76e0218de40a3ef5a2b8b022769ce2ba2744c57112"}) 00:35:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@loopback}, {@in6=@private2, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 00:35:32 executing program 0: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) [ 339.042902][ T9328] syz-executor.5: attempt to access beyond end of device [ 339.042902][ T9328] loop5: rw=2048, want=8, limit=3 [ 339.100218][ T9328] SQUASHFS error: Failed to read block 0x0: -5 00:35:32 executing program 1: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) [ 339.149176][ T9328] unable to read squashfs_super_block [ 339.163379][ T9344] autofs4:pid:9344:autofs_fill_super: called with bogus options 00:35:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000740)='./bus\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) [ 339.196536][ T9345] binder: BINDER_SET_CONTEXT_MGR already set [ 339.227712][ T9345] binder: 9341:9345 ioctl 40046207 0 returned -16 00:35:32 executing program 0: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) [ 339.247930][ T9349] binder: 9341:9349 ioctl c0306201 20001480 returned -14 [ 339.259329][ T9347] autofs4:pid:9347:autofs_fill_super: called with bogus options 00:35:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000740)='./bus\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 00:35:32 executing program 1: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 00:35:32 executing program 2: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) [ 339.402134][ T9356] autofs4:pid:9356:autofs_fill_super: called with bogus options [ 339.421758][ T9357] autofs4:pid:9357:autofs_fill_super: called with bogus options 00:35:32 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) 00:35:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000740)='./bus\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 00:35:32 executing program 0: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) [ 339.459041][ T9359] loop2: detected capacity change from 0 to 270 00:35:32 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) 00:35:32 executing program 1: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='/\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10040, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 00:35:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000780)='/proc/self/exe\x00', 0x8000, 0x0) r5 = dup2(r2, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) 00:35:32 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = open(&(0x7f0000000740)='./bus\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 00:35:32 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) [ 339.608526][ T9368] autofs4:pid:9368:autofs_fill_super: called with bogus options [ 339.640834][ T9372] autofs4:pid:9372:autofs_fill_super: called with bogus options 00:35:32 executing program 0: syz_clone3(&(0x7f0000000200)={0x24301600, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:35:32 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x4004510d, 0x0) 00:35:32 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) 00:35:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 00:35:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000780)='/proc/self/exe\x00', 0x8000, 0x0) r5 = dup2(r2, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) 00:35:33 executing program 1: syz_clone(0xe5282500, 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:33 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 00:35:33 executing program 2: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:33 executing program 5: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:33 executing program 0: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:33 executing program 0: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) [ 339.984429][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.999276][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 339.999290][ T27] audit: type=1800 audit(1648773333.097:205): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 340.053629][ T9397] loop5: detected capacity change from 0 to 270 00:35:33 executing program 0: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) [ 340.100953][ T9400] loop2: detected capacity change from 0 to 270 [ 340.110838][ T27] audit: type=1800 audit(1648773333.217:206): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 [ 340.166986][ T27] audit: type=1800 audit(1648773333.257:207): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1180 res=0 errno=0 00:35:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) [ 340.224215][ T27] audit: type=1800 audit(1648773333.327:208): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1171 res=0 errno=0 [ 340.289951][ T27] audit: type=1800 audit(1648773333.387:209): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1159 res=0 errno=0 00:35:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000000c0)=""/149, 0x32, 0x95, 0x1}, 0x20) 00:35:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000780)='/proc/self/exe\x00', 0x8000, 0x0) r5 = dup2(r2, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) [ 340.365015][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000000c0)=""/149, 0x32, 0x95, 0x1}, 0x20) 00:35:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 00:35:33 executing program 5: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) [ 340.539063][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:33 executing program 2: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000000c0)=""/149, 0x32, 0x95, 0x1}, 0x20) 00:35:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x63, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 00:35:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x44}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000580)=ANY=[]) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000004c0)=""/148, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000780)='/proc/self/exe\x00', 0x8000, 0x0) r5 = dup2(r2, r4) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/206, 0x6000}) [ 340.659298][ T9423] loop5: detected capacity change from 0 to 270 00:35:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000000c0)=""/149, 0x32, 0x95, 0x1}, 0x20) [ 340.725790][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.802571][ T9429] loop2: detected capacity change from 0 to 270 [ 340.828044][ T27] audit: type=1800 audit(1648773333.927:210): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1179 res=0 errno=0 00:35:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x90) 00:35:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 00:35:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x90) [ 341.006635][ T27] audit: type=1800 audit(1648773334.107:211): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1154 res=0 errno=0 [ 341.432303][ T9416] tipc: Started in network mode [ 341.440289][ T9416] tipc: Node identity 9, cluster identity 4711 [ 341.459959][ T9416] tipc: Node number set to 9 [ 341.579207][ T83] tipc: Left network mode 00:35:34 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 00:35:34 executing program 5: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000002100)='cgroup\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 00:35:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x90) 00:35:34 executing program 2: syncfs(0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) move_mount(r0, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file2\x00', 0x42) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresgid(r4, 0xee01, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x125180, 0x40) sendfile(r2, r3, 0x0, 0x80000001) symlinkat(&(0x7f0000000440)='./file2\x00', r3, &(0x7f0000000480)='./file0\x00') pivot_root(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file2\x00') bind$qrtr(r3, &(0x7f00000004c0)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) getdents(r1, &(0x7f00000005c0)=""/223, 0xfc61) 00:35:34 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 00:35:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x90) [ 341.658437][ T9445] loop5: detected capacity change from 0 to 270 [ 341.688076][ T9453] loop2: detected capacity change from 0 to 270 [ 341.814191][ T27] audit: type=1800 audit(1648773334.917:212): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1179 res=0 errno=0 00:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) 00:35:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) [ 341.890675][ T27] audit: type=1800 audit(1648773334.947:213): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1180 res=0 errno=0 00:35:35 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x44, &(0x7f0000000200)=[{&(0x7f0000010000)="020000000000343418010000e7306613669f0215010000001f0000000000000000004000000000000200000000000000400000000500000002000000000000000d0000000000000000000000000000004007000000000000571b675f00000000581b675f00000000581b675f000000000100320001000100571b675f00000000004eed0000000000000000000b00000080002000c0001000c5f8b24bc45846debe38cff0f6f6455b00"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000100"/32, 0x20, 0x500}, {&(0x7f0000010200)="472e9081ae767be711faaf1e400007000000000000000000571b675f0000000040000000000000000b0000000500000030010000000000000100000000000000020000000000000001000000000000000100000001000000010000000000000000000000000000000600000000000000010000000000000003000000030000000200000000000000000000000000000003000000000000000100000000000000040000000000000002000000000000000400000000000000010000000000000001000000010000000500000000000000000000000000000005000000000000000100000000000000010000000100000006000000000000000000000000000000030000000000000001000000000000000300000003000000000000000000000001000000000000000200"/320, 0x140, 0x1000}, {&(0x7f0000010400)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000e00706012e6e696c667300"/64, 0x40, 0x1800}, {&(0x7f0000010500)="f43f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ff0f00"/2080, 0x820, 0x2000}, {&(0x7f0000010e00)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3080}, {&(0x7f0000010f00)="01000000000000000008000000000000571b675f00000000571b675f0000000000000000000000000000000000000000ed4102000000000000000000000000000100"/96, 0x60, 0x3100}, {&(0x7f0000011000)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3380}, {&(0x7f0000011100)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3400}, {&(0x7f0000011200)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3480}, {&(0x7f0000011300)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3500}, {&(0x7f0000011400)="00000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0x3580}, {&(0x7f0000011500)="0100"/32, 0x20, 0x3800}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000100000000000000571b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000", 0xe0, 0x38c0}, {&(0x7f0000011700)="0200000000000000000000000000000000000000000000000300000000000000", 0x20, 0x3a40}, {&(0x7f0000011800)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0x3b00}, {&(0x7f0000011900)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0x3bc0}, {&(0x7f0000011a00)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0x3c80}, {&(0x7f0000011b00)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0x3d40}, {&(0x7f0000011c00)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0x3e00}, {&(0x7f0000011d00)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0x3ec0}, {&(0x7f0000011e00)="1d0000000000000002000000000000001e000000000000000000000000000000571b675f000000000b0000000300000000000000000000000000000003000000", 0x40, 0x4000}, {&(0x7f0000011f00)="f93f0000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000007f00"/2080, 0x820, 0x4800}, {&(0x7f0000012800)="03000000000000000100000000000000ffffffffffffffff000000000000000004000000000000000100000000000000ffffffffffffffff000000000000000005000000000000000100000000000000ffffffffffffffff000000000000000006000000000000000100000000000000ffffffffffffffff000000000000000007000000000000000100000000000000ffffffffffffffff000000000000000008000000000000000100000000000000ffffffffffffffff0000000000000000", 0xc0, 0x5820}, {&(0x7f0000012900)="c9bd0dd590010000571b675f0000000003000000000000000000000000000000571b675f00000000571b675f00000000000000000000000000000000000000000080010000000000000000000000000009000000000000000a000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000600"/352, 0x160, 0x6000}, {&(0x7f0000012b00)="6e7282d55b3b407211faaf1e400007000000000000000000581b675f0000000040000000000000001c0000000b000000a80200000000000002000000000000000c0000000000000002000000000000000100000001000000002000000000000000000000000000000200000000000000020000000000000001000000010000000c0000000000000000000000000000000d0000000000000002000000000000000100000001000000002800000000000000000000000000000e0000000000000002000000000000000100000001000000003000000000000000000000000000000f0000000000000002000000000000000100000001000000003800000000000000000000000000001000000000000000020000000000000005000000050000000700000000000000000000000000000008000000000000000100000000000000090000000000000002000000000000000a0000000000000003000000000000000b000000000000000400000000000000110000000000000002000000000000000100000001000000000800000000000000000000000000000600000000000000020000000000000004000000040000000d0000000000000000000000000000000e0000000000000001000000000000000f00000000000000020000000000000001300000000000000300000000000000040000000000000000000000000000000100000001000000100000000000000000000000000000000500000000000000000000000000000001000000010000001100000000000000000000000000000003000000000000000000000000000000090000000800000000000000000000000100000000000000020000000000000022000000000000008200000000000000a200000000000000c200000000000000e20000000000000000000000000000000100"/704, 0x2c0, 0x6800}, {&(0x7f0000012e00)="0c00000000000000100001022e0000000200000000000000100002022e2e00000d000000000000001800050166696c6530000000000000000e00000000000000c807050766696c653100"/96, 0x60, 0x7000}, {&(0x7f0000012f00)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000180006012e6e696c66730000000000000c000000000000001800050266696c6530000000000000000f000000000000001800050166696c65310000000000000010000000000000001800050166696c65320000000000000010000000000000001800050166696c65330000000000000011000000000000006807090166696c652e636f6c6400"/192, 0xc0, 0x7800}, {&(0x7f0000013000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}, {&(0x7f0000013500)='/tmp/syz-imagegen868282607/file0/file0\x00'/64, 0x40, 0x8800}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0x9000}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc000}, {&(0x7f0000013800)="ee3f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ffff0300"/2080, 0x820, 0xc800}, {&(0x7f0000014100)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xd880}, {&(0x7f0000014200)="01000000000000000008000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed4103000000000000000000000000000c00"/96, 0x60, 0xd900}, {&(0x7f0000014300)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xdb80}, {&(0x7f0000014400)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xdc00}, {&(0x7f0000014500)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xdc80}, {&(0x7f0000014600)="00000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xdd00}, {&(0x7f0000014700)="00000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0xdd80}, {&(0x7f0000014800)="04000000000000000008000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed4102000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d47420ea0000000004000000000000001a04000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed8101000000000000000000000000000028000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d57420ea0000000004000000000000002600000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000eda101000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d67420ea0000000004000000000000000a00000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed8101000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d77420ea0000000014000000000000002823000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed8102000000000000000000000000000700000000000000080000000000000009000000000000000a000000000000000b0000000000000000000000000000000000000000000000d87420ea0000000004000000000000006400000000000000581b675f00000000581b675f00000000be26530ebe26530e0000000000000000ed8101000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d97420ea00000000", 0x300, 0xde00}, {&(0x7f0000014b00)="0200"/32, 0x20, 0xe800}, {&(0x7f0000014c00)="0000000000000000000000000000000000000000000000000100000000000000571b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000571b675f00000000571b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400"/160, 0xa0, 0xe8c0}, {&(0x7f0000014d00)="0000000000000000000000000000000000000000000000000200000000000000581b675f000000001c0000000000000008000000000000000f0000000000000007000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000000d000000000000000e000000000000000f00000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000300000000000000", 0xe0, 0xe980}, {&(0x7f0000014e00)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0xeb00}, {&(0x7f0000014f00)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0xebc0}, {&(0x7f0000015000)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0xec80}, {&(0x7f0000015100)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0xed40}, {&(0x7f0000015200)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0xee00}, {&(0x7f0000015300)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0xeec0}, {&(0x7f0000015400)="1d0000000000000002000000000000001e000000000000000000000000000000581b675f00000000270000000300000000000000000000000000000003000000", 0x40, 0xf000}, {&(0x7f0000015500)="e83f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ffff0300"/2080, 0x820, 0xf800}, {&(0x7f0000015e00)="0100"/32, 0x20, 0x10100}, {&(0x7f0000015f00)="0100"/32, 0x20, 0x10400}, {&(0x7f0000016000)="0100"/32, 0x20, 0x10500}, {&(0x7f0000016100)="0300"/32, 0x20, 0x10600}, {&(0x7f0000016200)="0100"/32, 0x20, 0x10700}, {&(0x7f0000016300)="03000000000000000100000000000000020000000000000000000000000000000400000000000000010000000000000002000000000000000000000000000000050000000000000001000000000000000200000000000000000000000000000006000000000000000100000000000000020000000000000000000000000000000700000000000000010000000000000001000000000000000000000000000000080000000000000001000000000000000100000000000000000000000000000013000000000000000200000000000000ffffffffffffffff000000000000000014000000000000000200000000000000ffffffffffffffff000000000000000015000000000000000200000000000000ffffffffffffffff000000000000000016000000000000000200000000000000ffffffffffffffff000000000000000017000000000000000200000000000000ffffffffffffffff00000000000000000f000000000000000200000000000000ffffffffffffffff000000000000000019000000000000000200000000000000ffffffffffffffff00000000000000001a000000000000000200000000000000ffffffffffffffff00000000000000001b000000000000000200000000000000ffffffffffffffff00000000000000001d000000000000000200000000000000ffffffffffffffff00000000000000001e000000000000000200000000000000ffffffffffffffff0000000000000000", 0x220, 0x10820}, {&(0x7f0000016600)="18000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x11000}, {&(0x7f0000016700)="0e000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x11800}, {&(0x7f0000016800)="10000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x12000}, {&(0x7f0000016900)="11000000000000000200000000000000ffffffffffffffff00000000000000001c000000000000000200000000000000ffffffffffffffff0000000000000000", 0x40, 0x12800}, {&(0x7f0000016a00)="12000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x13000}, {&(0x7f0000016b00)="0001080000000000000000000000000000000000000000000100000000000000020000000000000022000000000000008200000000000000a200000000000000c200000000000000e200"/96, 0x60, 0x13800}, {&(0x7f0000016c00)="00000000000000001f000000000000002000000000000000210000000000000022000000000000002300000000000000240000000000000025000000000000002600"/96, 0x60, 0x13c00}, {&(0x7f0000016d00)="e8ad3eef90010000581b675f000000001b000000000000000000000000000000571b675f00000000571b675f00000000000000000000000000000000000000000080010000000000010201000000000000000000000000000a000000000000000b000000000000002700000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000571b675f00000000571b675f0000000000000000000000000000000000000000008001000000000000000000000000001100"/352, 0x160, 0x14000}, {&(0x7f0000016f00)="020000000000343418010000e73066137f85ddf5010000001f000000000000000000400000000000020000000000000040000000050000000100000000000000020000000000000000000000000000008007000000000000571b675f00000000581b675f00000000581b675f000000000100320000000100571b675f00000000004eed0000000000000000000b00000080002000c0001000c5f8b24bc45846debe38cff0f6f6455b00"/192, 0xc0, 0x3ff000}, {&(0x7f0000017000)="00000000000000000100"/32, 0x20, 0x3ff100}], 0x0, &(0x7f0000017100)) [ 342.639435][ T9457] tipc: Started in network mode [ 342.648475][ T9457] tipc: Node identity 9, cluster identity 4711 [ 342.655019][ T9457] tipc: Node number set to 9 [ 342.662546][ T9456] tipc: Started in network mode [ 342.667423][ T9456] tipc: Node identity 9, cluster identity 4711 [ 342.675246][ T9456] tipc: Node number set to 9 [ 342.736155][ T83] tipc: Left network mode 00:35:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:35 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:35 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:35 executing program 2: syz_mount_image$befs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee00, 0xee00, 0x0) [ 342.862746][ T27] audit: type=1804 audit(1648773335.967:214): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2474574458/syzkaller.CmiwZy/320/bus" dev="sda1" ino=1178 res=1 errno=0 [ 342.870278][ T9484] loop5: detected capacity change from 0 to 264192 00:35:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:36 executing program 2: clock_getres(0x2, &(0x7f0000000280)) 00:35:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:36 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:36 executing program 2: clock_getres(0x2, &(0x7f0000000280)) 00:35:36 executing program 2: clock_getres(0x2, &(0x7f0000000280)) [ 343.153291][ T9496] loop5: detected capacity change from 0 to 264192 [ 343.763393][ T9492] tipc: Started in network mode [ 343.768289][ T9492] tipc: Node identity 9, cluster identity 4711 [ 343.782247][ T9492] tipc: Node number set to 9 [ 343.857869][ T83] tipc: Left network mode [ 343.877679][ T9486] tipc: Started in network mode [ 343.890092][ T9486] tipc: Node identity 9, cluster identity 4711 [ 343.906859][ T9486] tipc: Node number set to 9 00:35:37 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:37 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:37 executing program 2: clock_getres(0x2, &(0x7f0000000280)) 00:35:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:37 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307d, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcb}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) 00:35:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:35:37 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) [ 344.088656][ T9518] loop5: detected capacity change from 0 to 264192 00:35:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 344.223794][ T9526] loop2: detected capacity change from 0 to 264192 00:35:37 executing program 5: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4, 0x808}}}]}, 0x38}}, 0x0) 00:35:37 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 344.486209][ T9534] loop5: detected capacity change from 0 to 264192 [ 344.555453][ T9538] loop2: detected capacity change from 0 to 264192 [ 345.009115][ T83] tipc: Left network mode [ 345.026353][ T83] tipc: Left network mode [ 345.064223][ T9516] tipc: Started in network mode [ 345.074048][ T9516] tipc: Node identity 9, cluster identity 4711 [ 345.080770][ T9516] tipc: Node number set to 9 [ 345.087252][ T9523] tipc: Started in network mode [ 345.094711][ T9523] tipc: Node identity 9, cluster identity 4711 [ 345.101232][ T9523] tipc: Node number set to 9 00:35:38 executing program 4: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 00:35:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4, 0x808}}}]}, 0x38}}, 0x0) 00:35:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 00:35:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000120005060000f3047c1900000000000007004fee", @ANYBLOB='L'], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3fb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 00:35:38 executing program 2: open(&(0x7f0000000000)='./bus\x00', 0x161141, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000000)="eb3c906d9c6673fdd2617500028001000240000004f801", 0x17}], 0x0, &(0x7f0000000100)) mknodat$loop(r1, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) execveat(r1, &(0x7f00000007c0)='./file0\x00', &(0x7f0000001a80), 0x0, 0x0) 00:35:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:35:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000120005060000f3047c1900000000000007004fee", @ANYBLOB='L'], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3fb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 00:35:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 345.337719][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 345.337734][ T27] audit: type=1804 audit(1648773338.437:220): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4287455813/syzkaller.FM2CKq/364/bus" dev="sda1" ino=1174 res=1 errno=0 [ 345.357874][ T9551] loop2: detected capacity change from 0 to 264192 00:35:38 executing program 4: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 00:35:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4, 0x808}}}]}, 0x38}}, 0x0) 00:35:38 executing program 0: io_setup(0x3, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:35:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:35:38 executing program 4: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 00:35:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000120005060000f3047c1900000000000007004fee", @ANYBLOB='L'], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3fb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 00:35:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4, 0x808}}}]}, 0x38}}, 0x0) 00:35:38 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000120005060000f3047c1900000000000007004fee", @ANYBLOB='L'], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3fb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 00:35:38 executing program 0: socket(0x0, 0xb451aa84a037d156, 0x0) 00:35:38 executing program 4: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 00:35:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) 00:35:38 executing program 3: sigaltstack(0x0, 0xfffffffffffffffd) 00:35:38 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="6f05ace1ffa42dc747bd7b2771cff5e5a1249406d968ca8cd9535f137e930c26c7c66e05ef14d7a2d8fd2cb3244ce0485379d4c07fcac6ecde775699e9ffe6d67fe837a741042d2c1290d2350dadab2e6a4dff7d97485a67c954fe954efff7567e9ac1cc5b5bdafdc6b8f28d6d92d70c847f1e3a1a2002868a1e2e6bea7e2afe0d5b03797bd7d60ab3bc7069526a2a89db05d5bb0daca43df49414f900c5d778b3fb5a70f2f3e6f0159e7ea377ac1a73eeb1243ca3a596d516a61f46113e2fc9224e9f4bf250eadc85a549bcad023f69b229f587989ab5cda34c80cfa524275cba38d17423c2a3d8e6cbb1aa3c8c3a50112889621622b386b881f28f1a52522a34c1d5b7c49911c885201609ab8200431c5cc7c637ae64a1e79e00"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) 00:35:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) 00:35:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:35:39 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:35:39 executing program 3: sigaltstack(0x0, 0xfffffffffffffffd) 00:35:39 executing program 3: sigaltstack(0x0, 0xfffffffffffffffd) 00:35:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) 00:35:39 executing program 3: sigaltstack(0x0, 0xfffffffffffffffd) [ 346.010330][ T9593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) 00:35:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7d, &(0x7f0000000280)={r1}, 0x8) [ 346.112387][ T27] audit: type=1804 audit(1648773339.217:221): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 00:35:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 346.401135][ T83] tipc: Left network mode 00:35:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="6f05ace1ffa42dc747bd7b2771cff5e5a1249406d968ca8cd9535f137e930c26c7c66e05ef14d7a2d8fd2cb3244ce0485379d4c07fcac6ecde775699e9ffe6d67fe837a741042d2c1290d2350dadab2e6a4dff7d97485a67c954fe954efff7567e9ac1cc5b5bdafdc6b8f28d6d92d70c847f1e3a1a2002868a1e2e6bea7e2afe0d5b03797bd7d60ab3bc7069526a2a89db05d5bb0daca43df49414f900c5d778b3fb5a70f2f3e6f0159e7ea377ac1a73eeb1243ca3a596d516a61f46113e2fc9224e9f4bf250eadc85a549bcad023f69b229f587989ab5cda34c80cfa524275cba38d17423c2a3d8e6cbb1aa3c8c3a50112889621622b386b881f28f1a52522a34c1d5b7c49911c885201609ab8200431c5cc7c637ae64a1e79e00"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) 00:35:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7d, &(0x7f0000000280)={r1}, 0x8) [ 346.425064][ T83] tipc: Left network mode 00:35:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000de0003080102000000000000004d0000fdff0b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan1\x00'}) 00:35:39 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:35:39 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r1 = syz_clone(0x220d2200, &(0x7f0000000080)="364d0a075ad7c091ddec216c05b97bc47b39b28f9059331362c8116470e41320f88f9e5a19f53690a9b11387c62b93233c25c0902e0aed8e3c0aaf567ff2b778b1e2287af9ec9853ecf62731025e09d7dc69b723c066b80f6a6708374ed7a728686c54918b89583e2e4471472707771ec0b0390df27052cc2ac44275cba5e90460b83110971bbf6868b02f418a21ab6db8c899990309b070a0092892f678", 0x9e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bb18743d446400a3e0a525520a26d233c93b9a80b6703e87d10ddc022087f54763a4bc19610e71bdd45330be1993480403cf3229ead280755ace9f09b3ae36b21c0736053252e81ca0e0fb9d5959cb89f3954ef34cd5db08acfb9831719204e1ad37406b4f469c56f3f89efd672cf89680804f565ca7cbd56bf20bc5880374aafbfbb8ce3f2b728cf61bb1563eddef54b5777c35f6799786734279d696343f67533aed9c76015f7580bb12c20d4a730e16e20f289baba15ab3a5cca62e2c6c1c0eb81defbe4af799da543bc8f1631186ff8474dc2889b1a5954958") syz_open_procfs$userns(r1, &(0x7f00000002c0)) syz_clone(0xc0000200, &(0x7f0000000340)="0f7a4cff3e1152fe0c224d6b11ead199ef805368262f2e6013e7b753b27f498d1646b165fad6ad8687f3310ffe9a4dada1cd114f8ec1f5f24426bccd18518e69203beb78858932a970715d300c2aec141c", 0x51, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="96f73bb23bd7c4c692d92cc6280435487753507bb17b3c71d6612ae4ce01487caea0559f9f13795d2e826186ad8e7625f72bf9a025aff3eb954ef5a18637c7efd2fbb7193cbc79c0f45698a348eab5b762b26ad4e92a22ff98ae80aba4b15161b94b") pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000500)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x541b, 0x0) 00:35:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7d, &(0x7f0000000280)={r1}, 0x8) 00:35:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7d, &(0x7f0000000280)={r1}, 0x8) 00:35:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000de0003080102000000000000004d0000fdff0b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan1\x00'}) 00:35:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="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"/294, 0x126}, {&(0x7f00000034c0)="b652aa8972689c6fd2121fae7606a98c7ebf262aaf6973a48ae75ddc1efb54319826b34f65ef1ab5e6ae148dd25a9208ba1112bef42be73e372b8f5b8ec624e1b40516aa5b1b4a7ecca95d62692b4e5e9cafb705d07900444bfd32ccd7d9aab001f041f2131f0a6210d1f97bda3c68a0bcd9a9e08bbb6ebbb85fad6b2408f212ea0528573662aba1ff60c14f82415be49503ee78840856cb01d0cec3c6dc24b61904b1bcdc76d53aac28b6de67587e7002f4fbd152ae212e759bb97e1c7250851ba4569e6e818287675629926e0527f1dee2101f35fc468cecb1fbb9c27db83f1afa385efdcc89239aff8f608dddf697e6a277c2c31bc9041f7706a2b8ec3d9bf494451ba4c347d2f4e3fd7fbb5ca43e17420f73f05c1860d1a86d3d8e3915acd5ae088e6dd1030e8580c86f7dbc29a897da3342558b841b9bbf40c63f4354cc1bbe595020bccb0a9b8e4be19a485c6b0c2faea8723700065c156b1d86de835e41f150fd524b23be8c050df9458b958debcde8294cd2ed756eb4f93f34c3dc7d7524c1127852ef33a9e2ffb7c9d4d447bee2b2069c524a9d1a61b5a73f9be141d594ff4ef8352e4e948d2e67a0b8bca2ee900cc524ee209fa070a0972d1c6be776179e4c9b02e24780ee91234624be2fff932fde4041eb824becba2d12de0bd3d3dd8690b2f09647f8545bf09f64a14c46f36203ead71fe83619939c8754a3659dd5b74e649b19f6b744c3e6eb0c65115b745f0b08823a9e6bdde3e3563b44dbe658473de9337d4459e54cf7d78f8200d8e83fdbc47a7eaf5af0cdc8ec1405830f602e31d8a38a7b71195901929a9f2ec9e1764bde8e4fa217200d6a8f08ea13beb7b921110fa7d3197cc4e1242f6b011d671b0066c6f0ada5e9e12bf499bd2eb39f1d4e196688d4248341cc99c6cc968e87e2b63e5f90265f383e8e7eedb6884dd58d0e21e7d1164677c31ed38efa7ef18d99cfc7f979794bc65905414a68be92308320e52e5130719aec7ad496bc28c120f72a080abe9ba72d59b52c3936a93528ea6541ece2ebe30d3c3c6f6dc2a0d7c1550b9909bc9817c71722cdc41bbb51f8af3e7ac011cc11ecf7faf406c5a55a98a70afd86ca8f9271c3e0593b9280b6b212ce8d8a0aa1f4957051e97d2d22bdf6787d392fc069f5549f0f7490cf9dfa11463da74d9e19afea505ba5e3aceb268622f14ca1a8a9f278bc12eed03594c30efd1a0f2660438615a0c9c633460255ce2aa97e2970797b87b9521a39dc40b026f689d16ad4752d6e585fe81e415408e6e172d99d82239364498010ee93e755e7d7037309692cb5ab19d8d6da58c2b8fc7e004522ee2d2bb2944afd56ec3b70428aec1beab7057f58bf9f90d7d7548b7b5acff3d2a4c0e46ad9203eb013314d82326f7cf73e677ea7e4228a0081f58ce72e87b88b89fc4c98b57cd850af9734d7104e41c7585025452fb7db89660a4b5ebed42d9a5fb23cb184251660ed3bbcf9e5430cdfce4a7d23950a05176b9114e690520f790d568eaec2832ff551000044872b6dd077b8bd51453e7416dc16905c143014c736d5324286d7b0484949c1ded5878d669760eeb55fa71f53e29108231a059d49c4cc2169f9f6040a0f2c5b9d0b13dcfb6dc95ec87e91e19d39b429ef02ba034f1a2f65fb364574eea251b53718b9166419f33ded66dc1aaf1c5cc9cc33b591c2ac804cc215a9e0c1ed1779711e8f0fecf508aaf094b97a68570aa38c42f1b20b985cef6184b4394e058bf3a8c973367ba6c843253673e70a47a2b82f3971ce0d1e9da0bc3562104089cecb19f6506f89a1d07410b7880ad2cfa124cea6d747ba40a3177f4b71024348f83acf7ea3027ecbd14d282c58bbd389ae5bb423ed4dcb7b7678d6d8c1433bc0a0bafe4cd23ff265f063caeb32f0f29529c2564f20352a688f7fd574120290d12d0e409b8ff0269447c12a3c7add75eda3e269e8d20e57f529d2b196b8e3b1d498431af1a890a8ebb86291bbe274322dcc23d31a44439c65631efdd8f221b13a33c56f2ca908a269c919b657db2920dac8d8d829655abe0e0b6cf9ff54ad4f43e06bc6e742dbf2053295ec8cdcdc27c343e5a41b9cb97f65718f6342aef256a908309915135c8781c5cb48c16dd27ba20e72d41ba311b89e3a2c8da547627af29c8a8f33ac7a383ad349b9940c3d690342cb49193b725db7cd82095bb4def70e3fe3afbac2c2ffc0c0fcd61edc48d997d374949e7275a63eb03b27496b09ce04d6318e23a0e58b32f91d5cf963c2c4314d88e986045dc8efb2881946c382a08aca00d2a590e78d7a8ed5af8c4f9c689a1d8bcd14c82950d9d1f8454f53dbcbb0aa9cc8acf5b2dca2734c67bb9bd04e43e97fd46d01219dfe79672514ebd8c6322e11aaff8814ba5423b4633b4d08fec7cb90daa041713e779b0c9f8e0723726a9ba6ad5fb7cbf21ffcc1cba01ea88fe04b0486cb848ca0bf269c8ee391e6ec531ee1f0b8f7982749c43a0df5244c2b0ad2f73354196276b6e7c1018e355b75cc57458a8e31072bacdc27936ac0f67fd6bb68bd45c56e26b987965e6275cd2b807db4e9d82928686561bd16c2d51d3601b2cb25a06dcd5b5cb022818b572a4d658b7c3e08d4ed1c6f82d5729b30765070bd066afff2ae0429d2b553bf09a34c93fd667e39f58dff9964c240a151965142af98a6a9ed4b2831910d20208e92e461d4ec0a701747f52126f9259e0a2664790c5ec0b5f9c02d521a492529ffd791effde8cba6acf4868d6243535705de6deff48560ca35b27d49d4f828753eddda2cd60b2b699167068639c5491a6b7c11164d048f7f6d0ec11bf1ae588384d07d282466f52e5b2c775921b8587158c314b976f2fb35fc93fe8a67c2120017d5875fd04224dd5cbbcc3fd09d18dcb755353ea42f6eefe9f0153718d527e7170f3a5f42824f0021b874594f74233a3f9c906f6522cf8692a98ed9f4c400c5b42cc63e324ce138fcf54f2027f9e3ee5ed2cc5bd86097e11a8d8c569c107bb9fdaa68edfa4d3a16792be8d7728c4a5ffd73a78e5f4680baac5345cc1c6d1df47f48a591255e53696cec0ce92e682bfc68682ab7d5698b7de6be86a55d4d4390a7d92b3baa9b82609b84f22670774389ebc408de78e76ecf0475e438167b8a16d9a66838efc62af1b2c32d0b1e84857711a677f8b8a320f493e140d77f7e159cf5362dbcb315b184314ab134685869f353d21366a7f8d3f750f92bf1c146cd444a1ef543ca20f1844ab6e8213fcafe6008159d52efabe3654e9b33674b6f2b20002ac0d1e5528f25bbdb0f12f9e476468fa7f08663c84dd48dc1779bf6de57b4212befaf5056dac61eb9f2531402ba2512e036993665a0fa9b72ab36e22887184ad39f24a162eec9e9453a687e2f7a3cb07c812456b892ff85a0e46f6ed0efbf2d29f32442491faae314b8a68a322ff311b54a575c4bfec136c748bd0baff48326b6ceb5341371606a022d087bcfe97306f849e842149a750e9fadc5dcc3374c2d37580645f720645d030e48fb561cdcad2be817d19670173ddaf5bf183fa4140af5074ce5c313383b880367d1a41d1fc35ab03a1b73cbaa445f9dcb7d8e8269cae4c1114e739f7febd7868d34149dd222b70deac82aeb2736c700bd1a673f3c3de342735e1b1574cd54216c2d9589979c12400dd674d2fd347cf701c05167fa160ccf14ec59f6a901041a99534e50b07736e466a14c8bd65a1c4359152702d1fb994007dc5b42fcb667b27bd3fb053e6e801143541052d7b9ff7c533ea517924beadcc3a6a6b9b3b7f9f933e4910b2e5bbe98594612cfb15371eead6b8bf8e41fd8f47da33d84fbb685e870b6ee9e5256f312a615ccf58cedf759ca18f789e61d6fe544357c2b14a0f7771f51262334c0d4c6b74cc6b1cdb7a2d02ab5194b9c2452bc0e7525ffdd0449c32328443b0c7d35adddb57040faf6c22e60b51434c4f8ef965ad59ed4662f37850d43c1186e2dd3c33af8bc43a3f4cf0f9d08bf2b77788af0fdb1f31c9deb64d21f41a0df51e2b5dbfa167f10a8560d2ca0eb42317ececacff32387f90448e6b0605a2a44bbcc2a73770cbf5046a22cf6dbe020939ace6d7aaf8793d0d68d423e822413870be798ec30b2bfc09198e9cffeebff1b06682e52f696e3360db3c9127637b4eca6393b71408bf47b46742f95ef123c452d5a4b6de9b021d9ee6a46c402af25b00ac556712be343381f6e62bbcb983d06e826f517b3090495dfd22760d8f9933339639e933cfcc87bb1b48567e5f041e5505eb3f909006c7094e26f495a5de50c5d526fa9195974e636a54c06cfd21cc862c34bebe1f027d0abfd24caa9309e873bbd42d7d86f7013e305dcfd61d17a0d45a685d908311920a0a703180bf3259bd8a361a1c193210a5978e023eb5ee5b5ea47ea01c0bd2ab74b315975fd440862f5d97e05ea67ee323e63e5b12eefdc930ea08e3cc1eaac3f3c1d29ba2af07ef3b552dc5843d973ba079d8eff59ea644fc4ee290b4b4bc7338ee6b955fc937496b818a93c286b68e16a8aaacad2c79eae02b3094f5d9a829e7c4b8fc9e93e62ecbd633fb10e363bf8330baea0da29b2f7aba4055d4e862640ee8721de8fc69e7b746938396bc45bdc4fde4e7b9e7e10257e24406239e2b67b33abaeb94b77fc6f400ff70d401bd01dc406d01db4e656ca2c3546ec4d57dd6f9cbb8dbdbdbd706f1e55d5f101aee5b4bea256efe3a0b985a4aaa3860d549b84b4da7cfc4f88f5afcd196c3c25cee3e7d843772dcd243fc1c02a606f17e692ff0ea33c034c309af2321ff4c7b730fd25ae0d5fb92a1179cd5ae46fd9da883b556175e9f3f5ef074ac0e263c9357e2d50340c2dc7c3ea1bf56c4042d90936f611a56b70ad41f9cab53279ca2322ca5c708a9c1259403fc5f36482e79c5fb0646c29513a0b24fc0b5a7b2d26815c1debc940a9416ba90ad2fcba2bdeee39a2061285764931c4edb0bdde439035100d47b7d8d7571fc98fe1a4e4a3bb2fcf4ffa698f18f0c5b2536ab75eba9581ed2e5dfcf063409ecb87bd29ca8c7ce0bd61f4be880acbd2cdd996609082a771d0908ffddeff775855fac45995146c89fb0543c486e6032fe876d3f3e9433ddf83d6d04c39394162ed906d450d8113753d923e78", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) [ 346.708588][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000de0003080102000000000000004d0000fdff0b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan1\x00'}) 00:35:40 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:35:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000de0003080102000000000000004d0000fdff0b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan1\x00'}) [ 346.956429][ T27] audit: type=1804 audit(1648773340.057:222): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 347.041401][ T27] audit: type=1804 audit(1648773340.117:223): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 00:35:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r1 = syz_clone(0x220d2200, &(0x7f0000000080)="364d0a075ad7c091ddec216c05b97bc47b39b28f9059331362c8116470e41320f88f9e5a19f53690a9b11387c62b93233c25c0902e0aed8e3c0aaf567ff2b778b1e2287af9ec9853ecf62731025e09d7dc69b723c066b80f6a6708374ed7a728686c54918b89583e2e4471472707771ec0b0390df27052cc2ac44275cba5e90460b83110971bbf6868b02f418a21ab6db8c899990309b070a0092892f678", 0x9e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bb18743d446400a3e0a525520a26d233c93b9a80b6703e87d10ddc022087f54763a4bc19610e71bdd45330be1993480403cf3229ead280755ace9f09b3ae36b21c0736053252e81ca0e0fb9d5959cb89f3954ef34cd5db08acfb9831719204e1ad37406b4f469c56f3f89efd672cf89680804f565ca7cbd56bf20bc5880374aafbfbb8ce3f2b728cf61bb1563eddef54b5777c35f6799786734279d696343f67533aed9c76015f7580bb12c20d4a730e16e20f289baba15ab3a5cca62e2c6c1c0eb81defbe4af799da543bc8f1631186ff8474dc2889b1a5954958") syz_open_procfs$userns(r1, &(0x7f00000002c0)) syz_clone(0xc0000200, &(0x7f0000000340)="0f7a4cff3e1152fe0c224d6b11ead199ef805368262f2e6013e7b753b27f498d1646b165fad6ad8687f3310ffe9a4dada1cd114f8ec1f5f24426bccd18518e69203beb78858932a970715d300c2aec141c", 0x51, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="96f73bb23bd7c4c692d92cc6280435487753507bb17b3c71d6612ae4ce01487caea0559f9f13795d2e826186ad8e7625f72bf9a025aff3eb954ef5a18637c7efd2fbb7193cbc79c0f45698a348eab5b762b26ad4e92a22ff98ae80aba4b15161b94b") pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000500)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x541b, 0x0) [ 347.156432][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:40 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:35:40 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="0b0d32f82fb2427e98b5321c50d9fe9b4df3a6d2d25d53e5fab70d9cc109dd1e92a6d34cf9501b1873a7bf9a82151aa4364e5019894da8d1cfa480d150fce4c01c5c970464a1e240e1b58de455203ac5e837d407ac1815b514a055c851a3f4b9a6faa898093f3eb719a366ba4bc4fa309eb75a7072b2bc31afa48cb16fd8a57202272e1e2a1fc0ffd6541a6e8948af66a58d73275bda528a604826e9c354252957f8be4f9bf59fee1ae8b330a0413b281d4e07de1b0b04346f4e7266b29fab95a974b0629d254d146453d378139525b22d3ce2d9443ffdf2c361c17ca5c3a6199965e22539c4b28386209b5d74e9abf15621e3c1e39220d5814ee1751b6a4e838710eb36522986b1cda8b987a6fa21c5809e19a60d26835d2be29d247b36a01f87e66a96c1b3f88325ad2e38bbff0224a3515fd976dd33cbba58139215389daf39cc33f40065f26bfd12185dab0dffe5e10138bbadba53e55795ff463d87752924e777eca2cf67e5a8de4357bd73a053d32feafd3e7ad8b6feb4d99b8b1222539b11574e6a320d856786db4f0caef7dea4e4e2cb6285bbe963119cfa96e107072892f2ea4b003a652d0d9fc2b2b148b3385394e2878e63dafd65cca2f3d583fbb8e80bd5e52344b0ef370a0bc6996a446b41bf0fc13c630b2baeeaf388e829a2d391d578b924495055de381cc7938885a3c73a09b8542827e666bf12c0ee25a14bed52ea887dc668be550843d822e4723c9432bc4b4abdd6e5d6a7b377b01734ec5c398e614d4ab6870f83e26de8a07c00ea6f2008cb6c4fdca3baba91befe0ab86ffc783577180c74efc1af7e75bdbee16b20cd616b268a82200b2b2b2d360bf214fa686def38ec9a89b2501f3b22c31ccab94949f5b4619db67b05619a9233f9a77ce34e59934b5ebd4f5cb1a6b758a1ec2be19b1204dc2ae7582c4cf16e143a3ce8466d45c69d9ff1f6f11ad0a7ef3ffc9a9e0361b54f0582d5f065a76aefaee1ec9d21c6457d7e631f1866ed0522b212597e88a154f3557be879e46b0b6d6c9960e92e813c3a60461c733c374fcf3047b930530baea9997bc8fc71edbcdf7d6216d5ff5742420f9a975f54fb1743ef52cb6ef68cb235b731bcbbe384b78ee6ecf6cfe2995e212ab84eba489d634571ce367ecd5e3f0d18498b29a513013ae2e20fa9e4bb4ef37078002ea4564c9a5a5564dd1acdf845cfcda173f7e81df4323ba7b2254cf2b6a90cba078ef04d64cf38ae2d86c05baaa987617bfc4279d90fcbee360563bf35855981f2c081244da3715064954f55f024d5e12b478e7e02ef4245033a4bd6501573f79601c12b1d329f3733788ff9cbd7b6e93c6d6a47ccb349d9926406fa3e1e98df2a18f97d443158ffab2a8940a0340a61c3b19527bb7930cbf427dc4ab0514e65c26fea6b9f4bfc40b255433f7762223205308e70dbb7393d7badbaa0f53311449e64633240a7dc3d8a34d7f7d02cfb28b0913a3da16dc13c82544ec822d0a6fcb80c45a58ad014abd7a2724036d64647efa216af94ec506553bc2e98a5011cecc7fd0de2355a2f8bc01dcaddfb437f87c55dd0bf0bf063993dfffe3f35d9018aedbeb4be02cad9ee1f623c80df13e39a1b54d8a7d573521a1b15273d5b9518a76a466991557cc98680f4046e78b181d1b769d98e993d6521cfd9530d375b45a342976d190022fa6d70307057c9640fdb64863aadc6a7e4ef576f9b52159691ff333121cbe414a84e3a2df63af3e69b7c2d84ab45db0280b5b051e2e1e18d5fecfdd6b67251a3d15d17e696f084ec3a95d30836870a9142ee5b83fc337e74fcc13566e5dd765e8c2aa32218a94fd71faf6565aae0b1a3c7f5a4773afaaae2867ab052e52d921c553b20ee60bb34bc30902a00008005d0ed88e70ff241707e90769bfb50c04810b54dd740790d160718f2ec1f404ff2cff18fdfbc350ecd4e0eed7d511006763cac1e7cc1b78d2622d0d16c861cd5e9ba199336bcc582f1ae4a61687994e5bf1eff7bc02e1761203ea4c28c25945d02cd7df82bbca45a9a14ee62dc0db674e9efa2433b9cd298dd04fdb99a2bb4614b3bcaac92bc232701d61e176955d49f7cfe55127617ca45fb9cf80cfc75aafadab003df539ded2cc04d678d3cafa9f9e84d52e44a00a7d206b76e8b338b54b86193e8d49863bce705f7e4d097943454b9a9c87667eb7cc80a355d392ea0ae430bbf371f8eaa1c57c8e7b64ac75fe3ee1209a372202db8da2fb5434a2c4679a1a7c2e84a63fd38100c8322f3ff14a4e8cc02119fdd2a4e69a393b095a6296c2c77824e30fb91e16f40274bb7574f5280f7cf0d7cc4b6b4053bc976bf7eb78eb17438792f73ca8ac541316f88ddb22ca7a6fe65f036a8fcfc5938f53a037e2928d210845238eec7bc623d2b6cc09908cab732593d15f59a9f9d199cb3bfadcdc2644c88df433a5c0771df8eea774eeab62c252aea0fcf3d033be470396c41fda912cf1871289d5526da1444635366070077a43783d3580b65dd421f1ff7153d42374e6e22be9d0dde2e4c5bb122a0a555db5b01580508ba854b15d34957d142fafb9e9920e5033e925f9b34916b506c9358b40d724d85e4103e6364e3ce73a4bef192be54c4020f9a688ea14020e2b8cb447920ff30f9ed00004619f5fb359baf790ef16d23da5ecddea054e6fc8c06e28a04acf153143a304660d7b11c01300324bec4b1f4feb15fe7c143271164e520cec9739a1dd486be968d5c49c22632317893864d0028ea6d7ae9ae9035543f7138875d5b92b1fbdec47b2f188c00e8fb9aa9c138fa4a0467eeab061904cfb343ff116b05a1fac7032a42b0fa719424d37045b961a7d4512fb18546d8b30027bdc7114ad89f3fff75657fd7d188e8c30ace", 0x800}, {&(0x7f0000001340)="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"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) [ 347.513760][ T27] audit: type=1804 audit(1648773340.617:224): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4287455813/syzkaller.FM2CKq/373/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 347.629208][ T9661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:35:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r1 = syz_clone(0x220d2200, &(0x7f0000000080)="364d0a075ad7c091ddec216c05b97bc47b39b28f9059331362c8116470e41320f88f9e5a19f53690a9b11387c62b93233c25c0902e0aed8e3c0aaf567ff2b778b1e2287af9ec9853ecf62731025e09d7dc69b723c066b80f6a6708374ed7a728686c54918b89583e2e4471472707771ec0b0390df27052cc2ac44275cba5e90460b83110971bbf6868b02f418a21ab6db8c899990309b070a0092892f678", 0x9e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bb18743d446400a3e0a525520a26d233c93b9a80b6703e87d10ddc022087f54763a4bc19610e71bdd45330be1993480403cf3229ead280755ace9f09b3ae36b21c0736053252e81ca0e0fb9d5959cb89f3954ef34cd5db08acfb9831719204e1ad37406b4f469c56f3f89efd672cf89680804f565ca7cbd56bf20bc5880374aafbfbb8ce3f2b728cf61bb1563eddef54b5777c35f6799786734279d696343f67533aed9c76015f7580bb12c20d4a730e16e20f289baba15ab3a5cca62e2c6c1c0eb81defbe4af799da543bc8f1631186ff8474dc2889b1a5954958") syz_open_procfs$userns(r1, &(0x7f00000002c0)) syz_clone(0xc0000200, &(0x7f0000000340)="0f7a4cff3e1152fe0c224d6b11ead199ef805368262f2e6013e7b753b27f498d1646b165fad6ad8687f3310ffe9a4dada1cd114f8ec1f5f24426bccd18518e69203beb78858932a970715d300c2aec141c", 0x51, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="96f73bb23bd7c4c692d92cc6280435487753507bb17b3c71d6612ae4ce01487caea0559f9f13795d2e826186ad8e7625f72bf9a025aff3eb954ef5a18637c7efd2fbb7193cbc79c0f45698a348eab5b762b26ad4e92a22ff98ae80aba4b15161b94b") pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000500)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x541b, 0x0) 00:35:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="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"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) [ 348.090414][ T27] audit: type=1804 audit(1648773341.187:225): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 00:35:41 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x80285442, 0x0) [ 348.162348][ T27] audit: type=1804 audit(1648773341.237:226): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 00:35:41 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r1 = syz_clone(0x220d2200, &(0x7f0000000080)="364d0a075ad7c091ddec216c05b97bc47b39b28f9059331362c8116470e41320f88f9e5a19f53690a9b11387c62b93233c25c0902e0aed8e3c0aaf567ff2b778b1e2287af9ec9853ecf62731025e09d7dc69b723c066b80f6a6708374ed7a728686c54918b89583e2e4471472707771ec0b0390df27052cc2ac44275cba5e90460b83110971bbf6868b02f418a21ab6db8c899990309b070a0092892f678", 0x9e, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bb18743d446400a3e0a525520a26d233c93b9a80b6703e87d10ddc022087f54763a4bc19610e71bdd45330be1993480403cf3229ead280755ace9f09b3ae36b21c0736053252e81ca0e0fb9d5959cb89f3954ef34cd5db08acfb9831719204e1ad37406b4f469c56f3f89efd672cf89680804f565ca7cbd56bf20bc5880374aafbfbb8ce3f2b728cf61bb1563eddef54b5777c35f6799786734279d696343f67533aed9c76015f7580bb12c20d4a730e16e20f289baba15ab3a5cca62e2c6c1c0eb81defbe4af799da543bc8f1631186ff8474dc2889b1a5954958") syz_open_procfs$userns(r1, &(0x7f00000002c0)) syz_clone(0xc0000200, &(0x7f0000000340)="0f7a4cff3e1152fe0c224d6b11ead199ef805368262f2e6013e7b753b27f498d1646b165fad6ad8687f3310ffe9a4dada1cd114f8ec1f5f24426bccd18518e69203beb78858932a970715d300c2aec141c", 0x51, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="96f73bb23bd7c4c692d92cc6280435487753507bb17b3c71d6612ae4ce01487caea0559f9f13795d2e826186ad8e7625f72bf9a025aff3eb954ef5a18637c7efd2fbb7193cbc79c0f45698a348eab5b762b26ad4e92a22ff98ae80aba4b15161b94b") pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000500)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x541b, 0x0) 00:35:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:41 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x80285442, 0x0) 00:35:41 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x80285442, 0x0) 00:35:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="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"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) 00:35:41 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x80285442, 0x0) [ 348.634293][ T27] audit: type=1804 audit(1648773341.737:227): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4287455813/syzkaller.FM2CKq/374/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 00:35:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') 00:35:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:41 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') 00:35:42 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') 00:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 349.164200][ T27] audit: type=1804 audit(1648773342.267:228): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 00:35:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)={0x0, 0x3, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra]}, 0x28) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 00:35:42 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') 00:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:42 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40200600, &(0x7f0000000200)="92f008db7c8c39243d27ebdd85e9", 0xe, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000002180)="5ecfa9d24c33e652e1cb2ae6e64c25175c975f83e3fba3f105154fc2797faa978925e1f6d7f7d00275349d98b42f19cfee8924404f5ec135cd75a0c714d39f02cda8df95afa44b5a83109ee41986e3d618d55b453821015eb1b6d1f8b63a9e268558ef499b61d4795d577f907963145b6975c7ee5ef5ccfdae039173d7c512197c14ea234d52e7e54e84ba39cfcb6e58e1dee3f73c00439096a20217a15ac2db29ff80b073ba75119082f4a5d57f6704fc93a335e4a899bafc618cdbdf080c0eadf7668c4e3ed49c27106bb3b41c30051ba25983aa09177c41400c437666c530f2ae36b653953e") sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="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", 0x800}, {&(0x7f0000001340)="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"/294, 0x126}, {&(0x7f00000034c0)="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", 0xe42}], 0x3}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r2, 0x36, 0x1, 0x9, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000002540)={&(0x7f0000002300)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002340)="4ed2e626021c8d4ba4fb12ad4d0516236d2990b562258a0e77851738eaf17e8882963d28c143e48a02c536c98ef1840ccabcdd76b69b5d412517560be5753520f7d29469cbf1d6efbceefd265799e3e6a3f0ccd59d4b0b69614f6f168520a1564a2ed411fc389879cf9a9bb1c3fbef", 0x6f}, {&(0x7f00000023c0)="f2ae350ed8915ba8322c25f1e7dabd518c65caa8b7697a47e88c0d5e1b07aed2ce7c3f4d7720f77b60b0dc7579dd24190f9c54762086265227f918cf8e7d72424a2c608588", 0x45}], 0x2, 0x0, 0xc0}, 0x4008001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000022c0)={0x3, &(0x7f0000002280)=[{0x80, 0xf2, 0x1, 0x9aa}, {0x1af7, 0xff, 0xe, 0x477c}, {0x9480, 0x0, 0x9, 0x6}]}) [ 349.210055][ T27] audit: type=1804 audit(1648773342.287:229): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 00:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000140)=""/52, 0x34) getdents(r0, &(0x7f00000001c0)=""/4096, 0x1000) 00:35:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xd3, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)) 00:35:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = dup2(r0, r0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x7}, 0xe) 00:35:42 executing program 4: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:42 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:35:43 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:35:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x0, {0x0, 0x9}}) 00:35:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:35:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/186, 0x47, 0xba, 0x1}, 0x20) 00:35:43 executing program 4: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 4: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 3: syz_io_uring_setup(0x5b59, &(0x7f00000000c0), &(0x7f0000c2a000/0x4000)=nil, &(0x7f0000884000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 00:35:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/186, 0x47, 0xba, 0x1}, 0x20) 00:35:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 00:35:43 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:35:43 executing program 4: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 00:35:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) readv(r1, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x18}], 0x1000000000000308) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) 00:35:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/186, 0x47, 0xba, 0x1}, 0x20) 00:35:43 executing program 1: r0 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:35:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/186, 0x47, 0xba, 0x1}, 0x20) 00:35:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0xb01}, 0x1c}}, 0x0) 00:35:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local, r2}, 0x14) 00:35:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 00:35:43 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) 00:35:43 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000740)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@local}}, 0xe8) 00:35:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0xb01}, 0x1c}}, 0x0) 00:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local, r2}, 0x14) 00:35:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 00:35:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private0}) 00:35:43 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000740)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@local}}, 0xe8) 00:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0xb01}, 0x1c}}, 0x0) 00:35:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local, r2}, 0x14) 00:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:43 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000740)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@local}}, 0xe8) 00:35:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0xb01}, 0x1c}}, 0x0) 00:35:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@local, r2}, 0x14) 00:35:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:44 executing program 2: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x7ffff000}, 0x1, 0x0, 0x0, 0x4}, 0x80) 00:35:44 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000740)={{{@in=@broadcast, @in=@broadcast}}, {{@in=@private}, 0x0, @in=@local}}, 0xe8) 00:35:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:35:44 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30, 0x2d, 0x34, 0x3a, 0x37, 0x2f, 0x4e]}}}}]}) 00:35:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:35:44 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:35:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000055fe0000150600000ee60000bf050000000000001f6500000000000065070000851a0000270700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad430100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a5642cb064ecd5615f3196e3359aceb7556e7e60bd5d2e4b5992de991371274fdff6e79fc722f15659a7c85615c1b88bc894125cfe2314e887c1677fbefd35893d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be000000820102f369f36d000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c9bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd18dc34b0fc0271124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722da6cb884d1afe82f7f722e38345226fe4b997996271700241094d272dd8b754b2dd36d44f92991a7817450bc7921dd372e621dd447b86e7ffd1b693ae366b0f11db6ee4830db4713e5ce6cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e08de3a638c4fdb8562eb85173720cc26ac68b40a64f0b851df1147c9f5013c82fc98604bd70cd56609a6b739637e3010000d9cf81bcb1d262845762f6b0a284cc463b42492bab0d7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b5503d0dd35092250bbce4f618cad2375a34c7f15c3096f300004468cf1aba4a6f21ed0eb3681c696320d3251b7eab79ad8b126500419e25a94ce13a7a96deac79c90b8df101000000f97eaa49fd22942a0f73879bad0d814f230f954eec84ebb7e20594e2e6f2371dda9fb3977f33c516aadc9bc51f23b12f761c4a0335cce4fbe7baafc8d0a6c6d8d0ebc2a2e97f0629af75bcc83cada15d686de0a0bebb96491b4b655f94dfa2ce197dc845ad83ddbcd4c896639831b8e5f254db99752a86b576337ec250c6f83b8cc300f8ffffffffffffe9f5f4628de6563809cdbe2101399c00000000000000000000000000000000d041c283edaef472d000d169d827488760c9eaba70ba10633e1ec690ac69650b22e9000000000000000000000000000000002dcfb725779cf46b992321d47fac569e7824d2aed55b2f501f6e217a89cd66737bd04c0b24a50c8213e6d5f4cee5244932462e0aa6df6ad2e79f98abb77a739a7aa5d395a43cf072befd4c3e7be8ca2f9ba80c689f997dce5417e5bfdadb8cfa6d6734de4580adcbc2570bacb2983fe74eab647bea27"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6a, 0x10, &(0x7f0000000140)}, 0x48) [ 351.185429][ T9828] tmpfs: Bad value for 'mpol' 00:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 00:35:44 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30, 0x2d, 0x34, 0x3a, 0x37, 0x2f, 0x4e]}}}}]}) 00:35:44 executing program 0: unshare(0x2a040600) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x5}) mq_timedsend(r0, &(0x7f00000000c0)="a0762044c7b6", 0x6, 0x0, 0x0) 00:35:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x40049409, &(0x7f0000000040)={'gre0\x00', 0x0}) 00:35:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6a, 0x10, &(0x7f0000000140)}, 0x48) [ 351.340172][ T9841] tmpfs: Bad value for 'mpol' 00:35:44 executing program 2: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) 00:35:44 executing program 4: getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) 00:35:44 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30, 0x2d, 0x34, 0x3a, 0x37, 0x2f, 0x4e]}}}}]}) 00:35:44 executing program 0: unshare(0x2a040600) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x5}) mq_timedsend(r0, &(0x7f00000000c0)="a0762044c7b6", 0x6, 0x0, 0x0) 00:35:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6a, 0x10, &(0x7f0000000140)}, 0x48) 00:35:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 00:35:44 executing program 4: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:44 executing program 0: unshare(0x2a040600) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x5}) mq_timedsend(r0, &(0x7f00000000c0)="a0762044c7b6", 0x6, 0x0, 0x0) [ 351.742920][ T9849] tmpfs: Bad value for 'mpol' 00:35:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff6a, 0x10, &(0x7f0000000140)}, 0x48) 00:35:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:35:45 executing program 4: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 0: unshare(0x2a040600) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x5}) mq_timedsend(r0, &(0x7f00000000c0)="a0762044c7b6", 0x6, 0x0, 0x0) 00:35:45 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30, 0x2d, 0x34, 0x3a, 0x37, 0x2f, 0x4e]}}}}]}) 00:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:35:45 executing program 4: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 5: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 352.172294][ T9877] tmpfs: Bad value for 'mpol' 00:35:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 00:35:45 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 5: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 4: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:35:45 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) setns(r0, 0x0) 00:35:45 executing program 5: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 00:35:45 executing program 0: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000001c0)='\x80*\',(,@\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 0: r0 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:35:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 00:35:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000002900), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) 00:35:45 executing program 0: r0 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:45 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:35:45 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 0: r0 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:35:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140b, 0x1}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0) 00:35:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 0: r0 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:35:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(r1, r1) dup2(r2, r0) 00:35:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 00:35:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x12, 0xfa, 0x8, 0xc72, 0x14, 0xaddf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xf8, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 00:35:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000000c0)='et\xcc\xb5\xad\t\x04S\x90uG\xdf\xa3\xe0\xd5\xfe\xbf\xdb\v\x96\x7f\x0e}', 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x3, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'custom0\x00'}) 00:35:46 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x842, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000146000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000214010a1f0200050c1008000800014004000000", 0x24}], 0x1}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x10160}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 00:35:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) 00:35:46 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x100000000, 0x8) 00:35:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 00:35:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) 00:35:46 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x100000000, 0x8) 00:35:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 00:35:46 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}}, 0x0) 00:35:47 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 00:35:47 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x100000000, 0x8) 00:35:47 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}}, 0x0) 00:35:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) 00:35:47 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 00:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}}, 0x0) 00:35:47 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x100000000, 0x8) 00:35:47 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:47 executing program 5: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000013c0)=0x400) 00:35:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) 00:35:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}}, 0x0) 00:35:47 executing program 3: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010", 0x12, 0x8000}], 0x0, &(0x7f000006d200)) 00:35:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@delchain={0x68, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000002c0)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001340)={0x2, 0x11e000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8923, &(0x7f0000001ec0)={'ipvlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001f00)={0xbc, r3, 0x921, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x7e, 0x5b, "b44a5999279571a8baf4971bbf2e5616016f2e616e6465707379204cfcc00fcfeda992bcb6dc7d2714aabb7be1682fa5a997e213ce053e59810b2110261c4d300efd833dc0414a79a3c8690d95b987e33db0736c231db5ce2d0e6794273505bf0e259cd4ae41b9e32c25eafc2fbe99d47bcda7722befd473bae6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "3ffa8016"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf252c00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xe0}, @NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000085) 00:35:47 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f14fe01b2a49b90930206040800101301041614053900090035000000810000000600154002000755060022dc131a014873139b84136ef75adb83de4411000b00", 0x48}, {&(0x7f0000000140)="001202ff85ffa57f2ab2ffef64", 0xd}], 0x2, 0x0, 0x0, 0xf000000}, 0x0) 00:35:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:35:47 executing program 1: unshare(0x6c060000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/694], 0x67b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21800800}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040020349002000400010004000200050008000300000011000700d251cef441baf8652429a13e3e0000000c00986e0500020002000000090007001377fc0d"], 0x60}, 0x1, 0x0, 0x0, 0x20040044}, 0x80044) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a80)={{}, 0x0, 0x2, @unused=[0x7fffffff, 0xfffffffffffffff9, 0x800, 0xfff], @subvolid=0x9}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:47 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x3181020, 0x0) 00:35:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@delchain={0x68, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000002c0)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001340)={0x2, 0x11e000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8923, &(0x7f0000001ec0)={'ipvlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001f00)={0xbc, r3, 0x921, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x7e, 0x5b, "b44a5999279571a8baf4971bbf2e5616016f2e616e6465707379204cfcc00fcfeda992bcb6dc7d2714aabb7be1682fa5a997e213ce053e59810b2110261c4d300efd833dc0414a79a3c8690d95b987e33db0736c231db5ce2d0e6794273505bf0e259cd4ae41b9e32c25eafc2fbe99d47bcda7722befd473bae6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "3ffa8016"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf252c00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xe0}, @NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000085) [ 354.522241][T10031] lo: Caught tx_queue_len zero misconfig [ 354.539191][T10031] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:48 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x3181020, 0x0) 00:35:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f14fe01b2a49b90930206040800101301041614053900090035000000810000000600154002000755060022dc131a014873139b84136ef75adb83de4411000b00", 0x48}, {&(0x7f0000000140)="001202ff85ffa57f2ab2ffef64", 0xd}], 0x2, 0x0, 0x0, 0xf000000}, 0x0) 00:35:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:35:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@delchain={0x68, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000002c0)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001340)={0x2, 0x11e000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8923, &(0x7f0000001ec0)={'ipvlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001f00)={0xbc, r3, 0x921, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x7e, 0x5b, "b44a5999279571a8baf4971bbf2e5616016f2e616e6465707379204cfcc00fcfeda992bcb6dc7d2714aabb7be1682fa5a997e213ce053e59810b2110261c4d300efd833dc0414a79a3c8690d95b987e33db0736c231db5ce2d0e6794273505bf0e259cd4ae41b9e32c25eafc2fbe99d47bcda7722befd473bae6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "3ffa8016"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf252c00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xe0}, @NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000085) 00:35:48 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:48 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x3181020, 0x0) 00:35:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f14fe01b2a49b90930206040800101301041614053900090035000000810000000600154002000755060022dc131a014873139b84136ef75adb83de4411000b00", 0x48}, {&(0x7f0000000140)="001202ff85ffa57f2ab2ffef64", 0xd}], 0x2, 0x0, 0x0, 0xf000000}, 0x0) 00:35:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:35:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@delchain={0x68, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000002c0)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001340)={0x2, 0x11e000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8923, &(0x7f0000001ec0)={'ipvlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001f00)={0xbc, r3, 0x921, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x7e, 0x5b, "b44a5999279571a8baf4971bbf2e5616016f2e616e6465707379204cfcc00fcfeda992bcb6dc7d2714aabb7be1682fa5a997e213ce053e59810b2110261c4d300efd833dc0414a79a3c8690d95b987e33db0736c231db5ce2d0e6794273505bf0e259cd4ae41b9e32c25eafc2fbe99d47bcda7722befd473bae6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "3ffa8016"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf252c00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x24000000) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xe0}, @NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000085) 00:35:50 executing program 1: unshare(0x6c060000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/694], 0x67b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21800800}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040020349002000400010004000200050008000300000011000700d251cef441baf8652429a13e3e0000000c00986e0500020002000000090007001377fc0d"], 0x60}, 0x1, 0x0, 0x0, 0x20040044}, 0x80044) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a80)={{}, 0x0, 0x2, @unused=[0x7fffffff, 0xfffffffffffffff9, 0x800, 0xfff], @subvolid=0x9}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:50 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f14fe01b2a49b90930206040800101301041614053900090035000000810000000600154002000755060022dc131a014873139b84136ef75adb83de4411000b00", 0x48}, {&(0x7f0000000140)="001202ff85ffa57f2ab2ffef64", 0xd}], 0x2, 0x0, 0x0, 0xf000000}, 0x0) 00:35:50 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x3181020, 0x0) 00:35:50 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:35:50 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffff, 0x0, [{}, {}, {}, {}, {0x0, 0xa}]}}) 00:35:50 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 00:35:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 00:35:50 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 00:35:50 executing program 0: r0 = syz_io_uring_setup(0x6db8, &(0x7f0000000200)={0x0, 0x0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000220000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x20220002, 0x2) 00:35:50 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 357.844707][T10078] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:53 executing program 1: unshare(0x6c060000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/694], 0x67b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21800800}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040020349002000400010004000200050008000300000011000700d251cef441baf8652429a13e3e0000000c00986e0500020002000000090007001377fc0d"], 0x60}, 0x1, 0x0, 0x0, 0x20040044}, 0x80044) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a80)={{}, 0x0, 0x2, @unused=[0x7fffffff, 0xfffffffffffffff9, 0x800, 0xfff], @subvolid=0x9}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:53 executing program 0: r0 = syz_io_uring_setup(0x6db8, &(0x7f0000000200)={0x0, 0x0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000220000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x20220002, 0x2) 00:35:53 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 00:35:53 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:35:53 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:53 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:53 executing program 2: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 00:35:53 executing program 0: r0 = syz_io_uring_setup(0x6db8, &(0x7f0000000200)={0x0, 0x0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000220000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x20220002, 0x2) 00:35:53 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:35:53 executing program 0: r0 = syz_io_uring_setup(0x6db8, &(0x7f0000000200)={0x0, 0x0, 0x40}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000220000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x20220002, 0x2) [ 360.806888][T10114] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:35:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:35:56 executing program 1: unshare(0x6c060000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/694], 0x67b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x21800800}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="10006e80040020349002000400010004000200050008000300000011000700d251cef441baf8652429a13e3e0000000c00986e0500020002000000090007001377fc0d"], 0x60}, 0x1, 0x0, 0x0, 0x20040044}, 0x80044) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a80)={{}, 0x0, 0x2, @unused=[0x7fffffff, 0xfffffffffffffff9, 0x800, 0xfff], @subvolid=0x9}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:56 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:35:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:35:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:35:56 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:35:56 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020001000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b000000000000360600000003008f000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000"], 0x67b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) unshare(0x0) socket(0x0, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x4, 0x4) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)}], 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x2000000}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:35:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:35:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) [ 365.951922][T10155] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 00:36:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:00 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:36:00 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, &(0x7f0000000140)=0x2c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "3ba64a47"}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f00000015c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x94, &(0x7f0000000000)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_lru_activate\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:36:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) 00:36:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:01 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xfffffda0) 00:36:01 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:01 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xfffffda0) 00:36:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)) 00:36:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6dab) 00:36:02 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xfffffda0) 00:36:02 executing program 1: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r0, r1, 0x0) dup2(r0, r2) 00:36:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9", 0xc41) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004080)}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe0f) 00:36:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:02 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:02 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="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", 0xc41) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004080)}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe0f) [ 369.819967][ T3664] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 370.089964][ T3664] usb 6-1: Using ep0 maxpacket: 16 [ 370.210082][ T3664] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.220002][ T3664] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 370.390115][ T3664] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.400333][ T3664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.408478][ T3664] usb 6-1: Product: syz [ 370.412841][ T3664] usb 6-1: Manufacturer: syz [ 370.417599][ T3664] usb 6-1: SerialNumber: syz [ 370.464159][ T3664] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 370.672452][ T3664] usb 6-1: USB disconnect, device number 20 00:36:04 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:04 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xfffffda0) 00:36:04 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, r0) 00:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="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", 0xc41) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004080)}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe0f) 00:36:04 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:04 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:04 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:04 executing program 1: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)="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", 0xc41) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000004080)}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe0f) 00:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) [ 371.499965][ T3664] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 371.750061][ T3664] usb 6-1: Using ep0 maxpacket: 16 [ 371.874412][ T3664] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.884410][ T3664] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 372.080377][ T3664] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.089459][ T3664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.110102][ T3664] usb 6-1: Product: syz [ 372.114294][ T3664] usb 6-1: Manufacturer: syz [ 372.118873][ T3664] usb 6-1: SerialNumber: syz [ 372.172361][ T3664] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 372.398511][ T3664] usb 6-1: USB disconnect, device number 21 00:36:06 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) 00:36:06 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:06 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:06 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) 00:36:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) 00:36:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xa0}}, 0x0) 00:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x9b, &(0x7f0000000040)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x9b, &(0x7f0000000040)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x9b, &(0x7f0000000040)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 373.239920][ T3661] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 373.489967][ T3661] usb 6-1: Using ep0 maxpacket: 16 [ 373.610013][ T3661] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.619697][ T3661] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 373.780133][ T3661] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.792069][ T3661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.809625][ T3661] usb 6-1: Product: syz [ 373.814186][ T3661] usb 6-1: Manufacturer: syz [ 373.818875][ T3661] usb 6-1: SerialNumber: syz [ 373.873986][ T3661] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 374.096999][ T3661] usb 6-1: USB disconnect, device number 22 00:36:07 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:07 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:07 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 00:36:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6800011, 0x10012, r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x5, 0x4) 00:36:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x9b, &(0x7f0000000040)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:36:07 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, 0x0) 00:36:07 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 00:36:07 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) 00:36:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be040200fe02040003034300040018000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160007000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) [ 374.850302][T10303] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 374.858403][T10303] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 00:36:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be040200fe02040003034300040018000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160007000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) 00:36:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be040200fe02040003034300040018000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160007000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) [ 374.933015][T10305] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 374.941393][T10305] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 374.950390][ T3661] usb 6-1: new high-speed USB device number 23 using dummy_hcd 00:36:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000440)="7800000018001f05b9409b0dffff00000212be040200fe02040003034300040018000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000000000000400160007000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x0, 0x0, 0x0) [ 374.988524][T10307] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 375.004669][T10307] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 375.048666][T10309] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 375.063882][T10309] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 375.220150][ T3661] usb 6-1: Using ep0 maxpacket: 16 [ 375.339980][ T3661] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.349657][ T3661] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 00:36:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x1}}, 0x0) 00:36:08 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[], 0x38}}, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 00:36:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newnexthop={0x28, 0x68, 0x139, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6}]}, 0x28}}, 0x0) 00:36:08 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r0) [ 375.543505][T10315] vcan0: tx address claim with dlc 1 [ 375.550249][ T3661] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.559307][ T3661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.604255][ T3661] usb 6-1: Product: syz [ 375.615378][ T3661] usb 6-1: Manufacturer: syz [ 375.629629][ T3661] usb 6-1: SerialNumber: syz [ 375.710790][ T3661] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 375.932836][ T143] usb 6-1: USB disconnect, device number 23 00:36:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newnexthop={0x28, 0x68, 0x139, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6}]}, 0x28}}, 0x0) 00:36:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[], 0x38}}, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 00:36:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x1}}, 0x0) 00:36:09 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r0) 00:36:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newnexthop={0x28, 0x68, 0x139, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6}]}, 0x28}}, 0x0) 00:36:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[], 0x38}}, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 00:36:09 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r0) [ 376.511905][T10328] vcan0: tx address claim with dlc 1 00:36:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newnexthop={0x28, 0x68, 0x139, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6}]}, 0x28}}, 0x0) 00:36:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x1}}, 0x0) 00:36:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[], 0x38}}, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 00:36:09 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r0) 00:36:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 00:36:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x1}}, 0x0) [ 376.712400][T10348] vcan0: tx address claim with dlc 1 [ 376.869470][T10358] vcan0: tx address claim with dlc 1 00:36:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:10 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 00:36:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 00:36:10 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x4ac9b8076e9079f6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f00000004c0)) 00:36:10 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 00:36:10 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 00:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 00:36:10 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x4ac9b8076e9079f6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f00000004c0)) 00:36:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4020aeb2, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 00:36:10 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 00:36:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:10 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x4ac9b8076e9079f6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f00000004c0)) 00:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000700)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0) 00:36:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) 00:36:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:10 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x4ac9b8076e9079f6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f00000004c0)) 00:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000700)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0) 00:36:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) 00:36:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000700)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0) 00:36:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x21}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)) 00:36:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) [ 378.035215][T10416] device macvtap1 entered promiscuous mode [ 378.057961][T10416] device vlan0 entered promiscuous mode [ 378.161434][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.167768][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 00:36:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) 00:36:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000700)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x12}]}, 0x24}}, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) 00:36:11 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$usbmon(r2, &(0x7f0000000240)=""/236, 0x2000032c) 00:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) poll(0x0, 0x0, 0x0) 00:36:11 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 00:36:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 378.303198][T10428] device macvtap2 entered promiscuous mode 00:36:11 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 00:36:11 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$usbmon(r2, &(0x7f0000000240)=""/236, 0x2000032c) [ 378.419144][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) poll(0x0, 0x0, 0x0) 00:36:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) 00:36:11 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 00:36:11 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$usbmon(r2, &(0x7f0000000240)=""/236, 0x2000032c) 00:36:11 executing program 1: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 00:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) poll(0x0, 0x0, 0x0) 00:36:11 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) [ 378.630535][T10447] device macvtap3 entered promiscuous mode [ 378.644031][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:11 executing program 1: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) 00:36:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) 00:36:11 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$usbmon(r2, &(0x7f0000000240)=""/236, 0x2000032c) 00:36:11 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) poll(0x0, 0x0, 0x0) 00:36:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:36:11 executing program 0: io_setup(0xce6, &(0x7f0000000040)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:36:12 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:12 executing program 1: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xb01d}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD, 0x0) io_uring_enter(r0, 0x409e, 0x0, 0x0, 0x0, 0x0) [ 378.848660][T10462] device macvtap4 entered promiscuous mode [ 378.871695][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:12 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000000c0)="cd6d610400f9f59b", 0x8) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 378.948779][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 378.948795][ T27] audit: type=1800 audit(1648773372.047:231): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=1165 res=0 errno=0 00:36:12 executing program 0: io_setup(0xce6, &(0x7f0000000040)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:36:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) 00:36:12 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000000c0)="cd6d610400f9f59b", 0x8) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 379.084216][T10478] EXT4-fs: 70 callbacks suppressed [ 379.084234][T10478] EXT4-fs (sda1): Delayed block allocation failed for inode 1165 at logical offset 0 with max blocks 1 with error 28 00:36:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x8}}], {0x14}}, 0x3c}}, 0x0) 00:36:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) [ 379.144001][T10478] EXT4-fs (sda1): This should not happen!! Data will be lost [ 379.144001][T10478] [ 379.162846][T10478] EXT4-fs (sda1): Total free blocks count 1 [ 379.168776][T10478] EXT4-fs (sda1): Free/Dirty block details [ 379.175159][T10478] EXT4-fs (sda1): free_blocks=10864 [ 379.181919][T10478] EXT4-fs (sda1): dirty_blocks=13 [ 379.186960][T10478] EXT4-fs (sda1): Block reservation details 00:36:12 executing program 0: io_setup(0xce6, &(0x7f0000000040)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 379.193266][T10478] EXT4-fs (sda1): i_reserved_data_blocks=1 00:36:12 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000000c0)="cd6d610400f9f59b", 0x8) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 379.289953][ T27] audit: type=1804 audit(1648773372.387:232): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972343238373435353831332F73797A6B616C6C65722E464D32434B712F3432382F48C7C060 dev="sda1" ino=1165 res=1 errno=0 00:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x8}}], {0x14}}, 0x3c}}, 0x0) 00:36:12 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) [ 379.343412][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:12 executing program 0: io_setup(0xce6, &(0x7f0000000040)=0x0) r1 = socket$rds(0x15, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x8}}], {0x14}}, 0x3c}}, 0x0) 00:36:12 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000000c0)="cd6d610400f9f59b", 0x8) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) [ 379.469275][ T27] audit: type=1800 audit(1648773372.567:233): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=1169 res=0 errno=0 00:36:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x8}}], {0x14}}, 0x3c}}, 0x0) 00:36:12 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:12 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6eb7, 0x0, 0x0, 0x0, 0x0) [ 379.628487][T10508] EXT4-fs (sda1): Delayed block allocation failed for inode 1169 at logical offset 0 with max blocks 1 with error 28 [ 379.636824][ T27] audit: type=1800 audit(1648773372.727:234): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1155 res=0 errno=0 [ 379.645952][T10508] EXT4-fs (sda1): This should not happen!! Data will be lost [ 379.645952][T10508] [ 379.677691][ T4699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.712294][ T3622] syz-executor.1 (3622) used greatest stack depth: 22144 bytes left [ 379.748134][T10500] EXT4-fs warning (device sda1): ext4_resize_begin:73: There are errors in the filesystem, so online resizing is not allowed [ 379.782354][ T27] audit: type=1800 audit(1648773372.807:235): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=1176 res=0 errno=0 [ 379.858761][ T27] audit: type=1804 audit(1648773372.847:236): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972343238373435353831332F73797A6B616C6C65722E464D32434B712F3432392F48C7C060 dev="sda1" ino=1169 res=1 errno=0 [ 379.873272][T10512] EXT4-fs warning (device sda1): ext4_resize_begin:73: There are errors in the filesystem, so online resizing is not allowed [ 379.912746][ T4699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.952241][T10514] EXT4-fs warning (device sda1): ext4_resize_begin:73: There are errors in the filesystem, so online resizing is not allowed [ 379.973689][ T27] audit: type=1804 audit(1648773372.977:237): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1155 res=1 errno=0 [ 380.077775][ T27] audit: type=1804 audit(1648773373.057:238): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D74657374646972323437343537343435382F73797A6B616C6C65722E436D69775A792F3338372F48C7C060 dev="sda1" ino=1176 res=1 errno=0 [ 380.109354][ T4699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.225806][ T4699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.423412][ T4699] device hsr_slave_0 left promiscuous mode [ 381.460329][ T4699] device hsr_slave_1 left promiscuous mode [ 381.471001][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.478464][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.532111][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.539537][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.562206][ T4699] device bridge_slave_1 left promiscuous mode [ 381.570031][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.614169][ T4699] device bridge_slave_0 left promiscuous mode [ 381.629964][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.662424][ T4699] device veth1_macvtap left promiscuous mode [ 381.668944][ T4699] device veth0_macvtap left promiscuous mode [ 381.675309][ T4699] device veth1_vlan left promiscuous mode [ 381.691932][ T4699] device veth0_vlan left promiscuous mode [ 381.922485][ T4699] bond4 (unregistering): (slave vlan5): Releasing active interface [ 381.939083][ T4699] bond4 (unregistering): Released all slaves [ 381.960740][ T4699] bond3 (unregistering): (slave vlan4): Releasing active interface [ 381.979460][ T4699] bond3 (unregistering): Released all slaves [ 381.994797][ T4699] bond2 (unregistering): (slave vlan3): Releasing active interface [ 382.013223][ T4699] bond2 (unregistering): Released all slaves [ 382.026053][ T4699] bond1 (unregistering): (slave vlan2): Releasing active interface [ 382.043147][ T4699] bond1 (unregistering): Released all slaves [ 382.214730][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 382.228089][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 382.241981][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.259001][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.341464][ T4699] bond0 (unregistering): Released all slaves [ 386.000014][ T47] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 388.419513][ T3639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.428736][ T3639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.436737][ T3639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.444633][ T3639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.452104][ T3639] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 388.459498][ T3639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.557217][T10706] chnl_net:caif_netlink_parms(): no params data found [ 388.601410][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.608656][T10706] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.617307][T10706] device bridge_slave_0 entered promiscuous mode [ 388.629457][T10706] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.636739][T10706] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.644891][T10706] device bridge_slave_1 entered promiscuous mode [ 388.667623][T10706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.679525][T10706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.708275][T10706] team0: Port device team_slave_0 added [ 388.716372][T10706] team0: Port device team_slave_1 added [ 388.741814][T10706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.748776][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.774859][T10706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.787590][T10706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.794812][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.828398][T10706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.858998][T10706] device hsr_slave_0 entered promiscuous mode [ 388.865743][T10706] device hsr_slave_1 entered promiscuous mode [ 388.946698][T10706] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.953994][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.962395][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.969470][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.017193][T10706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.029733][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.039210][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.047442][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.057127][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 389.072392][T10706] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.082654][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.092795][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.099928][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.122775][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.131642][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.138697][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.148436][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.167846][T10706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.184777][T10706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.197095][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.205512][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.214777][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.223667][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.232897][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.256713][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.265220][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.272844][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.541696][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.558926][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.567598][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.577647][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.585906][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.595593][T10706] device veth0_vlan entered promiscuous mode [ 389.608986][T10706] device veth1_vlan entered promiscuous mode [ 389.636251][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.644522][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.654599][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.663663][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.673862][T10706] device veth0_macvtap entered promiscuous mode [ 389.686625][T10706] device veth1_macvtap entered promiscuous mode [ 389.703577][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.714207][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.728710][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.739565][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.750025][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.761971][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.772059][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.782775][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.793192][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.803654][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.817570][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.826138][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.835572][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.843796][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.852937][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.865117][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.876515][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.889189][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.900473][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.910528][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.921192][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.931107][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.941606][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.951464][T10706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.962719][T10706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.973658][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.986119][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.995010][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.065296][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.086697][ T3736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.086969][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.102289][ T3736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.113623][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.122710][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 00:36:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) 00:36:23 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "fa65b6", 0x28, 0x6, 0x0, @empty, @private1, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfec0ffff}}}}}}}}}}, 0x0) 00:36:23 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6eb7, 0x0, 0x0, 0x0, 0x0) 00:36:23 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:23 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) [ 390.258990][ T27] audit: type=1800 audit(1648773383.357:239): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=1165 res=0 errno=0 00:36:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6eb7, 0x0, 0x0, 0x0, 0x0) [ 390.340801][ T27] audit: type=1800 audit(1648773383.367:240): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1166 res=0 errno=0 00:36:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) [ 390.380922][T10734] EXT4-fs: 14 callbacks suppressed [ 390.380940][T10734] EXT4-fs (sda1): Delayed block allocation failed for inode 1166 at logical offset 0 with max blocks 1 with error 28 [ 390.398343][ T27] audit: type=1800 audit(1648773383.387:241): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=1167 res=0 errno=0 [ 390.473027][T10734] EXT4-fs (sda1): This should not happen!! Data will be lost [ 390.473027][T10734] [ 390.483731][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 390.502424][T10734] EXT4-fs (sda1): Total free blocks count 1 [ 390.515309][T10734] EXT4-fs (sda1): Free/Dirty block details [ 390.528710][T10734] EXT4-fs (sda1): free_blocks=10864 [ 390.546293][T10734] EXT4-fs (sda1): dirty_blocks=15 [ 390.569990][T10734] EXT4-fs (sda1): Block reservation details [ 390.586919][T10734] EXT4-fs (sda1): i_reserved_data_blocks=1 [ 390.615278][ T27] audit: type=1804 audit(1648773383.717:242): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D74657374646972323437343537343435382F73797A6B616C6C65722E436D69775A792F3338382F48C7C060 dev="sda1" ino=1165 res=1 errno=0 00:36:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6eb7, 0x0, 0x0, 0x0, 0x0) 00:36:23 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:23 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) 00:36:23 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x0, 0x7}, @period={0x0, 0x0, 0x2, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$hidraw(&(0x7f0000000400), 0x5c40, 0x20c00) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x40001) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x442a86) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000280)={0x51, 0x3, 0x0, {0x1, 0x2}, {0x1, 0x3ff}, @period={0x58, 0xcb23, 0x5, 0x6, 0x4, {0x3, 0x1c2, 0x5c8, 0x100}, 0xa, &(0x7f0000000240)=[0x3f, 0x1ff, 0xfffb, 0x9, 0x2, 0x1, 0x0, 0x5, 0x11d, 0x8001]}}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) syz_open_dev$hidraw(&(0x7f00000004c0), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) syz_open_dev$hidraw(&(0x7f0000000480), 0xfffffffffffff716, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x9, 0x2, 0x9, 0x0, "5ce30015b6ab44497d7a98847bea3ed0206a39fdc2364ee68b861505c4b62cd3"}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000003c0)={0x11, 0x8b, &(0x7f0000000300)="a9361056bbcc89abb9182797347e4df776cc4af119222048c2c45fefa4deeaf5d46da31599aa6c35c300e354a3058f7523565076ad2125e14fb45a6d56fd45b33ee4fe855c79ea88124edc35d98545d9dc7246bb24de392ebed318570f7248599c2e1829f6f620f95fc2736f07ecd7e25b93cbd8c10903fab3c59b562c034dce7947d785488e5024ca19ed"}) write$hidraw(r3, &(0x7f0000001540)="17", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000500)="9736", 0x2) write$hidraw(r1, &(0x7f0000000440)="895c4b9d2ac006188447582fc8b3a6efb8f22f11ef9aa982", 0x18) syz_open_dev$hidraw(&(0x7f00000002c0), 0x100000001, 0x101000) r5 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x24000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40286608, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, "4e4c3ef7a156ca89ca49a2b11879972066ccfebfbf000000000800"}) [ 390.761171][ T27] audit: type=1804 audit(1648773383.757:243): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1166 res=1 errno=0 00:36:23 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000700)="5405b873", 0x4}, {&(0x7f0000000780)="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", 0x579}], 0x2}}], 0x1, 0x0) [ 390.829349][ T27] audit: type=1804 audit(1648773383.757:244): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972343238373435353831332F73797A6B616C6C65722E464D32434B712F3433302F48C7C060 dev="sda1" ino=1167 res=1 errno=0 [ 390.894249][ T27] audit: type=1800 audit(1648773383.897:245): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=1155 res=0 errno=0 [ 390.898478][T10758] EXT4-fs (sda1): Delayed block allocation failed for inode 1140 at logical offset 0 with max blocks 1 with error 28 [ 390.924405][ T27] audit: type=1800 audit(1648773383.907:246): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=1160 res=0 errno=0 [ 390.958969][ T27] audit: type=1800 audit(1648773383.927:247): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=1140 res=0 errno=0 [ 391.025786][T10758] EXT4-fs (sda1): This should not happen!! Data will be lost [ 391.025786][T10758] [ 391.064848][T10761] EXT4-fs warning (device sda1): ext4_resize_begin:73: There are errors in the filesystem, so online resizing is not allowed [ 391.070345][ T27] audit: type=1804 audit(1648773384.167:248): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name=2F726F6F742F73797A6B616C6C65722D74657374646972323437343537343435382F73797A6B616C6C65722E436D69775A792F3338392F48C7C060 dev="sda1" ino=1140 res=1 errno=0 [ 391.915448][ T4699] device hsr_slave_0 left promiscuous mode [ 391.923712][ T4699] device hsr_slave_1 left promiscuous mode [ 391.931162][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.938575][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.948479][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.956192][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.965503][ T4699] device bridge_slave_1 left promiscuous mode [ 391.972882][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.985116][ T4699] device bridge_slave_0 left promiscuous mode [ 391.991666][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.006925][ T4699] device veth1_macvtap left promiscuous mode [ 392.013056][ T4699] device veth0_macvtap left promiscuous mode [ 392.019098][ T4699] device veth1_vlan left promiscuous mode [ 392.025081][ T4699] device veth0_vlan left promiscuous mode [ 392.212176][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 392.227211][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 392.244986][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.261252][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.335048][ T4699] bond0 (unregistering): Released all slaves [ 392.809958][ T4699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.901682][ T4699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.964268][ T4699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.988430][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.997524][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.005602][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.014555][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.024666][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 393.033230][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.058640][ T4699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.138801][T10766] chnl_net:caif_netlink_parms(): no params data found [ 393.223782][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.231202][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.239451][T10766] device bridge_slave_0 entered promiscuous mode [ 393.275156][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.284642][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.293207][T10766] device bridge_slave_1 entered promiscuous mode [ 393.348801][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.393207][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.432726][T10766] team0: Port device team_slave_0 added [ 393.442277][T10766] team0: Port device team_slave_1 added [ 393.474304][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.482751][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.509521][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.546149][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.554567][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.587452][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.671585][T10766] device hsr_slave_0 entered promiscuous mode [ 393.678507][T10766] device hsr_slave_1 entered promiscuous mode [ 393.937953][ T3635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.948554][ T3635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.956909][ T3635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.972947][ T3635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.980593][ T3635] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 393.987801][ T3635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.042515][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.059715][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.067920][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.078755][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.111006][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.119506][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.128087][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.135195][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.143186][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.151894][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.161189][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.168243][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.199290][ T4699] device hsr_slave_0 left promiscuous mode [ 394.206832][ T4699] device hsr_slave_1 left promiscuous mode [ 394.213553][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.221336][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.229691][ T4699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.237616][ T4699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.249653][ T4699] device bridge_slave_1 left promiscuous mode [ 394.258280][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.266996][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.278849][ T4699] device veth1_macvtap left promiscuous mode [ 394.285095][ T4699] device veth0_macvtap left promiscuous mode [ 394.292760][ T4699] device veth1_vlan left promiscuous mode [ 394.298555][ T4699] device veth0_vlan left promiscuous mode [ 394.565857][ T4699] team0 (unregistering): Port device team_slave_1 removed [ 394.582062][ T4699] team0 (unregistering): Port device team_slave_0 removed [ 394.597141][ T4699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.610774][ T4699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.689395][ T4699] bond0 (unregistering): Released all slaves [ 394.750851][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.759172][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.789956][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.798762][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.827337][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.845888][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.879019][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.888471][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.910267][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.926694][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.947840][T10766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.982497][T10766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.991325][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.999732][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.038973][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.047260][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.061738][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.120286][ T3663] Bluetooth: hci2: command 0x0409 tx timeout [ 395.173845][T10770] chnl_net:caif_netlink_parms(): no params data found [ 395.333856][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.350435][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.362811][T10770] device bridge_slave_0 entered promiscuous mode [ 395.381972][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.402484][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.426225][T10770] device bridge_slave_1 entered promiscuous mode [ 395.515115][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.554067][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.635533][T10770] team0: Port device team_slave_0 added [ 395.651899][T10770] team0: Port device team_slave_1 added [ 395.698060][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.715378][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.742875][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.756615][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.768934][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.818235][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.840302][ T47] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 395.904968][T10770] device hsr_slave_0 entered promiscuous mode [ 395.922865][T10770] device hsr_slave_1 entered promiscuous mode [ 395.929480][T10770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.938084][T10770] Cannot create hsr debugfs directory [ 396.007790][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.031766][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.057287][T10766] device veth0_vlan entered promiscuous mode [ 396.070623][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.080396][ T4229] Bluetooth: hci6: command 0x0409 tx timeout [ 396.101077][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.131307][T10766] device veth1_vlan entered promiscuous mode [ 396.145981][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.158160][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.180617][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.232821][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.260925][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.280331][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.308189][T10766] device veth0_macvtap entered promiscuous mode [ 396.377827][T10766] device veth1_macvtap entered promiscuous mode [ 396.420588][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.445868][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.462534][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.479909][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.501087][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.522617][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.539891][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 396.563215][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.578856][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.592442][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.601090][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.608927][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.618140][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.629265][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.640484][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.651316][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.661931][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.672985][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.683942][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.694289][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 396.705237][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.716683][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.728347][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.737290][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.893962][ T8183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.910675][ T8183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.915182][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.943245][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.967945][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.988621][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.001698][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.015433][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.046330][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.060424][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.080444][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.088919][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.096054][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.120368][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.133507][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.142597][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.149673][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.157439][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.197716][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.200263][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 397.215975][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.225216][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.235380][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.244765][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.253370][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.273771][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.293638][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.311044][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.319378][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.330612][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.345024][T10770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:36:30 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000001180), 0x0, &(0x7f0000001200)={0x2, 0xa000000, @b}, 0x48, 0xfffffffffffffffd) 00:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b35bdd6a436cf6f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b76430c89a4eb3638d6fa1ea41f2a02f"}]}]}, 0x40}}, 0x0) 00:36:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 00:36:30 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x200000, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {}, {}]}, 0x108) [ 397.373411][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.404964][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.413973][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:36:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b35bdd6a436cf6f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b76430c89a4eb3638d6fa1ea41f2a02f"}]}]}, 0x40}}, 0x0) [ 397.455796][T10770] 8021q: adding VLAN 0 to HW filter on device batadv0 00:36:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) [ 398.170590][ T5250] Bluetooth: hci6: command 0x041b tx timeout [ 398.340494][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.349221][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.378475][T10770] device veth0_vlan entered promiscuous mode [ 398.385959][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.397624][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.413224][T10770] device veth1_vlan entered promiscuous mode [ 398.422995][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.432626][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.446525][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.480523][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.488610][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.517620][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.532490][T10770] device veth0_macvtap entered promiscuous mode [ 398.561202][T10770] device veth1_macvtap entered promiscuous mode [ 398.594327][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.617808][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.632266][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.645435][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.655677][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.668542][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.678714][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.689795][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.699622][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 398.711157][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.724202][T10770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.737017][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.746706][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.755053][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.765637][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.781056][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.794644][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.805365][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.816204][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.833310][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.844129][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.854255][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.872446][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.882762][T10770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 398.893584][T10770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.908228][T10770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.925426][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.935241][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.054735][ T3635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 399.064201][ T3635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 399.072563][T10173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.081049][ T3635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 399.082288][ T8183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.089714][T10173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.105093][ T3635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 399.114247][ T3635] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 399.118188][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.129862][ T3635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.138031][ T8183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.149883][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.292396][ T6345] Bluetooth: hci2: command 0x040f tx timeout [ 399.395282][T10906] chnl_net:caif_netlink_parms(): no params data found [ 399.516415][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.526660][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.534940][T10906] device bridge_slave_0 entered promiscuous mode [ 399.544062][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.563042][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.572287][T10906] device bridge_slave_1 entered promiscuous mode [ 399.619289][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.642829][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.712120][T10906] team0: Port device team_slave_0 added [ 399.737592][T10906] team0: Port device team_slave_1 added [ 399.781710][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.791212][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.817661][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.831381][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.838332][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.866478][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.914465][T10906] device hsr_slave_0 entered promiscuous mode [ 399.931434][T10906] device hsr_slave_1 entered promiscuous mode [ 399.938233][T10906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.946384][T10906] Cannot create hsr debugfs directory [ 400.153356][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.169455][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.178100][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.191492][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.215969][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.225389][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.251638][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.258749][ T5250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.289861][ T143] Bluetooth: hci6: command 0x040f tx timeout [ 400.300853][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 400.308911][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 400.318636][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 400.327673][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.334800][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.343670][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 400.352659][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 400.374883][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 400.384826][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 400.404616][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 400.422712][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.431817][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.440889][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.454150][T10906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.467591][T10906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 400.479697][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.488856][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.498022][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.527807][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.535941][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.548014][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.141994][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.152300][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.174164][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.183132][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.194591][T10906] device veth0_vlan entered promiscuous mode [ 401.203588][ T6345] Bluetooth: hci4: command 0x0409 tx timeout [ 401.212634][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.222558][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.235579][T10906] device veth1_vlan entered promiscuous mode [ 401.272065][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.281721][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.290884][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.299430][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.310536][T10906] device veth0_macvtap entered promiscuous mode [ 401.323553][T10906] device veth1_macvtap entered promiscuous mode [ 401.342834][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.354873][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.360258][ T3663] Bluetooth: hci2: command 0x0419 tx timeout [ 401.367496][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.381369][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.391759][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.402537][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.412677][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.423371][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.434292][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.445286][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.455454][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 401.467291][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.479001][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.488591][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.497526][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.507634][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.516567][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.538032][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.548722][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.558827][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.569320][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.579144][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.589612][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.599465][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.611374][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.621290][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.632339][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.642207][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 401.652783][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.664421][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.673566][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.682819][ T3663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.763907][ T4699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.800485][ T4699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.808376][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.823413][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.833833][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.848344][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:36:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x30}}, 0x0) 00:36:35 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000001180), 0x0, &(0x7f0000001200)={0x2, 0xa000000, @b}, 0x48, 0xfffffffffffffffd) 00:36:35 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 00:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b35bdd6a436cf6f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b76430c89a4eb3638d6fa1ea41f2a02f"}]}]}, 0x40}}, 0x0) 00:36:35 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x200000, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {}, {}]}, 0x108) 00:36:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000700)="5405b873", 0x4}, {&(0x7f0000000780)="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", 0x579}], 0x2}}], 0x1, 0x0) 00:36:35 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000001180), 0x0, &(0x7f0000001200)={0x2, 0xa000000, @b}, 0x48, 0xfffffffffffffffd) 00:36:35 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 00:36:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b35bdd6a436cf6f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b76430c89a4eb3638d6fa1ea41f2a02f"}]}]}, 0x40}}, 0x0) 00:36:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000700)="5405b873", 0x4}, {&(0x7f0000000780)="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", 0x579}], 0x2}}], 0x1, 0x0) 00:36:35 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:36:35 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000001180), 0x0, &(0x7f0000001200)={0x2, 0xa000000, @b}, 0x48, 0xfffffffffffffffd) 00:36:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="250000004f000500d25a80648c63940dda02fc000e0003400200a06d053582c137153e3704", 0x25}], 0x1}, 0x0) 00:36:35 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 00:36:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000700)="5405b873", 0x4}, {&(0x7f0000000780)="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", 0x579}], 0x2}}], 0x1, 0x0) 00:36:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}], 0x40) [ 402.229056][T11070] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 402.267429][T11070] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.321100][ T3661] Bluetooth: hci6: command 0x0419 tx timeout [ 402.500128][ T6346] usb 3-1: new high-speed USB device number 10 using dummy_hcd 00:36:35 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x200000, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {}, {}]}, 0x108) 00:36:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) 00:36:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 00:36:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}], 0x40) 00:36:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="250000004f000500d25a80648c63940dda02fc000e0003400200a06d053582c137153e3704", 0x25}], 0x1}, 0x0) 00:36:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}], 0x40) [ 402.593788][T11083] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 402.610031][T11083] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) 00:36:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 00:36:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="250000004f000500d25a80648c63940dda02fc000e0003400200a06d053582c137153e3704", 0x25}], 0x1}, 0x0) [ 402.761625][ T6346] usb 3-1: Using ep0 maxpacket: 32 [ 402.781232][T11098] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 402.789332][T11098] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.963111][ T6346] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 402.983450][ T6346] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 403.008839][ T6346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.200458][ T6346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.220054][ T6346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.237095][ T6346] usb 3-1: Product: syz [ 403.246024][ T6346] usb 3-1: Manufacturer: syz [ 403.255469][ T6346] usb 3-1: SerialNumber: syz [ 403.279897][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 403.600500][ T6346] usb 3-1: 0:2 : does not exist [ 403.674601][ T6346] usb 3-1: USB disconnect, device number 10 00:36:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) 00:36:37 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}], 0x40) 00:36:37 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 00:36:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="250000004f000500d25a80648c63940dda02fc000e0003400200a06d053582c137153e3704", 0x25}], 0x1}, 0x0) 00:36:37 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x200000, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=[{}, {}, {}]}, 0x108) 00:36:37 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 00:36:37 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1}, 0x1c) 00:36:37 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) 00:36:37 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) [ 404.104761][T11153] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 404.129954][T11153] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000000)=0x1110, 0x4) 00:36:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6}]}, 0x28}}, 0x0) 00:36:37 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1}, 0x1c) 00:36:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@l2, 0x80, 0x0}}], 0x2, 0x0) 00:36:37 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1}, 0x1c) 00:36:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6}]}, 0x28}}, 0x0) 00:36:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000000)=0x1110, 0x4) [ 404.410001][ T4229] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 404.659903][ T4229] usb 3-1: Using ep0 maxpacket: 32 00:36:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6}]}, 0x28}}, 0x0) [ 404.870101][ T4229] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 404.878824][ T4229] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 404.890853][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.070181][ T4229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.079364][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.087936][ T4229] usb 3-1: Product: syz [ 405.092506][ T4229] usb 3-1: Manufacturer: syz [ 405.097201][ T4229] usb 3-1: SerialNumber: syz [ 405.360222][ T3661] Bluetooth: hci4: command 0x040f tx timeout [ 405.419974][ T4229] usb 3-1: 0:2 : does not exist [ 405.439524][ T4229] usb 3-1: USB disconnect, device number 11 [ 405.496347][T10519] udevd[10519]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:36:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000000)=0x1110, 0x4) 00:36:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@l2, 0x80, 0x0}}], 0x2, 0x0) 00:36:39 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1}, 0x1c) 00:36:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') lseek(r0, 0x0, 0x4) 00:36:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6}]}, 0x28}}, 0x0) 00:36:39 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 00:36:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') lseek(r0, 0x0, 0x4) 00:36:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) 00:36:39 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800200f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000540)='./bus\x00', 0x10b) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U-', 0x4}, 0x16, 0x2) pivot_root(&(0x7f0000000240)='.\x00', &(0x7f00000002c0)='./bus\x00') lstat(&(0x7f0000001180)='./bus\x00', 0x0) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x22) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000000400)='./file1\x00', 0x800, 0x40, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x100840, &(0x7f00000006c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x56a}}], [{@appraise}, {@fowner_lt={'fowner<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xa7b}}, {@audit}, {@obj_user={'obj_user', 0x3d, '&'}}, {@fowner_gt={'fowner>', r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}]}}) 00:36:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000000)=0x1110, 0x4) 00:36:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@l2, 0x80, 0x0}}], 0x2, 0x0) 00:36:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') lseek(r0, 0x0, 0x4) 00:36:39 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="240000001e005f0214f9f403faac47000500000005000000000008e30800010002000000", 0x24) [ 406.080129][T11247] loop4: detected capacity change from 0 to 4096 [ 406.111532][T11251] loop1: detected capacity change from 0 to 87 00:36:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@l2, 0x80, 0x0}}], 0x2, 0x0) [ 406.167712][T11256] EXT4-fs warning (device sda1): ext4_resize_begin:73: There are errors in the filesystem, so online resizing is not allowed 00:36:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') lseek(r0, 0x0, 0x4) [ 406.222248][T11257] ======================================================= [ 406.222248][T11257] WARNING: The mand mount option has been deprecated and [ 406.222248][T11257] and is ignored by this kernel. Remove the mand [ 406.222248][T11257] option from the mount to silence this warning. [ 406.222248][T11257] ======================================================= 00:36:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0xfef4, 0xf4fe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 00:36:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560b, 0x0) [ 406.286188][T11247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 406.295327][ T4229] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 406.511957][T10766] Please do not flush events WQ. [ 406.527949][T10766] CPU: 1 PID: 10766 Comm: syz-executor.4 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 406.537613][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.547680][T10766] Call Trace: [ 406.549964][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 406.550958][T10766] [ 406.558981][T10766] dump_stack_lvl+0xcd/0x134 [ 406.563712][T10766] flush_workqueue.cold+0x24/0x29 [ 406.568765][T10766] ? lock_downgrade+0x6e0/0x6e0 [ 406.573649][T10766] ? check_flush_dependency+0x400/0x400 [ 406.579230][T10766] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 406.585037][T10766] ext4_put_super+0x99/0x1150 [ 406.589765][T10766] ? ext4_quota_write+0x620/0x620 [ 406.594801][T10766] generic_shutdown_super+0x14c/0x400 [ 406.600213][T10766] kill_block_super+0x97/0xf0 [ 406.604887][T10766] deactivate_locked_super+0x94/0x160 [ 406.610259][T10766] deactivate_super+0xad/0xd0 [ 406.614934][T10766] cleanup_mnt+0x3a2/0x540 [ 406.619376][T10766] task_work_run+0xdd/0x1a0 [ 406.623883][T10766] exit_to_user_mode_prepare+0x23c/0x250 [ 406.629545][T10766] syscall_exit_to_user_mode+0x19/0x60 [ 406.635050][T10766] do_syscall_64+0x42/0x80 [ 406.639461][T10766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 406.645384][T10766] RIP: 0033:0x7f1a2e68a4b7 [ 406.649791][T10766] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 406.669403][T10766] RSP: 002b:00007fff6780e8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 406.677824][T10766] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1a2e68a4b7 [ 406.685797][T10766] RDX: 00007fff6780e97a RSI: 000000000000000a RDI: 00007fff6780e970 [ 406.693769][T10766] RBP: 00007fff6780e970 R08: 00000000ffffffff R09: 00007fff6780e740 [ 406.701734][T10766] R10: 0000555555ef18b3 R11: 0000000000000246 R12: 00007f1a2e6e21ea [ 406.709697][T10766] R13: 00007fff6780fa30 R14: 0000555555ef1810 R15: 00007fff6780fa70 [ 406.717677][T10766] [ 406.890178][ T4229] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 406.912675][ T4229] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 406.932561][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.100087][ T4229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.109165][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.117705][ T4229] usb 3-1: Product: syz [ 407.122330][ T4229] usb 3-1: Manufacturer: syz [ 407.126936][ T4229] usb 3-1: SerialNumber: syz [ 407.441961][ T3664] Bluetooth: hci4: command 0x0419 tx timeout [ 407.469978][ T4229] usb 3-1: 0:2 : does not exist [ 407.498389][ T4229] usb 3-1: USB disconnect, device number 12 [ 407.550139][T10519] udevd[10519]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:36:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560b, 0x0) 00:36:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 00:36:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0xfef4, 0xf4fe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 00:36:41 executing program 1: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:41 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x1b, &(0x7f0000000140)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 00:36:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) 00:36:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 407.990545][T11328] loop4: detected capacity change from 0 to 4096 00:36:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0xfef4, 0xf4fe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 00:36:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560b, 0x0) 00:36:41 executing program 1: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) [ 408.079198][T11328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 00:36:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0xfef4, 0xf4fe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 00:36:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 00:36:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) 00:36:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560b, 0x0) [ 408.152772][T11328] EXT4-fs (loop4): Online resizing not supported with bigalloc 00:36:41 executing program 1: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) [ 408.279882][ T6346] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 408.325460][T11353] loop4: detected capacity change from 0 to 4096 [ 408.382774][T11353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 408.473802][T11353] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 408.560152][ T6346] usb 3-1: Using ep0 maxpacket: 32 [ 408.780134][ T6346] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 408.788837][ T6346] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 408.800067][ T6346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.970165][ T6346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.979250][ T6346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.987393][ T6346] usb 3-1: Product: syz [ 408.991637][ T6346] usb 3-1: Manufacturer: syz [ 408.996235][ T6346] usb 3-1: SerialNumber: syz [ 409.320084][ T6346] usb 3-1: 0:2 : does not exist [ 409.339394][ T6346] usb 3-1: USB disconnect, device number 13 00:36:42 executing program 5: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:42 executing program 0: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:42 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xc2542, 0x0) ppoll(&(0x7f0000000400)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {}, {0x0, 0xf005}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7}}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 00:36:42 executing program 1: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f00000001c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)) 00:36:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc008aec1, 0x0) [ 409.854216][T11371] loop4: detected capacity change from 0 to 4096 00:36:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc008aec1, 0x0) 00:36:43 executing program 5: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) [ 409.902687][T11371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.930989][T11371] EXT4-fs (loop4): Online resizing not supported with bigalloc 00:36:43 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:43 executing program 0: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 410.044907][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 410.044923][ T27] audit: type=1800 audit(1648773403.147:251): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1167 res=0 errno=0 00:36:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc008aec1, 0x0) [ 410.133017][ T27] audit: type=1804 audit(1648773403.227:252): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3876611749/syzkaller.u44Ski/16/file0" dev="sda1" ino=1167 res=1 errno=0 00:36:43 executing program 5: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc008aec1, 0x0) 00:36:43 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:43 executing program 0: r0 = semget$private(0x0, 0x8, 0x10286) semop(r0, &(0x7f0000000500)=[{0x4, 0x0, 0x1000}, {0x2, 0x4, 0xffc}, {0x3, 0x1009, 0x800}, {0x3, 0x401, 0x400}], 0x4) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000180)=""/65) semop(r0, &(0x7f0000000080)=[{0x2, 0xa}, {0x5, 0x6, 0x1800}, {0x2, 0xc1, 0x3400}, {0x1, 0xfffc, 0x1000}, {0x1, 0x3}, {0x1, 0x3, 0x800}, {0x4, 0x1ff, 0x1000}, {0x1, 0x33, 0x1000}, {0x4, 0x6}, {0x0, 0x3, 0x1000}], 0xa) semctl$GETPID(r0, 0x3, 0x4, &(0x7f00000005c0)=""/102385) semctl$GETZCNT(r0, 0x2, 0x7, &(0x7f00000000c0)=""/31) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000002c0)=""/148) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0x7, 0x1800}], 0x2) semop(0xffffffffffffffff, &(0x7f0000000380)=[{0x2, 0x3f, 0x800}], 0x1) semctl$GETALL(r0, 0x0, 0x6, &(0x7f00000003c0)=""/155) semop(r0, &(0x7f0000000040)=[{0x1, 0xc, 0x400}, {0x4, 0xfdd}, {0x3, 0x2, 0x1000}, {0x2, 0x1, 0x800}, {0x0, 0xffff}, {0x3, 0x1}], 0x6) semop(r0, &(0x7f0000000040), 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x3f, 0x3000}, {0x3, 0x1, 0x1800}, {0x0, 0x2407, 0x800}], 0x3) semctl$IPC_SET(r0, 0x0, 0x1, 0xffffffffffffffff) syz_emit_ethernet(0x68, &(0x7f00000000c0)={@local, @random="b1b650994c10", @val, {@ipv6}}, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000200)=""/175) 00:36:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) 00:36:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 00:36:43 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:43 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) [ 410.688634][ T27] audit: type=1800 audit(1648773403.787:253): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1143 res=0 errno=0 00:36:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 410.749682][ T27] audit: type=1800 audit(1648773403.807:254): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1165 res=0 errno=0 00:36:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 410.806533][ T27] audit: type=1800 audit(1648773403.847:255): pid=11418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1173 res=0 errno=0 [ 410.865606][ T27] audit: type=1804 audit(1648773403.867:256): pid=11419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2474574458/syzkaller.CmiwZy/405/file0" dev="sda1" ino=1143 res=1 errno=0 00:36:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 410.978028][ T27] audit: type=1804 audit(1648773403.907:257): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3876611749/syzkaller.u44Ski/17/file0" dev="sda1" ino=1165 res=1 errno=0 00:36:44 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 411.100914][ T27] audit: type=1804 audit(1648773403.947:258): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=1173 res=1 errno=0 00:36:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) [ 411.174549][ T27] audit: type=1800 audit(1648773404.237:259): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1149 res=0 errno=0 00:36:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') read$msr(r0, &(0x7f0000000280)=""/67, 0x43) read$msr(r0, &(0x7f0000019100)=""/102400, 0x19000) [ 411.294706][ T27] audit: type=1800 audit(1648773404.237:260): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1168 res=0 errno=0 [ 411.383926][T11441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.394105][T11441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.417934][T11441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:44 executing program 0: add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0100000002000000545513e3af3834f6ee46ff77c64f5500", 0x18, 0xfffffffffffffffb) 00:36:44 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:44 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendfile(r0, r2, 0x0, 0x8000000a) 00:36:44 executing program 0: add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0100000002000000545513e3af3834f6ee46ff77c64f5500", 0x18, 0xfffffffffffffffb) [ 411.632730][T11449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:36:44 executing program 0: add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0100000002000000545513e3af3834f6ee46ff77c64f5500", 0x18, 0xfffffffffffffffb) [ 411.690667][T11449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:44 executing program 0: add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0100000002000000545513e3af3834f6ee46ff77c64f5500", 0x18, 0xfffffffffffffffb) [ 411.835900][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:36:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x9, 0x3e00, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="9e", &(0x7f0000000040)=""/219}, 0x20) 00:36:45 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) [ 411.880764][T11460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.905752][T11460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:45 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 00:36:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x9, 0x3e00, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="9e", &(0x7f0000000040)=""/219}, 0x20) 00:36:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) 00:36:45 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 00:36:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x9, 0x3e00, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="9e", &(0x7f0000000040)=""/219}, 0x20) [ 412.234398][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:36:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) 00:36:45 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) [ 412.316443][T11477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x9, 0x3e00, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="9e", &(0x7f0000000040)=""/219}, 0x20) 00:36:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000040)="a236", 0x2}], 0x1}}], 0x1, 0x0) 00:36:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) [ 412.477406][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.536654][T11490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000040)="a236", 0x2}], 0x1}}], 0x1, 0x0) 00:36:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) 00:36:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000b00000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000381000036"], 0xfdef) socket$inet_tcp(0x2, 0x1, 0x0) 00:36:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000040)="a236", 0x2}], 0x1}}], 0x1, 0x0) 00:36:45 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000040)="a236", 0x2}], 0x1}}], 0x1, 0x0) [ 412.837433][T11508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.904854][T11508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 412.992505][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:36:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 413.091567][T11521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:36:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/52, 0x0}) r1 = eventfd(0x81) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x81) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000011c0)=""/99, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5d}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 00:36:46 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="0500000023002f00ff068908ac141442e00000093c31b47d0510c147885b3a765e30637ec921f605aba9880b", 0x2c}, {&(0x7f0000000000)="826c003f00004000", 0x8}], 0x2, 0x0, 0x0, 0x50}, 0x0) 00:36:46 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="0500000023002f00ff068908ac141442e00000093c31b47d0510c147885b3a765e30637ec921f605aba9880b", 0x2c}, {&(0x7f0000000000)="826c003f00004000", 0x8}], 0x2, 0x0, 0x0, 0x50}, 0x0) 00:36:46 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="0500000023002f00ff068908ac141442e00000093c31b47d0510c147885b3a765e30637ec921f605aba9880b", 0x2c}, {&(0x7f0000000000)="826c003f00004000", 0x8}], 0x2, 0x0, 0x0, 0x50}, 0x0) 00:36:46 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="0500000023002f00ff068908ac141442e00000093c31b47d0510c147885b3a765e30637ec921f605aba9880b", 0x2c}, {&(0x7f0000000000)="826c003f00004000", 0x8}], 0x2, 0x0, 0x0, 0x50}, 0x0) 00:36:51 executing program 5: socketpair(0x22, 0x3, 0x0, &(0x7f0000000480)) 00:36:51 executing program 4: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_setup(0x65f8, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 00:36:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x10001}, 0x1c) 00:36:51 executing program 2: r0 = socket(0x1, 0x3, 0x0) r1 = epoll_create(0x66) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000014}) 00:36:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)}, 0x20) 00:36:51 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) (fail_nth: 1) 00:36:51 executing program 5: socketpair(0x22, 0x3, 0x0, &(0x7f0000000480)) [ 418.134154][T11669] FAULT_INJECTION: forcing a failure. [ 418.134154][T11669] name failslab, interval 1, probability 0, space 0, times 1 00:36:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)}, 0x20) 00:36:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x10001}, 0x1c) 00:36:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:36:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) [ 418.290712][T11669] CPU: 0 PID: 11669 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 418.300387][T11669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.310447][T11669] Call Trace: [ 418.310458][T11669] [ 418.310469][T11669] dump_stack_lvl+0xcd/0x134 [ 418.310509][T11669] should_fail.cold+0x5/0xa [ 418.310539][T11669] should_failslab+0x5/0x10 [ 418.330347][T11669] __kmalloc+0x7e/0x350 [ 418.334600][T11669] ? __do_sys_memfd_create+0xac/0x4e0 00:36:51 executing program 5: socketpair(0x22, 0x3, 0x0, &(0x7f0000000480)) [ 418.340040][T11669] __do_sys_memfd_create+0xac/0x4e0 [ 418.345264][T11669] do_syscall_64+0x35/0x80 [ 418.349706][T11669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 418.355630][T11669] RIP: 0033:0x7f01cfa89049 [ 418.360059][T11669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 418.379680][T11669] RSP: 002b:00007f01ce9fdf28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 00:36:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)}, 0x20) 00:36:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x10001}, 0x1c) [ 418.388113][T11669] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa89049 [ 418.396096][T11669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f01cfae21e0 [ 418.404073][T11669] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f01ce9fe1d0 [ 418.412056][T11669] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 418.420038][T11669] R13: 0000000020000100 R14: 0000000000000757 R15: 0000000020010800 [ 418.428040][T11669] 00:36:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) 00:36:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)}, 0x20) 00:36:51 executing program 5: socketpair(0x22, 0x3, 0x0, &(0x7f0000000480)) 00:36:51 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) (fail_nth: 2) 00:36:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:36:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x10001}, 0x1c) 00:36:51 executing program 1: sysfs$1(0x1, &(0x7f0000000080)=',\x00') 00:36:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_getaddr={0x18, 0x16, 0x221, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 00:36:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) 00:36:51 executing program 1: sysfs$1(0x1, &(0x7f0000000080)=',\x00') 00:36:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x12) 00:36:51 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_getaddr={0x18, 0x16, 0x221, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 00:36:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:36:51 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x24, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f43465356320000237e2b3affffffff0000000010000000000000000000000000000000000000000000000031000000000000000000000047c3655f0000000047c3655f00000000000000000000000002000000000000000000000000000000237e2b3a00"/1152, 0x480}, {&(0x7f0000010500)="00005a0000001400000000000000000047c3655f00000000000000000300000058b70000010000000110000000000000021000000000000009000000140000000100000067d0f8fb000800"/96, 0x60, 0x4c0}, {&(0x7f0000010600)="0000000000000000000000000000000016470f2fcbf64009a990357b325e2c57000000000000000000000000000000000000000000000000000100001752f5cea071f700483de78000"/96, 0x60, 0x540}, {&(0x7f0000010700)="47524f5550303100c001100000000000237e2b3a0000000000000000000000000710000000000000000800000000000000000000000000000000000000000000ffff00"/96, 0x60, 0x100000}, {&(0x7f0000010800)="47524f5550303100c0010008f2070000237e2b3a0000000000000000000000000410000000000000001000000000000000000000000000000000000000000000ff3f00"/96, 0x60, 0x200000}, {&(0x7f0000010900)="494e4f4445303100237e2b3affff0100000000000000000000000000000000003801000000000000ed4103001100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000001100000000000000000000000000000237e2b3a00000000000000000000000000000000000001000000000000000000", 0x80, 0x200200}, {&(0x7f0000010a00)="38010000000000000110000000000000100001022e0000000110000000000000100002022e2e0000017800000000000018010a026c6f73742b666f756e640000", 0x40, 0x2002c0}, {&(0x7f0000010b00)="494e4f4445303100237e2b3affff0200000000000100000000000000000000000002000000000000ed4103001100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000002100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200400}, {&(0x7f0000010c00)="0000130001000000000000000000000000000000010000000018000000000000", 0x20, 0x2004c0}, {&(0x7f0000010d00)="494e4f4445303100237e2b3affff0300000000000000000000000000000000000000000000000000a48101001100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000003100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200600}, {&(0x7f0000010e00)="00001300"/32, 0x20, 0x2006c0}, {&(0x7f0000010f00)="494e4f4445303100237e2b3affff0400000000000100000000000000000000000000100000000000a48101009104000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000004100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200800}, {&(0x7f0000011000)="0000000000000000000000000000000000000000000000000e0000000008000001000008130001000000000000000000f2070000000800000010000000000000", 0x40, 0x2008a0}, {&(0x7f0000011100)="494e4f4445303100237e2b3affff0500000000000100000000000000000000000000100000000000a48101001100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000005100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200a00}, {&(0x7f0000011200)="0000130001000000000000000000000000000000010000000070000000000000", 0x20, 0x200ac0}, {&(0x7f0000011300)="494e4f4445303100237e2b3affff0600000000000100000000000000000000000000020000000000a48101001102000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000006100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200c00}, {&(0x7f0000011400)="0000130001000000000000000000000000000000010000000020000000000000", 0x20, 0x200cc0}, {&(0x7f0000011500)="494e4f4445303100237e2b3affff0700000000001000000000000000000000000000000100000000a48101009104000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000007100000000000000000000000000000237e2b3a00"/128, 0x80, 0x200e00}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000001000000010000000000e010013000100000000000000000000000000100000000008000000000000", 0x40, 0x200ea0}, {&(0x7f0000011700)="494e4f4445303100237e2b3affff0800000000000000000000000000000000003801000000000000ed4102001100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000008100000000000000000000000000000237e2b3a00000000000000000000000000000000000001000000000000000000", 0x80, 0x201000}, {&(0x7f0000011800)="38010000000000000810000000000000100001022e0000000210000000000000280102022e2e00"/64, 0x40, 0x2010c0}, {&(0x7f0000011900)="494e4f4445303100237e2b3affff0900000000000000000000000000000000000000000000000000a48101009104000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000009100000000000000000000000000000237e2b3a00"/128, 0x80, 0x201200}, {&(0x7f0000011a00)="010000081300"/32, 0x20, 0x2012c0}, {&(0x7f0000011b00)="494e4f4445303100237e2b3affff0a00000000000100000000000000000000000000100000000000a48101009104000047c3655f0000000047c3655f0000000047c3655f0000000000000000000000000a100000000000000000000000000000237e2b3a00"/128, 0x80, 0x201400}, {&(0x7f0000011c00)="000000000000000000000000000000000000000000000000020000000008000001000008130001000000000000000000fe070000000800000078000000000000", 0x40, 0x2014a0}, {&(0x7f0000011d00)="494e4f4445303100237e2b3affff0b00000000000900000000000000000000000000900000000000a48101001101000047c3655f0000000047c3655f0000000047c3655f0000000000000000000000000b100000000000000000000000000000237e2b3a00"/128, 0x80, 0x201600}, {&(0x7f0000011e00)="0000130001000000000000000000000000000000090000000028000000000000", 0x20, 0x2016c0}, {&(0x7f0000011f00)="494e4f4445303100237e2b3affff0c00000000000000000000000000000000000000000000000000a4810100d100000047c3655f0000000047c3655f0000000047c3655f0000000000000000000000000c100000000000000000000000000000237e2b3a00"/128, 0x80, 0x201800}, {&(0x7f0000012000)="00000000300100"/32, 0x20, 0x2018c0}, {&(0x7f0000012100)="494e4f4445303100237e2b3affff0d00000000000000000000000000000000000000000000000000a48101001108000047c3655f0000000047c3655f0000000047c3655f0000000000000000000000000d100000000000000000000000000000237e2b3a00"/128, 0x80, 0x201a00}, {&(0x7f0000012200)='\'\x00'/32, 0x20, 0x201ac0}, {&(0x7f0000012300)="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"/352, 0x160, 0x300000}, {&(0x7f0000012500)="0000000000000000400000000000000044495254524c3100000000000000000000000000000000000018000000000000021000"/64, 0x40, 0x3001c0}, {&(0x7f0000012600)="c03b3998000000040000000000000200000048000000000200000001000000010000000000000000000000000000000016470f2fcbf64009a990357b325e2c570000000100"/96, 0x60, 0x500000}, {&(0x7f0000012700)="47524f555030310000010008fe070000237e2b3a0000000000000000000000000a100000000000000078000000000000000000000000000000000000000000000300"/96, 0x60, 0xf00000}, {&(0x7f0000012800)="494e4f4445303100237e2b3a00000100000000000000000000000000000000003801000000000000ed4102000100000047c3655f0000000047c3655f0000000047c3655f00000000000000000000000001780000000000000000000000000000237e2b3a000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000078000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000000178000000000000100001022e0000000110000000000000280102022e2e00"/256, 0x100, 0xf00200}], 0x0, &(0x7f0000012900)) [ 418.893850][T11714] FAULT_INJECTION: forcing a failure. [ 418.893850][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 418.950134][T11714] CPU: 1 PID: 11714 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 418.959807][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.969872][T11714] Call Trace: [ 418.973159][T11714] [ 418.976094][T11714] dump_stack_lvl+0xcd/0x134 [ 418.980716][T11714] should_fail.cold+0x5/0xa [ 418.985249][T11714] _copy_from_user+0x2a/0x170 [ 418.990108][T11714] __do_sys_memfd_create+0xff/0x4e0 [ 418.995338][T11714] do_syscall_64+0x35/0x80 [ 418.999781][T11714] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 419.005706][T11714] RIP: 0033:0x7f01cfa89049 [ 419.010135][T11714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 419.029756][T11714] RSP: 002b:00007f01ce9fdf28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 419.038173][T11714] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa89049 00:36:52 executing program 1: sysfs$1(0x1, &(0x7f0000000080)=',\x00') [ 419.046138][T11714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f01cfae21e0 [ 419.054105][T11714] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f01ce9fe1d0 [ 419.062068][T11714] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 419.070031][T11714] R13: 0000000020000100 R14: 0000000000000757 R15: 0000000020010800 [ 419.078010][T11714] 00:36:52 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) (fail_nth: 3) 00:36:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_getaddr={0x18, 0x16, 0x221, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 00:36:52 executing program 1: sysfs$1(0x1, &(0x7f0000000080)=',\x00') 00:36:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) 00:36:52 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x10917f, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 00:36:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:52 executing program 1: r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 00:36:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_getaddr={0x18, 0x16, 0x221, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) 00:36:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 00:36:52 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x10917f, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 00:36:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) [ 419.281334][T11747] FAULT_INJECTION: forcing a failure. [ 419.281334][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 419.354745][T11747] CPU: 0 PID: 11747 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 419.364426][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.374498][T11747] Call Trace: [ 419.377787][T11747] [ 419.380727][T11747] dump_stack_lvl+0xcd/0x134 [ 419.385346][T11747] should_fail.cold+0x5/0xa [ 419.389873][T11747] should_failslab+0x5/0x10 [ 419.394411][T11747] kmem_cache_alloc_lru+0x65/0x720 [ 419.399555][T11747] ? shmem_alloc_inode+0x23/0x50 [ 419.403848][T11749] bridge0: port 3(erspan0) entered blocking state [ 419.404519][T11747] shmem_alloc_inode+0x23/0x50 [ 419.404556][T11747] ? shmem_destroy_inode+0x70/0x70 [ 419.421015][T11747] alloc_inode+0x61/0x230 [ 419.425364][T11747] new_inode+0x27/0x2f0 [ 419.429545][T11747] shmem_get_inode+0x195/0xcd0 [ 419.434342][T11747] __shmem_file_setup+0xb8/0x310 [ 419.439306][T11747] __do_sys_memfd_create+0x1c6/0x4e0 [ 419.444617][T11747] do_syscall_64+0x35/0x80 [ 419.449052][T11747] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:36:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) [ 419.454976][T11747] RIP: 0033:0x7f01cfa89049 [ 419.459404][T11747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 419.479032][T11747] RSP: 002b:00007f01ce9fdf28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 419.487457][T11747] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa89049 [ 419.495028][T11749] bridge0: port 3(erspan0) entered disabled state [ 419.495436][T11747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f01cfae21e0 [ 419.495455][T11747] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f01ce9fe1d0 [ 419.495472][T11747] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 419.495488][T11747] R13: 0000000020000100 R14: 0000000000000757 R15: 0000000020010800 [ 419.533732][T11747] [ 419.583491][T11749] device erspan0 entered promiscuous mode 00:36:52 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) (fail_nth: 4) 00:36:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 00:36:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) 00:36:52 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x10917f, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 00:36:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) [ 419.650561][T11749] bridge0: port 3(erspan0) entered blocking state [ 419.657617][T11749] bridge0: port 3(erspan0) entered forwarding state [ 419.782226][T11773] FAULT_INJECTION: forcing a failure. [ 419.782226][T11773] name failslab, interval 1, probability 0, space 0, times 0 00:36:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 00:36:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) 00:36:52 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x10917f, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 00:36:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) [ 419.915002][T11773] CPU: 1 PID: 11773 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 419.924677][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.934744][T11773] Call Trace: [ 419.938030][T11773] [ 419.940967][T11773] dump_stack_lvl+0xcd/0x134 [ 419.945587][T11773] should_fail.cold+0x5/0xa [ 419.950113][T11773] ? security_inode_alloc+0x34/0x160 [ 419.955511][T11773] should_failslab+0x5/0x10 [ 419.960042][T11773] kmem_cache_alloc+0x5e/0x3b0 [ 419.964850][T11773] security_inode_alloc+0x34/0x160 [ 419.969989][T11773] inode_init_always+0x5d8/0xd70 [ 419.974949][T11773] alloc_inode+0x82/0x230 [ 419.979298][T11773] new_inode+0x27/0x2f0 [ 419.983470][T11773] shmem_get_inode+0x195/0xcd0 [ 419.988262][T11773] __shmem_file_setup+0xb8/0x310 [ 419.993232][T11773] __do_sys_memfd_create+0x1c6/0x4e0 [ 419.998541][T11773] do_syscall_64+0x35/0x80 [ 420.002983][T11773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 420.008910][T11773] RIP: 0033:0x7f01cfa89049 [ 420.013339][T11773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 420.032956][T11773] RSP: 002b:00007f01ce9fdf28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 420.041369][T11773] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa89049 [ 420.049335][T11773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f01cfae21e0 [ 420.057298][T11773] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f01ce9fe1d0 00:36:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 00:36:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) [ 420.065261][T11773] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 420.073224][T11773] R13: 0000000020000100 R14: 0000000000000757 R15: 0000000020010800 [ 420.081200][T11773] 00:36:53 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) (fail_nth: 5) 00:36:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) 00:36:53 executing program 5: syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)) [ 420.227569][T11799] FAULT_INJECTION: forcing a failure. [ 420.227569][T11799] name failslab, interval 1, probability 0, space 0, times 0 00:36:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 00:36:53 executing program 5: r0 = epoll_create1(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x60000000}) [ 420.389878][T11799] CPU: 1 PID: 11799 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 420.397754][T11805] bridge0: port 3(erspan0) entered blocking state [ 420.399554][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.416013][T11799] Call Trace: [ 420.419299][T11799] [ 420.422240][T11799] dump_stack_lvl+0xcd/0x134 [ 420.426863][T11799] should_fail.cold+0x5/0xa [ 420.431389][T11799] should_failslab+0x5/0x10 [ 420.435920][T11799] kmem_cache_alloc_lru+0x65/0x720 [ 420.441058][T11799] ? __d_alloc+0x32/0x960 [ 420.445485][T11799] ? lockdep_hardirqs_on+0x79/0x100 [ 420.450713][T11799] __d_alloc+0x32/0x960 [ 420.454893][T11799] d_alloc_pseudo+0x19/0x70 [ 420.459390][T11799] alloc_file_pseudo+0xc6/0x250 [ 420.464240][T11799] ? alloc_file+0x590/0x590 [ 420.468739][T11799] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 420.475026][T11799] ? shmem_get_inode+0x623/0xcd0 [ 420.479974][T11799] __shmem_file_setup+0x144/0x310 [ 420.485015][T11799] __do_sys_memfd_create+0x1c6/0x4e0 [ 420.490302][T11799] do_syscall_64+0x35/0x80 [ 420.494722][T11799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 420.500623][T11799] RIP: 0033:0x7f01cfa89049 [ 420.505032][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 420.524634][T11799] RSP: 002b:00007f01ce9fdf28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 420.533039][T11799] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa89049 [ 420.541002][T11799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f01cfae21e0 [ 420.548963][T11799] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f01ce9fe1d0 [ 420.556924][T11799] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 420.564885][T11799] R13: 0000000020000100 R14: 0000000000000757 R15: 0000000020010800 [ 420.572859][T11799] [ 420.649965][T11805] bridge0: port 3(erspan0) entered disabled state 00:36:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:53 executing program 5: r0 = epoll_create1(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x60000000}) [ 420.716026][T11805] device erspan0 entered promiscuous mode [ 420.765297][T11805] bridge0: port 3(erspan0) entered blocking state [ 420.771910][T11805] bridge0: port 3(erspan0) entered forwarding state 00:36:53 executing program 5: r0 = epoll_create1(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x60000000}) [ 420.860773][T11798] bridge0: port 3(erspan0) entered blocking state [ 420.870838][T11798] bridge0: port 3(erspan0) entered disabled state 00:36:54 executing program 5: r0 = epoll_create1(0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x60000000}) [ 420.902858][T11798] device erspan0 entered promiscuous mode [ 420.926312][T11798] bridge0: port 3(erspan0) entered blocking state [ 420.932914][T11798] bridge0: port 3(erspan0) entered forwarding state 00:36:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x1100, 0x294, 0x3b0, 0x378, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x41, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:36:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:54 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:36:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x1100, 0x294, 0x3b0, 0x378, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x41, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 421.982765][T11839] loop0: detected capacity change from 0 to 3 [ 422.054011][T11839] syz-executor.0: attempt to access beyond end of device [ 422.054011][T11839] loop0: rw=2048, want=8, limit=3 [ 422.631722][T11839] SQUASHFS error: Failed to read block 0x0: -5 00:36:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x1100, 0x294, 0x3b0, 0x378, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x41, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 422.974146][T11839] unable to read squashfs_super_block 00:36:57 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) 00:36:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:57 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x785, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00eb0102000400000012010000000000005707000000000000fb060000000000003f07000000000000e8040000000000001c06000000000000a706000000000000e90600000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727373797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c73797a6b616c6c65727332810200ed0100000100911d675f01000000000000000000000000000000640000000200ed0100000100911d675f030000000000000000000000640000001a0400000300ff0100000100911d675f0400000001000000260000002f746d702f73797a2d696d61676567656e3431393737363339322f66696c65302f66696c65300100ed0100000100911d675f02000000000000000200000029000000070000000900ed0100000100911d675f0500000000000000000000000a00000000000000000000000000000001000000000000007e040000000000000900ed0100000100911d675f0600000060000000000000002823000000000000000000000000000002000000ffffffff00000000ffffffff000000000100c00100000100911d675f07000000000000000300000054002600080000007780010000000000000003000000200000000200040066696c6530400001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c647e0001000100040066696c65309e0004000200040066696c6531d60005000200040066696c6532d60005000200040066696c65331080600000000000000088040001000000009506000000000000388000000000000000007e00000000000000200000000000000040000000000000009e00000000000000d6000000000000001201000000000000af0600000000000008805cf90100535f0100f106000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000030700000000000001000000000000002d07000000000000", 0x757}], 0x0, &(0x7f0000010800)) 00:36:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x1100, 0x294, 0x3b0, 0x378, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x41, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:36:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) 00:36:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000000)) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000180)={"6e3050559be73726baf3638af0f61714", 0x0, 0x0, {0x0, 0x2003}, {0x6, 0x1000}, 0x859, [0x5, 0x9, 0x7, 0x800, 0x7, 0x100000004, 0x5, 0x20, 0x7, 0x3ff, 0xc69, 0xfff0000000000, 0x1000, 0x2, 0xbff, 0x80000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000280)={{r4}, r6, 0xe, @inherit={0x88, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000000000008000000000000000100010000000000000000000000000002000000000000000000000000000000020000000000003f0000000000000003000000000000001000000000000000010000000000000000000080000000001f000000000000000900000000000000020000000000000003000000000000000900000000000000d50b64f2aa1a69b58e5125032aaf0a5752e7a335eabc212285189439946a7156d5a240bdb7aafdfb61e0acf8384cd8d259d8414120b469028891"]}, @subvolid=0x44}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_settings={0x5, 0x80000001, @sync=&(0x7f0000000040)={0xffff6a0c, 0xfffffff8, 0x100}}}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbbdf37904019e58100260000040000b3dcae9089060672e8a965e67df3fd7bf3ab83e2aa0b8b3985da162ff1b3199d3a622f18e52da9adecdab34becf35731cc8a4da78ff23c39c1dc2f1e697010dbe059c6462f0b94290d495605c118f7a41e7884c9c55c7913735c7aa16553707240fc1f6569eaeb1234c31783e6c4ddc4c31ae52893c28b1b438e00a8b0c061fda0c62ee1ecd5020846c50509cf1809edc3d12942fc319e3f963a69da1405cae3da09"], 0x0) [ 424.422657][T11874] loop0: detected capacity change from 0 to 3 [ 424.452954][T11874] syz-executor.0: attempt to access beyond end of device [ 424.452954][T11874] loop0: rw=2048, want=8, limit=3 [ 424.661305][T11874] SQUASHFS error: Failed to read block 0x0: -5 [ 424.810030][T11874] unable to read squashfs_super_block 00:36:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001140), 0x600000000000000, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) 00:36:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) 00:36:58 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) [ 425.499417][T11893] usb usb6: usbfs: process 11893 (syz-executor.5) did not claim interface 0 before use 00:36:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) 00:36:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001140), 0x600000000000000, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) 00:36:58 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000400), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x21, "06d83e8a5c54248e4644fcfba04f25176f136bbf3a61e771d8a9c4feb941b38da5"}}) 00:36:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) [ 425.685086][T11801] blk_print_req_error: 172 callbacks suppressed [ 425.685104][T11801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 425.721705][T11902] loop0: detected capacity change from 0 to 3 [ 425.760190][T11904] usb usb6: usbfs: process 11904 (syz-executor.5) did not claim interface 0 before use [ 425.777734][T11906] i2c i2c-0: Invalid block write size 33 [ 425.817511][T11902] syz-executor.0: attempt to access beyond end of device [ 425.817511][T11902] loop0: rw=2048, want=8, limit=3 00:36:59 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000a80)="9c", 0x1, r1) r3 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'blake2s-160-generic\x00'}}) 00:36:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) 00:36:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)) 00:36:59 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000400), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x21, "06d83e8a5c54248e4644fcfba04f25176f136bbf3a61e771d8a9c4feb941b38da5"}}) 00:36:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001140), 0x600000000000000, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) [ 425.887418][T11902] SQUASHFS error: Failed to read block 0x0: -5 [ 425.911263][T11902] unable to read squashfs_super_block 00:36:59 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x83, 0xfff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x80000001, r0}, 0x38) 00:36:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) [ 425.953555][T11918] i2c i2c-0: Invalid block write size 33 [ 425.971187][T11919] usb usb6: usbfs: process 11919 (syz-executor.5) did not claim interface 0 before use 00:36:59 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:36:59 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000a80)="9c", 0x1, r1) r3 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'blake2s-160-generic\x00'}}) 00:36:59 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000400), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x21, "06d83e8a5c54248e4644fcfba04f25176f136bbf3a61e771d8a9c4feb941b38da5"}}) 00:36:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001140), 0x600000000000000, 0x2) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) 00:36:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) 00:36:59 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000a80)="9c", 0x1, r1) r3 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'blake2s-160-generic\x00'}}) [ 426.100054][T11930] i2c i2c-0: Invalid block write size 33 [ 426.139499][T11933] usb usb6: usbfs: process 11933 (syz-executor.5) did not claim interface 0 before use 00:36:59 executing program 4: r0 = syz_open_dev$I2C(&(0x7f0000000400), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x21, "06d83e8a5c54248e4644fcfba04f25176f136bbf3a61e771d8a9c4feb941b38da5"}}) 00:36:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) [ 426.166235][T11936] loop0: detected capacity change from 0 to 3 00:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:36:59 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) [ 426.222222][T11936] syz-executor.0: attempt to access beyond end of device [ 426.222222][T11936] loop0: rw=2048, want=8, limit=3 [ 426.252902][T11941] i2c i2c-0: Invalid block write size 33 00:36:59 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000a80)="9c", 0x1, r1) r3 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="7f", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r0, r2}, &(0x7f0000000440)=""/240, 0xf0, &(0x7f0000000840)={&(0x7f0000000080)={'blake2s-160-generic\x00'}}) 00:36:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) [ 426.284451][T11936] SQUASHFS error: Failed to read block 0x0: -5 [ 426.308907][T11936] unable to read squashfs_super_block 00:36:59 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00eb0102000400000012010000000000005707000000000000fb060000000000003f07000000000000e8040000000000001c06000000000000a706000000000000e90600000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727373797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c73797a6b616c6c65727332810200ed0100000100911d675f01000000000000000000000000000000640000000200ed0100000100911d675f030000000000000000000000640000001a0400000300ff0100000100911d675f0400000001000000260000002f746d702f73797a2d696d61676567656e3431393737363339322f66696c65302f66696c65300100ed0100000100911d675f02000000000000000200000029000000070000000900ed0100000100911d675f0500000000000000000000000a00000000000000000000000000000001000000000000007e040000000000000900ed0100000100911d675f0600000060000000000000002823000000000000000000000000000002000000ffffffff00000000ffffffff000000000100c00100000100911d675f07000000000000000300000054002600080000007780010000000000000003000000200000000200040066696c6530400001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c647e0001000100040066696c65309e0004000200040066696c6531d60005000200040066696c6532d60005000200040066696c65331080600000000000000088040001000000009506000000000000388000000000000000007e00000000000000200000000000000040000000000000009e00000000000000d6000000000000001201000000000000af0600000000000008805cf90100535f0100f106000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000030700000000000001000000000000002d07000000000000", 0x757}], 0x0, &(0x7f0000010800)) 00:36:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) 00:36:59 executing program 2: r0 = epoll_create(0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 00:36:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) [ 426.477607][T11959] loop0: detected capacity change from 0 to 3 00:36:59 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}) [ 426.552268][T11959] syz-executor.0: attempt to access beyond end of device [ 426.552268][T11959] loop0: rw=2048, want=8, limit=3 00:36:59 executing program 2: r0 = epoll_create(0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [ 426.608387][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.621185][T11959] SQUASHFS error: Failed to read block 0x0: -5 [ 426.640067][T11959] unable to read squashfs_super_block 00:36:59 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:36:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000057700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:36:59 executing program 2: r0 = epoll_create(0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 00:36:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) 00:36:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 426.748873][T11968] bond0: (slave bond_slave_1): Releasing backup interface 00:37:00 executing program 2: r0 = epoll_create(0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [ 426.853581][T11981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.864275][T11982] loop0: detected capacity change from 0 to 3 [ 426.888976][T11982] syz-executor.0: attempt to access beyond end of device [ 426.888976][T11982] loop0: rw=2048, want=8, limit=3 00:37:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) [ 426.935750][T11982] SQUASHFS error: Failed to read block 0x0: -5 [ 426.964086][T11982] unable to read squashfs_super_block 00:37:00 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000057700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 427.052049][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.111853][T12005] loop0: detected capacity change from 0 to 3 [ 427.131257][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.146327][T12005] syz-executor.0: attempt to access beyond end of device [ 427.146327][T12005] loop0: rw=2048, want=8, limit=3 00:37:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) 00:37:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 427.178565][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.209985][T12005] SQUASHFS error: Failed to read block 0x0: -5 [ 427.237263][T12005] unable to read squashfs_super_block [ 427.305263][T12003] bond0: (slave bond_slave_1): Releasing backup interface 00:37:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:00 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000057700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 427.443777][T12024] loop0: detected capacity change from 0 to 3 00:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) [ 427.491530][T12024] syz-executor.0: attempt to access beyond end of device [ 427.491530][T12024] loop0: rw=2048, want=8, limit=3 [ 427.509029][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.527737][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.579994][T12024] SQUASHFS error: Failed to read block 0x0: -5 [ 427.588960][T12027] bond0: (slave bond_slave_1): Releasing backup interface [ 427.609863][T12024] unable to read squashfs_super_block [ 427.646878][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.680853][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) [ 427.737730][T11671] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:37:00 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000057700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 427.883028][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.918224][T12047] loop0: detected capacity change from 0 to 3 [ 428.006001][T12047] syz-executor.0: attempt to access beyond end of device [ 428.006001][T12047] loop0: rw=2048, want=8, limit=3 00:37:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 428.060711][T12047] SQUASHFS error: Failed to read block 0x0: -5 00:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) [ 428.138846][T12047] unable to read squashfs_super_block 00:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:37:01 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 428.449940][T12080] loop0: detected capacity change from 0 to 3 [ 428.484159][T12080] syz-executor.0: attempt to access beyond end of device [ 428.484159][T12080] loop0: rw=2048, want=8, limit=3 00:37:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 428.500670][T12080] SQUASHFS error: Failed to read block 0x0: -5 [ 428.563204][T12080] unable to read squashfs_super_block 00:37:01 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000200001c09125544873aecc3bef82c77515d457b668009000100626f6e640000f0004b97a6fda31c0b12aa8a9ed7bd3a1c1cd6fbcdbf28857eaccd4a5050f957005a7855d447a6eb38dca60bd687e871fffe12aac052e79355c3c8324b93073200a77572d664e36a0cb6016fd00d9917bc8d5ef98386b74595b779"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x4, 0x3, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x1, 0x20, 0x6, 0x52}}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000500290000003e00"/24], 0x18}}], 0x1, 0x4040870) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000380)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, '@\'$#*:,\'!'}], 0xa, "1770741fd75071aba455a2c26cf6923695b7a5e34d14f2334d0cce62f5e7dbe159789a110c1a7930923fb5cdbe1982f0663ed695e5865a9e259c8f7df1674ed5ca26f88d35ce93a616a73add2c235777e5517ffc57fd8fd39fb04e03da86f5209525199c281ffeccf5b2d21c51b06e2b3beda24be262b72d9f574c2e444713e62a587c396c63c6bd7921abee52ad973e4a533736df55ff969ae5dc55666b176302264e0e275d933503fd2e2cd22cdad30f485a68fb22d66ec9c6d6549965b9fc99bea6a20b09b778e3084a40f150e79565d506aef49dcff1177e72688e16"}, 0xf3) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_newvlan={0x4c, 0x70, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x8000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r4, 0x6194743d07750bdd}, 0x14}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000740)='bbr\x00', 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x1, 0x0, 0x0, 0x3, 0x6}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x100, 0x70bd2d, 0x800, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 00:37:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 428.845035][T12100] loop0: detected capacity change from 0 to 3 00:37:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) [ 428.897971][T12100] syz-executor.0: attempt to access beyond end of device [ 428.897971][T12100] loop0: rw=2048, want=8, limit=3 00:37:02 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 428.970133][T12100] SQUASHFS error: Failed to read block 0x0: -5 [ 428.989297][T12100] unable to read squashfs_super_block 00:37:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:37:02 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00eb0102000400000012010000000000005707000000000000fb060000000000003f07000000000000e8040000000000001c06000000000000a706000000000000e90600000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727373797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c73797a6b616c6c65727332810200ed0100000100911d675f01000000000000000000000000000000640000000200ed0100000100911d675f030000000000000000000000640000001a0400000300ff0100000100911d675f0400000001000000260000002f746d702f73797a2d696d61676567656e3431393737363339322f66696c65302f66696c65300100ed0100000100911d675f02000000000000000200000029000000070000000900ed0100000100911d675f0500000000000000000000000a00000000000000000000000000000001000000000000007e040000000000000900ed0100000100911d675f0600000060000000000000002823000000000000000000000000000002000000ffffffff00000000ffffffff000000000100c00100000100911d675f07000000000000000300000054002600080000007780010000000000000003000000200000000200040066696c6530400001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c647e0001000100040066696c65309e0004000200040066696c6531d60005000200040066696c6532d60005000200040066696c65331080600000000000000088040001000000009506000000000000388000000000000000007e00000000000000200000000000000040000000000000009e00000000000000d6000000000000001201000000000000af0600000000000008805cf90100535f0100f106000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000030700000000000001000000000000002d07000000000000", 0x757}], 0x0, &(0x7f0000010800)) 00:37:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) [ 429.269431][T12119] loop0: detected capacity change from 0 to 3 00:37:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, 0x8000}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffff6}) [ 429.309841][ T6345] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 429.365047][T12119] syz-executor.0: attempt to access beyond end of device [ 429.365047][T12119] loop0: rw=2048, want=8, limit=3 [ 429.378321][T12119] SQUASHFS error: Failed to read block 0x0: -5 [ 429.386270][T12119] unable to read squashfs_super_block 00:37:02 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:37:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:37:02 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) [ 429.563954][T12130] loop0: detected capacity change from 0 to 3 [ 429.636247][T12130] syz-executor.0: attempt to access beyond end of device [ 429.636247][T12130] loop0: rw=2048, want=8, limit=3 [ 429.658268][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 429.658284][ T27] audit: type=1804 audit(1648773422.757:271): pid=12135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=1 errno=0 [ 429.669132][T12130] SQUASHFS error: Failed to read block 0x0: -5 [ 429.686076][ T6345] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 429.692684][T12130] unable to read squashfs_super_block [ 429.738484][ T6345] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 429.758160][ T6345] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 00:37:02 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) [ 429.804613][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 429.832905][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 00:37:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) [ 429.908274][ T27] audit: type=1804 audit(1648773423.007:272): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=1 errno=0 [ 430.090181][ T6345] usb 3-1: string descriptor 0 read error: -22 [ 430.098840][ T6345] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 430.134790][ T6345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.160702][ T6345] usb 3-1: config 0 descriptor?? [ 430.200783][ T6345] hub 3-1:0.0: bad descriptor, ignoring hub [ 430.206774][ T6345] hub: probe of 3-1:0.0 failed with error -5 [ 430.216032][ T6345] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 430.418098][ T5250] usb 3-1: USB disconnect, device number 14 00:37:04 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 00:37:04 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00eb0102000400000012010000000000005707000000000000fb060000000000003f07000000000000e8040000000000001c06000000000000a706000000000000e90600000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727373797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c73797a6b616c6c65727332810200ed0100000100911d675f01000000000000000000000000000000640000000200ed0100000100911d675f030000000000000000000000640000001a0400000300ff0100000100911d675f0400000001000000260000002f746d702f73797a2d696d61676567656e3431393737363339322f66696c65302f66696c65300100ed0100000100911d675f02000000000000000200000029000000070000000900ed0100000100911d675f0500000000000000000000000a00000000000000000000000000000001000000000000007e040000000000000900ed0100000100911d675f0600000060000000000000002823000000000000000000000000000002000000ffffffff00000000ffffffff000000000100c00100000100911d675f07000000000000000300000054002600080000007780010000000000000003000000200000000200040066696c6530400001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c647e0001000100040066696c65309e0004000200040066696c6531d60005000200040066696c6532d60005000200040066696c65331080600000000000000088040001000000009506000000000000388000000000000000007e00000000000000200000000000000040000000000000009e00000000000000d6000000000000001201000000000000af0600000000000008805cf90100535f0100f106000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000030700000000000001000000000000002d07000000000000", 0x757}], 0x0, &(0x7f0000010800)) 00:37:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000404000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 00:37:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:37:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:37:04 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:37:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) [ 430.964280][T12154] loop0: detected capacity change from 0 to 3 [ 430.968898][ T27] audit: type=1804 audit(1648773424.067:273): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=1 errno=0 [ 431.006766][T12154] syz-executor.0: attempt to access beyond end of device 00:37:04 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) [ 431.006766][T12154] loop0: rw=2048, want=8, limit=3 [ 431.019643][T12154] SQUASHFS error: Failed to read block 0x0: -5 [ 431.025975][T12154] unable to read squashfs_super_block 00:37:04 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:04 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xb}, 0xc) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) 00:37:04 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:04 executing program 5: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) [ 431.231717][ T27] audit: type=1804 audit(1648773424.327:274): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1159 res=1 errno=0 [ 431.240663][T12168] loop0: detected capacity change from 0 to 3 00:37:04 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) [ 431.300286][ T4229] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 431.319371][ T27] audit: type=1804 audit(1648773424.397:275): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2474574458/syzkaller.CmiwZy/452/bus" dev="sda1" ino=1173 res=1 errno=0 [ 431.343459][T12168] syz-executor.0: attempt to access beyond end of device [ 431.343459][T12168] loop0: rw=2048, want=8, limit=3 [ 431.386805][T12168] SQUASHFS error: Failed to read block 0x0: -5 [ 431.424280][T12168] unable to read squashfs_super_block [ 431.435813][ T27] audit: type=1804 audit(1648773424.467:276): pid=12174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1159 res=1 errno=0 00:37:04 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 00:37:04 executing program 5: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 00:37:04 executing program 1: r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'netdevsim0\x00', 0x9f3}) [ 431.559870][ T5250] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 431.568358][ T27] audit: type=1804 audit(1648773424.667:277): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2474574458/syzkaller.CmiwZy/453/bus" dev="sda1" ino=1172 res=1 errno=0 [ 431.625179][ T27] audit: type=1804 audit(1648773424.667:278): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1171 res=1 errno=0 [ 431.730193][ T4229] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 431.739017][ T4229] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 431.750297][ T4229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 431.766878][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 431.787166][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 431.979995][ T5250] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 431.988359][ T5250] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 432.002712][ T5250] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 432.012101][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 432.022665][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 432.030132][ T4229] usb 3-1: string descriptor 0 read error: -22 [ 432.038663][ T4229] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 432.048424][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.060174][ T4229] usb 3-1: config 0 descriptor?? [ 432.100846][ T4229] hub 3-1:0.0: bad descriptor, ignoring hub [ 432.106797][ T4229] hub: probe of 3-1:0.0 failed with error -5 [ 432.115662][ T4229] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 432.290113][ T5250] usb 5-1: string descriptor 0 read error: -22 [ 432.296632][ T5250] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 432.320176][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.337631][ T5250] usb 5-1: config 0 descriptor?? [ 432.352169][ T6345] usb 3-1: USB disconnect, device number 15 [ 432.390629][ T5250] hub 5-1:0.0: bad descriptor, ignoring hub [ 432.396553][ T5250] hub: probe of 5-1:0.0 failed with error -5 [ 432.411599][ T5250] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 432.615599][ T6345] usb 5-1: USB disconnect, device number 2 00:37:05 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:05 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 00:37:05 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x25, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:05 executing program 5: creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000580)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680)=@md5={0x1, "6e12d4f500a90192994de0cca395517e"}, 0x11, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) 00:37:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0x41}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x90}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 00:37:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0xd000, 0x9b, &(0x7f0000000040)=""/155}, {0x0, 0xbb, &(0x7f0000000100)=""/187}, {0x6000, 0x0, 0x0}]}) [ 432.906152][ T27] audit: type=1804 audit(1648773426.007:279): pid=12187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2474574458/syzkaller.CmiwZy/454/bus" dev="sda1" ino=1153 res=1 errno=0 [ 432.913162][T12188] loop0: detected capacity change from 0 to 3 [ 432.947537][T12190] xt_socket: unknown flags 0x40 [ 432.971953][ T27] audit: type=1804 audit(1648773426.067:280): pid=12189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1164 res=1 errno=0 [ 433.008285][T12188] syz-executor.0: attempt to access beyond end of device [ 433.008285][T12188] loop0: rw=2048, want=8, limit=3 [ 433.035525][T12188] SQUASHFS error: Failed to read block 0x0: -5 [ 433.060170][T12188] unable to read squashfs_super_block 00:37:06 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 00:37:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0x41}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x90}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 00:37:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0xd000, 0x9b, &(0x7f0000000040)=""/155}, {0x0, 0xbb, &(0x7f0000000100)=""/187}, {0x6000, 0x0, 0x0}]}) 00:37:06 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x36, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) [ 433.235746][ T3661] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 433.261549][T12200] loop0: detected capacity change from 0 to 3 [ 433.269646][T12200] syz-executor.0: attempt to access beyond end of device [ 433.269646][T12200] loop0: rw=2048, want=8, limit=3 00:37:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 433.290118][T12202] xt_socket: unknown flags 0x40 [ 433.342371][T12200] SQUASHFS error: Failed to read block 0x0: -5 [ 433.365182][T12200] unable to read squashfs_super_block [ 433.609926][ T3661] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 433.610056][ T6345] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 433.619684][ T3661] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 433.633958][ T3661] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 433.643026][ T3661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 433.653090][ T3661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 433.900046][ T3661] usb 3-1: string descriptor 0 read error: -22 [ 433.906458][ T3661] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 433.915701][ T3661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.926379][ T3661] usb 3-1: config 0 descriptor?? [ 433.970370][ T3661] hub 3-1:0.0: bad descriptor, ignoring hub [ 433.976389][ T3661] hub: probe of 3-1:0.0 failed with error -5 [ 433.984125][ T3661] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 434.030161][ T6345] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 434.038447][ T6345] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 434.056667][ T6345] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 434.066116][ T6345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 434.076368][ T6345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 434.195644][ T5250] usb 3-1: USB disconnect, device number 16 [ 434.331685][ T6345] usb 5-1: string descriptor 0 read error: -22 [ 434.337947][ T6345] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 434.347081][ T6345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.357103][ T6345] usb 5-1: config 0 descriptor?? [ 434.410609][ T6345] hub 5-1:0.0: bad descriptor, ignoring hub [ 434.416545][ T6345] hub: probe of 5-1:0.0 failed with error -5 [ 434.425523][ T6345] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 434.630418][ T6345] usb 5-1: USB disconnect, device number 3 00:37:07 executing program 2: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0x41}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x90}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 00:37:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0xd000, 0x9b, &(0x7f0000000040)=""/155}, {0x0, 0xbb, &(0x7f0000000100)=""/187}, {0x6000, 0x0, 0x0}]}) 00:37:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 00:37:07 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x3c, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 434.766136][T12216] xt_socket: unknown flags 0x40 [ 434.772211][T12217] loop0: detected capacity change from 0 to 3 [ 434.824786][T12217] syz-executor.0: attempt to access beyond end of device [ 434.824786][T12217] loop0: rw=2048, want=8, limit=3 [ 434.844967][T12217] SQUASHFS error: Failed to read block 0x0: -5 [ 434.852168][T12217] unable to read squashfs_super_block 00:37:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) 00:37:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0x41}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x90}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 00:37:08 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x44, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0xd000, 0x9b, &(0x7f0000000040)=""/155}, {0x0, 0xbb, &(0x7f0000000100)=""/187}, {0x6000, 0x0, 0x0}]}) [ 435.109958][ T3663] usb 3-1: new low-speed USB device number 17 using dummy_hcd 00:37:08 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) 00:37:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) [ 435.179158][T12229] xt_socket: unknown flags 0x40 [ 435.186834][T12230] loop0: detected capacity change from 0 to 3 [ 435.248782][T12230] syz-executor.0: attempt to access beyond end of device [ 435.248782][T12230] loop0: rw=2048, want=8, limit=3 [ 435.304843][T12230] SQUASHFS error: Failed to read block 0x0: -5 [ 435.330096][T12230] unable to read squashfs_super_block [ 435.480171][ T3663] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 435.488459][ T3663] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 435.496637][ T3663] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 435.505739][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 435.515738][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 435.515907][ T143] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 435.770050][ T3663] usb 3-1: string descriptor 0 read error: -22 [ 435.776285][ T3663] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 435.785566][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.796546][ T3663] usb 3-1: config 0 descriptor?? [ 435.840614][ T3663] hub 3-1:0.0: bad descriptor, ignoring hub [ 435.846640][ T3663] hub: probe of 3-1:0.0 failed with error -5 [ 435.855718][ T3663] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 435.912354][ T143] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 435.928123][ T143] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 435.941964][ T143] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 435.951193][ T143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 435.961756][ T143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 436.060519][ T3663] usb 3-1: USB disconnect, device number 17 [ 436.209957][ T143] usb 5-1: string descriptor 0 read error: -22 [ 436.216203][ T143] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 436.225854][ T143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.236535][ T143] usb 5-1: config 0 descriptor?? [ 436.280410][ T143] hub 5-1:0.0: bad descriptor, ignoring hub [ 436.286323][ T143] hub: probe of 5-1:0.0 failed with error -5 [ 436.295317][ T143] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 436.507365][ T3663] usb 5-1: USB disconnect, device number 4 00:37:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)) 00:37:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) 00:37:09 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x63, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}}, 0x0) 00:37:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) [ 436.625237][T12242] loop0: detected capacity change from 0 to 3 [ 436.691377][T12242] syz-executor.0: attempt to access beyond end of device [ 436.691377][T12242] loop0: rw=2048, want=8, limit=3 [ 436.730273][T12242] SQUASHFS error: Failed to read block 0x0: -5 00:37:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:37:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 00:37:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) [ 436.736608][T12242] unable to read squashfs_super_block 00:37:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1}, 0x20) 00:37:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)) 00:37:10 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x85, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717307000000911d675f004000000100000003000e00eb0102000400000012010000000000005707000000000000fb060000000000003f07000000000000e8040000000000001c06000000000000a706000000000000e90600000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727373797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c73797a6b616c6c65727332810200ed0100000100911d675f01000000000000000000000000000000640000000200ed0100000100911d675f030000000000000000000000640000001a0400000300ff0100000100911d675f0400000001000000260000002f746d702f73797a2d696d61676567656e3431393737363339322f66696c65302f66696c65300100ed0100000100911d675f02000000000000000200000029000000070000000900ed0100000100911d675f0500000000000000000000000a00000000000000000000000000000001000000000000007e040000000000000900ed0100000100911d675f0600000060000000000000002823000000000000000000000000000002000000ffffffff00000000ffffffff000000000100c00100000100911d675f07000000000000000300000054002600080000007780010000000000000003000000200000000200040066696c6530400001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c647e0001000100040066696c65309e0004000200040066696c6531d60005000200040066696c6532d60005000200040066696c65331080600000000000000088040001000000009506000000000000388000000000000000007e00000000000000200000000000000040000000000000009e00000000000000d6000000000000001201000000000000af0600000000000008805cf90100535f0100f106000000000000288000000600786174747231060000007861747472310000060078617474723206000000786174747232108000000000000000000200000024000000030700000000000001000000000000002d07000000000000", 0x757}], 0x0, &(0x7f0000010800)) 00:37:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) [ 437.361706][T12265] loop0: detected capacity change from 0 to 3 00:37:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) 00:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4068aea3, &(0x7f0000000000)={0xc000000000000000}) [ 437.450920][T12265] syz-executor.0: attempt to access beyond end of device [ 437.450920][T12265] loop0: rw=2048, want=8, limit=3 00:37:10 executing program 3: futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) [ 437.544689][T12265] SQUASHFS error: Failed to read block 0x0: -5 00:37:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) [ 437.594405][T12265] unable to read squashfs_super_block 00:37:10 executing program 3: futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 00:37:10 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x7c4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) [ 437.632251][ T27] audit: type=1804 audit(1648773430.727:281): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3876611749/syzkaller.u44Ski/62/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 437.843260][T12288] loop0: detected capacity change from 0 to 3 [ 437.861653][T12288] syz-executor.0: attempt to access beyond end of device [ 437.861653][T12288] loop0: rw=2048, want=8, limit=3 [ 437.894622][T12288] SQUASHFS error: Failed to read block 0x0: -5 [ 437.908717][T12288] unable to read squashfs_super_block 00:37:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)) 00:37:11 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "000000000000000200"}}}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000000080001007533320058000200540005"], 0x84}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 00:37:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000002800)=ANY=[], 0xe16, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000002240)={0x0, 0xfb, 0xfbd, 0x0, 0x0, "55681469913cda362e6f6a8915f78a8b", "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"}, 0xfbd, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 00:37:11 executing program 3: futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 00:37:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 00:37:11 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x757, 0x2800, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x757}], 0x0, &(0x7f0000010800)) 00:37:11 executing program 3: futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 00:37:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000002800)=ANY=[], 0xe16, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000002240)={0x0, 0xfb, 0xfbd, 0x0, 0x0, "55681469913cda362e6f6a8915f78a8b", "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"}, 0xfbd, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 00:37:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 00:37:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000002800)=ANY=[], 0xe16, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000002240)={0x0, 0xfb, 0xfbd, 0x0, 0x0, "55681469913cda362e6f6a8915f78a8b", "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"}, 0xfbd, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) [ 438.347163][ T27] audit: type=1804 audit(1648773431.447:282): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3876611749/syzkaller.u44Ski/63/cgroup.controllers" dev="sda1" ino=1149 res=1 errno=0 [ 438.454380][ T27] audit: type=1804 audit(1648773431.557:283): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 00:37:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), &(0x7f0000002800)=ANY=[], 0xe16, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000002240)={0x0, 0xfb, 0xfbd, 0x0, 0x0, "55681469913cda362e6f6a8915f78a8b", "82a4c6730ca273f1c170b0cb96dd484ac4e6478ce03ece71579498be65f8d4d7d9524e03d03802f88c65f54f25fc8412189a100967b7bac7ff1e6bee8fdbe26e800e51dbcd36dc218ae449f9ba5837055d682b58fbe687e9f475770edc256de267c612e39560d8fd6c340dcb49ff55079b2d3d981b4a739dc38d84ed68be0d40e4192a5486d7fa1a1716e462a6875406c62282ecda5183638a32dafd2a3a4703a48998e0faa35055265824da3a1779600ef24409bf3f7a1ccbef8c7b1e3f25addaad4d495e45193cc9af762ab6bdee58791e79d53ee5003a82f15804ae1eaf5cdf4f997a1005715c80f6b86761cadf7df53c005dc56eb3589e47253729e62b4558dfba8b64525076338c09c7478824b560a9ccffceb8b794faffbca6d292d7e181d7c35c551a5ba4caaa4dc7aa2f4e518dd16331c8fa0da23838742c7d806d7249a4a53ae100f5e1edd33fabf7cb710e0b6c34e1ecae7691316707b623a62b0dcdb44620be49f4dade3cf9fe3412ff65891ec2cac111c668b942bd716c91642538b0f056372aa1fdfdde690159f55cf163358a2603c85cfcf66409001c0d6fceffb156ea4f583264c434a2d8478ad6d43ccc5bdac33de4f0e69cf1c2772fefd0a2fb6d171f52dae1199919da07b8b0b8eb9bd227972d77fd62076bd90420ac586f8f3258cc8dddb097a2f8dee920a728174f519c48d054e0b4b8e50d5a3b2a2b4ef6288942d698a0d5bbc0528809fe0cf8eba464b74728eb1fe571814f7372bd9237aedc295686063587182507960e53ee6c261983ac18c8d836d179a3dae3f820e239dea7e592bbe734d1956ed3e982dcdbe180710f6f606a02caca36fb12f3b2d2e041835fa03801e1339e936bf0eff31441275f8dbb4c6f77fa5ff608e9d8b7d8219302c40a53cdae91e26ef1a37dbf49b9570ef1f2a11b69cdf8dc3c63dcffb510575ce0e9e7e1405ec3585312cc372a0a52d1d74227d93b437ffeb46c3e9b4eb0f03a9c3a5024f3673bc2cc368bfddf93886192f09d6f9d86819915f994d115ef58fe91478f13476912605926727bf27c0caa4ff168e3719f221831234bb1af2f4c4099257a39d9932025d39c381e92ffe7c9bdf2638f6236df92aeb7d9b9463502a9d183f19b960f283e3ecbecdb0b0dedc12a9008f88d8cc644b7f3eda287e7361ef50999bf919d32448258d8342040ff4d5a3d31030d6bfb7c99184261966746d3c285a3ec74c912535bb1729d7fd2aefa3af49a37bd8705306a4d71c7b7719741ba3286f7bc3fa58e445976aa1b09e98d0f66428c42db0f63db63ed2265839a5804d2df745b14c5c44e4a6f483496fc05d3721a4fe9f6826a8360e0817e4bc99cc6b12163d33a7791fd1af65c5e1871010004f393e265d4cd26f26f3cee35cab3038fed7cd89fdf76f5065dc95b3bf3205a8e3ef41d48851fcf272624d2dccc65dcb4b59d854ae7acef0660170c8af38924890b172b9b0a4f15a33e348ba91f3aa39e0cfca83d3e984266a2748c6ecc3021cee6f9066f1449ea963a7c0e64da7b9fda28abf06c76e6ecdf0a3cf4232f0772d5bd52a59ff86e6eaea6ce5caa83d6e5fb12edc460f4047ba5112d06fa1f8dfcada5885ef51985c51943aa4c5bfc05804129224fe38f9b3fbe3cdeedd0f5435a830abcc835e27f713c7a59e4fab0ce20cb4e775dd849e34c5d40c803e6f4aac7643de23f254bc1d641fd422875195ca50b73fc83878aed5a7354f5c2a5aa57571220995e3231807ad6d2cf7df11b350c54d2a225c5d4c570a3b1b8f64644bca5a4ab5749d17c1bdad20612d9b397d409426f7e52e1a0d9329c5f502f25ada3a8038ef1e104499c192ea2aec7fcc48fc375aeff7f665dd686a0a11dc7140bb22a400daa832ad65491d638b864e46c5d78b0e12d6318cf6d6f5c122cf91b0e2a6c08bd9a4a1285a7093790ba6c4063c82ded0e96e5c5c4cb0aa6cd38ce447340c8498b7524a3f2a2bb545f586309a3f010ed483b9787345750b2f44eb8391d26968939b7ae1528468f2c61c3c524efea4cf4439c5afb7965d74a719b99e3470b0c52ce5be25854e2fc8ebfd62f49b9b6306a50b2ac5178a77249df7c14d76f54504042318388b8f43bcc3a0b665ae76589de09ddd803c175daf180edd8677e2b9c4fe0147d3428af295ec5173b919e488f8519066b0e95ca664a1b3aa8d6b96b4624915975d44b243a121ddd9cf8c17355c967612b599647b6108a00c639fec594b7089165533484c9f5dd8f5392c70e4218bce64a63a1cc5aeea094f35705c7ecb6a4ff76e8389f959581e409c681eadf22a543e432bf75ad694f9d4460ca885239043932ef15da6f48db59e2ed7e16ded54634b2623b34095ec9ebc72f39c4bef7e74eabacd01eee8b2f03b292b5bc01be342a2324fb1426996955e7f42b61bf0a46e83b5269e8147e18cd451cba2c071e3f92bbd75dd0880ebcc6d14ed6b564d6f3afa7c5d63ec0b5f32bd810ddf0957a6392141324f7b377aa27db5c9d41e8949ad213bb8333b2544a64e789369ff6ebc63eedc718750d6926c9fd303b65accd68582cb7cf6c0c638c44b0c2325f76b92014e0ffc2a5988e08e083474f19867662c5945cd9101d88df08f1e26f0b19675a2d563918a5277baed3d5974f6db2ed6f06b7c67f7c9e61007a478b2c0f095b35f7e017c26a3bf4e6b009b66a29ee6d1387482eced9a34f18169909ef8efd013883a090c69b7b1066a36ded9fa957ec7fca5e89b6cd0b41162dd0338db275a0254a677b193f7b00b8281ec0bd22c5bf587f3ca9cc054bb654d6964bbd584ecea12bae001d748fe1b7e612b95d827692946336ae7a1924e8671fcf753fe7a3ac128b36dc1d27f1b503ab65f5377379cf3111a73d5ab324143b6f4cca46ea362c30f4ce8d215a7d24f0e4482f9442f1c547a99742aa1404cd405612b6e76cd0fd7f14a9a45e41b5ebe0a11b1f1683a0b8eaa49d99f4fe71d2996f3a6aacd9f890533ac956d2b3029e76b8706f0d0c5af97cd8627fe94203ed92ea6474dfdef2ccf4db144c91e5c6b99ba95101f672339bb5aacc2b3bfc7d59d182a8cb2abff255cf3ee0de7585ea2d4fdf5098ce844505929ed6d4158f9158a0b93534fce1c114d3c92d005511bbacd50a85d5fb7968199f9b339f1aaed5fce5c2ef9fab9c446a023db1fc1e796f9a53993660d410915307d41bc4da8dbd6a3a99d390d03c58bcc646c672e38378eed32e4f093afddf8afbbd3706fb0bb320b8b63e1ab23831aef95536a351804d8e692364772c06f47c156b47387535d995f23501025c9b6130570280f4123223c09311a5e96c4b43c3ac27d980e31ff6a916b8b2f910acfd034bffb8c290a7761cfa75cbd8ab956d926267f64c8985084d025e41a60e04f72038699f7af5f6ab2ab68f1aa0d98cab5b252093e4b99d4853fd4c6c83606d2c53af95a98ed1d48a853954c9f8e5b036551b649bbaef920eca3640c1c0a3e7eca033e8d7ef793d0a402b765185a2afcf301b8a90ac7cf473bc261d96b1e405d59d107fb2f50a56a2bcadef7959c89a0958f24a6b80d6c1c987b1eda226eed111cad6a764e260559e230da88773392729d88625cf7c3fefc48e1ba461dcbbaf9d04d463385046760c6c49d677fb3c77f78a2e36fe02a89d37a264006f22d07bd495a8c36b64ac0417907c04ef5e85d22ef5938eb1fa0e371b8ae06386e4d00ff7554ee203f7a8d4d4fa547caee96c8a7c2e15f23d1276b4bbb18b474011c2e2c19d8730f417a707a9f8314b8dd6e9ffc93ec9cfac498ff9c3eb80c946010da98a2b6fcfc5f1266f8929f4196b8207012616f84d2e9d8d43a624f474bf76d1dd418a90e4ba6d6df1308482a6b0cfccfde168789568c0317d2a9d2a90ea3163957bc30c2fd7219242ae0e66771e8d2318a08a47dcabeef188b0743e55baa318bbf0d997d229e006c0ef1967028670ab34d7a369ad7c7971f1ae3edd43dd8354fb3cfca2b425258efb9b9a99a07a5d5524c83d9f070353fe1b73f12e3876239780e2fac7df331c7c18388b3c9a60433262cfdb69c48846f16a6e522a5095bf9add8ff43c5a00947d8625eeb82f6cc0e2b09af31385e9fe025bf58cb0929660229e3876834b958f93c44325d5f0be6d18b75ed609ce69694d809d9b2e334de9724b30214149c4be7cb2ba57fd26b2b24c506d3653494fa8101c18a0e1a7137c2f04047116b00fbf45035fa19abf4d6b0b3f6fa3f1863043f2763e33e2c34dbfd3c31e19d217105db7dda7e12c4530c4bd0ff0a0e39f1490bfdb95ac5bd2fb7ffb4f6c5020f16b7cc27c0de9c9084ea0544e100c3d328c1872148a255a28c2295897d40a8c409df6b77c32dab52ec87f32232b57863261a11a01b7c2b730525f622bc1d9bc52fd0daaa1d720e1a7913fbda1d9d444326009dd45a0ea78dfc14e15432da583cea6e89c8f8d7bfab1c3cfe7c3b516190cd63f8342154193190c28707fb46f564cd62f750fc73f63288ed2d8192866ac824e3e2cca66a72544128fe8ec4d079a7532156e651019a01d92d3bba041c4aff244d2f6973c9aba840b83c244a6bb195640f77de4176c1c8f907f06ac331a6354c2857401b5eae9dbd1104dccddf7d4e69ed74b9c6f707e709936bf9c01e7e97e619f567bc928aa73463e6e473b5f6fa8903a0048048ac6c75503812166649d4f8ff8bf69a1025e887e207d95d9a0f0f7a0fa09a3990ccc0af78f2739ff4ca0f501cf73e1195c6aa05f2c14aee638875e53f3e3c8101e3ad6be767702b509b66840ee955a1516769b4baafaae7b70a76e1266c9cd5f07ecfe4f6c82ede79653004817da4ace6bbfd83517ca24c057ca3f32653a1fdcafe20d77624c38bc547759a0d54be901f677da4b2653ba14ef46df9eca576455a342868744f1b7c8b7cb22bb247fdcb73a6935dd2cb04b957d1eaf87c1591c86f4ca2745ed335c37ba41025543537371c8ffb2f0b31d3e22b765f9e35649b7278adaa748eac7aba3e6c53d4feb58e8379da3cc590c81efbd4331ae3dde5211d3c74f5d26938edb7e8ea9bf50a15718e8e531d943840786927d14ac0ed4fc1e0b3bc2abf38a5fed39ca26213b927148d77cd019caca524553d164b052b9ad1ac346a19b651d3c044fcad79bef12ce79746bf03656b9c6e452d6fa21e5026aa344df1fc53b9ff90abab8a33386857b53f2b930af28a80357f774d7f1f6ff940c25849a8757683bf67b468a2be04c66f2e194df346dd98d0d1279a674664a76220ae29d091909c72d8f5921a7e87c10f74fce8203d59d881e5d4c85710a57b40d58b2ec2c04c5f06661af89f5ef0a046e5d1a0ed74fb56de7cc8d061832cb521ab2d5f08d85c8cd45a5ce39b4380f20b05f4dceed3631d614b33d5bf853bd506801d7bb359f14acc3b36c35758033768eac8d4b5ae0e8d8359798e5e9b6ce866e850475c25849303aa0f6d1d73283d5b109f41694bb40563ce40eb0c4f9862ee0b855ec6a508966542c3c4fc64fa93576436eb9e8d9d3657764be7268d6ef5bd2033b324639d7da2d48f026891aa56b0ba6a2679ee5b935d2aaabb0432e90291460bfc4273e4fe103a39769d8c169e1ad689024f9b36b16222e03a5de1ec41477111c6a9eabe5dc4317c8e2e662fca48c39817ee8b314b7429d36c7"}, 0xfbd, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) [ 438.543474][T12300] loop0: detected capacity change from 0 to 264192 [ 438.593263][T12300] ------------[ cut here ]------------ [ 438.622654][T12300] WARNING: CPU: 1 PID: 12300 at block/bio.c:229 bio_free+0xe8/0x120 00:37:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) [ 438.640593][T12300] Modules linked in: [ 438.654301][T12300] CPU: 1 PID: 12300 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 438.671443][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.691009][T12300] RIP: 0010:bio_free+0xe8/0x120 [ 438.708426][T12300] Code: fa 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 20 8b 45 08 48 83 c4 08 48 29 c3 48 89 df 5b 5d e9 fd be cb fd e8 a8 af a3 fd <0f> 0b e9 51 ff ff ff 48 89 34 24 e8 e8 57 ef fd 48 8b 34 24 eb d1 [ 438.790084][T12300] RSP: 0018:ffffc90010347ac0 EFLAGS: 00010212 [ 438.804624][T12300] RAX: 00000000000098c5 RBX: ffff8880238cac00 RCX: ffffc9001245a000 [ 438.845389][T12300] RDX: 0000000000040000 RSI: ffffffff83d57848 RDI: ffff8880238cac80 [ 438.855921][T12300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.865327][T12300] R10: ffffffff83d57915 R11: 0000000000000000 R12: 0000000000000060 [ 438.873889][T12300] R13: 0000000000000060 R14: 0000000000001000 R15: 0000000000000060 [ 438.890100][T12300] FS: 00007f01ce9fe700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 438.902745][T12300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.914845][T12300] CR2: 0000001b2da58000 CR3: 000000001b1af000 CR4: 00000000003506e0 00:37:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)) [ 438.922993][ T27] audit: type=1804 audit(1648773432.017:284): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3114796445/syzkaller.So0iIc/64/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 438.957297][T12300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.968210][T12300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.992657][T12300] Call Trace: [ 438.996547][T12300] [ 438.999648][T12300] bio_put+0x20e/0x3b0 [ 439.012517][T12300] squashfs_read_data+0x2ce/0xed0 [ 439.029420][T12300] ? squashfs_bio_read+0x470/0x470 [ 439.060390][T12300] ? rcu_read_lock_sched_held+0x3a/0x70 [ 439.068855][T12300] ? __kasan_kmalloc+0xa9/0xd0 [ 439.076407][T12300] squashfs_read_table+0x184/0x1f0 [ 439.087548][T12300] squashfs_fill_super+0x337/0x2690 [ 439.099634][T12300] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 439.106780][T12300] ? set_blocksize+0x2e5/0x370 [ 439.117807][T12300] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 439.126225][T12300] get_tree_bdev+0x440/0x760 [ 439.140234][T12300] ? squashfs_init_fs_context+0xd0/0xd0 [ 439.149443][T12300] vfs_get_tree+0x89/0x2f0 [ 439.154673][T12300] path_mount+0x1320/0x1fa0 [ 439.159441][T12300] ? kmem_cache_free+0xdd/0x5a0 [ 439.165037][T12300] ? finish_automount+0xaf0/0xaf0 [ 439.170587][T12300] ? putname+0xfe/0x140 [ 439.174988][T12300] __x64_sys_mount+0x27f/0x300 [ 439.189933][T12300] ? copy_mnt_ns+0xae0/0xae0 [ 439.194760][T12300] ? syscall_enter_from_user_mode+0x21/0x70 [ 439.208932][T12300] do_syscall_64+0x35/0x80 [ 439.224090][T12300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 439.239834][T12300] RIP: 0033:0x7f01cfa8a57a [ 439.244468][T12300] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 439.265931][T12300] RSP: 002b:00007f01ce9fdf88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 439.286067][T12300] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa8a57a [ 439.302384][T12300] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f01ce9fdfe0 [ 439.339185][T12300] RBP: 00007f01ce9fe020 R08: 00007f01ce9fe020 R09: 0000000020000000 [ 439.351890][T12300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 439.360426][T12300] R13: 0000000020000100 R14: 00007f01ce9fdfe0 R15: 0000000020010800 [ 439.368539][T12300] [ 439.372142][T12300] Kernel panic - not syncing: panic_on_warn set ... [ 439.378771][T12300] CPU: 1 PID: 12300 Comm: syz-executor.0 Not tainted 5.17.0-next-20220331-syzkaller #0 [ 439.388416][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.398482][T12300] Call Trace: [ 439.401762][T12300] [ 439.404698][T12300] dump_stack_lvl+0xcd/0x134 [ 439.409312][T12300] panic+0x2d7/0x636 [ 439.413230][T12300] ? panic_print_sys_info.part.0+0x10b/0x10b [ 439.419243][T12300] ? __warn.cold+0x1d1/0x2c5 [ 439.423857][T12300] ? bio_free+0xe8/0x120 [ 439.428126][T12300] __warn.cold+0x1e2/0x2c5 [ 439.432567][T12300] ? bio_free+0xe8/0x120 [ 439.436835][T12300] report_bug+0x1bd/0x210 [ 439.441228][T12300] handle_bug+0x3c/0x60 [ 439.445399][T12300] exc_invalid_op+0x14/0x40 [ 439.449918][T12300] asm_exc_invalid_op+0x12/0x20 [ 439.454782][T12300] RIP: 0010:bio_free+0xe8/0x120 [ 439.459660][T12300] Code: fa 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 20 8b 45 08 48 83 c4 08 48 29 c3 48 89 df 5b 5d e9 fd be cb fd e8 a8 af a3 fd <0f> 0b e9 51 ff ff ff 48 89 34 24 e8 e8 57 ef fd 48 8b 34 24 eb d1 [ 439.479278][T12300] RSP: 0018:ffffc90010347ac0 EFLAGS: 00010212 00:37:12 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "000000000000000200"}}}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x67) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000000008000000080001007533320058000200540005"], 0x84}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 00:37:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) [ 439.485352][T12300] RAX: 00000000000098c5 RBX: ffff8880238cac00 RCX: ffffc9001245a000 [ 439.493335][T12300] RDX: 0000000000040000 RSI: ffffffff83d57848 RDI: ffff8880238cac80 [ 439.501313][T12300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.509283][T12300] R10: ffffffff83d57915 R11: 0000000000000000 R12: 0000000000000060 [ 439.517242][T12300] R13: 0000000000000060 R14: 0000000000001000 R15: 0000000000000060 [ 439.525220][T12300] ? bio_put+0x95/0x3b0 [ 439.529386][T12300] ? bio_free+0xe8/0x120 [ 439.533674][T12300] bio_put+0x20e/0x3b0 00:37:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) 00:37:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001505050505050"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "e9"}]}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0x100000004) [ 439.537772][T12300] squashfs_read_data+0x2ce/0xed0 [ 439.542827][T12300] ? squashfs_bio_read+0x470/0x470 [ 439.547960][T12300] ? rcu_read_lock_sched_held+0x3a/0x70 [ 439.553532][T12300] ? __kasan_kmalloc+0xa9/0xd0 [ 439.558313][T12300] squashfs_read_table+0x184/0x1f0 [ 439.563460][T12300] squashfs_fill_super+0x337/0x2690 [ 439.568683][T12300] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 439.574428][T12300] ? set_blocksize+0x2e5/0x370 [ 439.579224][T12300] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 439.585497][T12300] get_tree_bdev+0x440/0x760 [ 439.590102][T12300] ? squashfs_init_fs_context+0xd0/0xd0 [ 439.595671][T12300] vfs_get_tree+0x89/0x2f0 [ 439.600106][T12300] path_mount+0x1320/0x1fa0 [ 439.604625][T12300] ? kmem_cache_free+0xdd/0x5a0 [ 439.609507][T12300] ? finish_automount+0xaf0/0xaf0 [ 439.614552][T12300] ? putname+0xfe/0x140 [ 439.618737][T12300] __x64_sys_mount+0x27f/0x300 [ 439.623517][T12300] ? copy_mnt_ns+0xae0/0xae0 [ 439.628125][T12300] ? syscall_enter_from_user_mode+0x21/0x70 [ 439.634049][T12300] do_syscall_64+0x35/0x80 [ 439.638489][T12300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 439.644410][T12300] RIP: 0033:0x7f01cfa8a57a [ 439.648839][T12300] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 439.660429][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.660475][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.680909][T12300] RSP: 002b:00007f01ce9fdf88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 439.689341][T12300] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f01cfa8a57a [ 439.697339][T12300] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f01ce9fdfe0 [ 439.705321][T12300] RBP: 00007f01ce9fe020 R08: 00007f01ce9fe020 R09: 0000000020000000 [ 439.713302][T12300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 439.721280][T12300] R13: 0000000020000100 R14: 00007f01ce9fdfe0 R15: 0000000020010800 [ 439.729280][T12300] [ 439.732694][T12300] Kernel Offset: disabled [ 439.737206][T12300] Rebooting in 86400 seconds..